Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DE3EC424979411EF875EE369C4F9AE02.roa
File:                     DE3EC424979411EF875EE369C4F9AE02.roa (raw, json)
Hash identifier:          ABsCvP/nq1vr+i6Lb6MUCbTlJCetbSyWCBi0FAUziSE=
Subject key identifier:   F5:34:A9:B0:9C:99:81:7C:42:DD:07:78:1E:53:E6:67:2D:F8:CC:3E
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       0186
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DE3EC424979411EF875EE369C4F9AE02.roa
Signing time:             Tue 03 Nov 2026 05:53:35 +0000
ROA not before:           Tue 03 Nov 2026 05:53:35 +0000
ROA not after:            Mon 31 Jan 2028 00:00:00 +0000
asID:                     153371
IP address blocks:        160.191.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 04:47:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Nov  3 05:53:35 2026 GMT
            Not After : Jan 31 00:00:00 2028 GMT
        Subject: CN=6ae976df-1e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:e9:c2:55:c2:72:ab:8c:5b:e5:6f:a1:8d:
                    8a:50:ed:17:a7:4a:ef:d8:d7:7a:d6:68:79:e6:70:
                    cf:ff:50:f1:f3:c7:c1:97:1a:7e:8e:90:69:ea:73:
                    d2:07:a8:51:79:d3:cf:0b:46:dc:50:cb:44:dd:0b:
                    a7:51:55:85:aa:44:e6:9d:0a:1a:ac:71:e3:f7:85:
                    83:e2:56:bc:c8:dd:11:9e:9e:ff:27:50:9d:56:18:
                    f1:ac:0a:5a:f7:ce:4f:d9:32:83:76:ec:13:7f:83:
                    01:4d:a6:cc:60:3a:67:9e:f6:10:74:40:77:68:0e:
                    15:42:ec:f3:2a:60:7c:dc:8e:9a:41:ee:27:19:c9:
                    01:1b:f3:ce:af:5e:dd:b7:1d:f3:d0:79:6c:cf:b4:
                    8f:aa:3a:52:5b:47:4f:e7:60:62:95:9a:db:68:db:
                    17:dd:c8:3b:bb:f3:60:31:dc:6b:ca:7b:f6:4b:e9:
                    67:7e:6c:be:49:ea:ac:27:97:99:87:2c:fd:72:05:
                    20:d3:1b:e2:af:c3:f1:93:74:41:13:90:c6:1b:8b:
                    b8:f1:f0:16:28:06:3f:b2:2d:2b:19:3e:30:3c:66:
                    ee:ec:1a:b2:3a:fc:c4:4b:9b:91:2b:d4:c9:03:d3:
                    91:88:d0:00:15:28:58:b6:97:95:31:30:55:4b:61:
                    05:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:A9:B0:9C:99:81:7C:42:DD:07:78:1E:53:E6:67:2D:F8:CC:3E
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/DE3EC424979411EF875EE369C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:2a:ea:0d:5f:2a:01:92:42:13:2e:0d:c4:5c:72:1d:1e:ac:
         b9:76:e6:8c:2a:eb:87:36:f5:b4:ac:ea:a2:29:e3:c4:8e:2e:
         5a:19:95:0b:db:92:ff:cb:b1:cd:19:fe:02:41:2c:70:c5:eb:
         cc:eb:52:d9:e1:e7:d0:ed:1d:2e:85:43:8a:57:6c:c0:54:76:
         a2:c3:e8:29:1a:84:d5:60:69:82:07:34:7b:3e:a8:23:1b:d3:
         a6:00:de:31:40:67:af:a3:50:27:4b:49:25:a4:60:f1:ba:56:
         f6:6f:1e:05:76:f0:2c:0c:36:01:2c:a6:24:89:31:c3:c1:5b:
         1d:42:ea:99:66:0d:fa:78:a5:c7:87:b4:ca:e3:c1:72:0c:d0:
         13:1c:65:22:6f:45:26:cf:12:4d:24:b4:81:bc:1e:e9:fc:15:
         92:cc:2c:8e:53:00:19:ee:0e:64:52:5b:9c:98:dd:4a:93:a8:
         93:65:ae:6c:52:d0:ae:8b:c4:8f:9b:fe:e0:a0:a5:17:78:c5:
         5d:ac:10:b7:d6:30:38:4c:6e:ba:c2:b4:07:b0:27:8b:ed:d6:
         26:30:a4:65:a1:87:9a:22:da:49:d8:92:93:2c:e3:eb:6a:15:
         a3:c6:13:c4:b3:fe:47:8e:0c:45:4f:6b:d6:6a:5e:9e:dd:08:
         ab:1f:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:27 2026 by rpki-client