Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/03C24D0680E611F1A15EA29461A30FBC.roa
File:                     03C24D0680E611F1A15EA29461A30FBC.roa (raw, json)
Hash identifier:          u7JbDFz3qAshRF4caNqctdr/Pu6iadoZfhpdKTIEvOY=
Subject key identifier:   56:44:FC:36:D1:81:3E:E5:5C:40:A0:51:05:D1:D5:B3:59:3D:25:90
Certificate issuer:       /CN=A9198A90/serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
Certificate serial:       10
Authority key identifier: DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/03C24D0680E611F1A15EA29461A30FBC.roa
Signing time:             Wed 22 Jul 2026 03:14:15 +0000
ROA not before:           Wed 22 Jul 2026 03:14:15 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132698
IP address blocks:        160.236.124.0/24 maxlen: 24
                          162.4.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl
                          rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:16:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198A90, serialNumber=DC7A7D0B9A01BF85E89A2717F3B966D99E45F7E7
        Validity
            Not Before: Jul 22 03:14:15 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a603587-060e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:1d:82:23:30:c8:03:41:cf:80:a1:c8:b1:
                    4a:df:9a:66:7b:84:e8:9e:90:53:26:d2:c1:de:b3:
                    11:03:6c:c7:cb:f6:28:6b:87:5e:f1:5c:5c:52:57:
                    2a:8d:84:0e:e9:7e:d6:ed:9e:2b:3b:99:b0:07:06:
                    c5:4d:7b:ec:50:36:a2:96:79:ca:b4:81:a1:8f:9f:
                    37:17:8a:24:4d:a7:1d:b4:e3:72:1a:a4:d7:fe:a8:
                    fb:4d:8f:a8:b5:ed:50:c7:41:cb:01:9b:4c:e0:81:
                    22:9a:34:33:d8:69:95:14:ca:30:5b:e1:48:22:66:
                    0f:7d:a5:1c:c8:3b:63:6a:4d:92:f7:a0:18:af:13:
                    52:ff:ac:9b:81:40:c4:35:c3:14:71:9c:01:3c:18:
                    b2:2f:0e:b8:92:48:d8:bb:14:2f:20:dc:72:6b:f6:
                    9d:98:38:2b:06:a7:9f:13:c9:36:e4:24:43:fd:79:
                    74:e6:54:cd:56:c7:21:3b:44:da:6d:df:f6:ba:42:
                    4b:1d:30:00:41:12:84:de:0a:af:57:35:33:5e:a7:
                    16:ea:ab:12:9d:90:56:81:b8:ae:1a:2d:13:f3:e6:
                    b6:b4:bc:cd:18:6b:07:d6:60:59:30:0f:e7:27:72:
                    6d:55:7b:ea:91:2c:f0:80:21:80:cc:06:54:e8:92:
                    ae:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:FC:36:D1:81:3E:E5:5C:40:A0:51:05:D1:D5:B3:59:3D:25:90
            X509v3 Authority Key Identifier:
                keyid:DC:7A:7D:0B:9A:01:BF:85:E8:9A:27:17:F3:B9:66:D9:9E:45:F7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/3Hp9C5oBv4XomicX87lm2Z5F9-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3Hp9C5oBv4XomicX87lm2Z5F9-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198A90/4D83954C7B9311F1A6E76D196FA30FBC/03C24D0680E611F1A15EA29461A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.124.0/24
                  162.4.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:ec:e4:fb:ee:45:bf:d0:2f:ef:4f:92:b2:85:97:ed:91:
         c9:9f:39:7a:6b:6d:c6:b3:b7:b0:65:59:5e:bc:40:f4:e6:7a:
         65:59:47:a5:bd:82:c1:0f:6b:51:d6:6b:4b:87:69:be:0e:f4:
         e0:25:d0:8f:43:09:bf:b2:6d:d0:fe:26:61:52:f9:08:21:8c:
         10:0b:9b:bc:19:10:00:05:f7:fb:5d:47:0f:bc:eb:68:b6:12:
         7b:02:db:9a:8f:f5:e8:b0:99:8a:26:2f:3e:cc:2b:83:96:db:
         0d:2f:35:93:f2:f1:14:ba:b6:0f:f6:8d:9c:e0:da:d8:17:9d:
         17:7a:2d:d8:5a:02:46:68:08:4a:64:89:fa:ed:d7:a9:a8:5a:
         5c:bf:9b:5c:c6:c2:17:0e:c1:8d:95:16:b8:cf:fd:a4:1b:dd:
         e3:16:8c:7d:92:ec:d3:9e:a8:f2:56:d3:3c:c5:5f:59:01:5e:
         f6:3d:e8:4f:f5:ea:4a:1d:e5:51:6e:8b:fa:c1:f5:be:f1:43:
         fd:ec:9b:03:4f:10:7d:6b:4a:86:8f:f4:bc:53:cd:91:92:d7:
         5b:e1:1c:99:0d:09:62:cd:12:f4:f8:d3:ce:f4:c8:ac:be:10:
         d6:c5:aa:8d:cd:6b:a1:40:91:01:08:c1:31:4d:3c:ec:1f:c3:
         3f:ec:01:01
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
OEE5MDExMC8GA1UEBRMoREM3QTdEMEI5QTAxQkY4NUU4OUEyNzE3RjNCOTY2RDk5
RTQ1RjdFNzAeFw0yNjA3MjIwMzE0MTVaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNjAzNTg3LTA2MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxax2CIzDIA0HPgKHIsUrfmmZ7hOiekFMm0sHesxEDbMfL9ihrh17xXFxSVyqN
hA7pftbtnis7mbAHBsVNe+xQNqKWecq0gaGPnzcXiiRNpx2043IapNf+qPtNj6i1
7VDHQcsBm0zggSKaNDPYaZUUyjBb4UgiZg99pRzIO2NqTZL3oBivE1L/rJuBQMQ1
wxRxnAE8GLIvDriSSNi7FC8g3HJr9p2YOCsGp58TyTbkJEP9eXTmVM1WxyE7RNpt
3/a6QksdMABBEoTeCq9XNTNepxbqqxKdkFaBuK4aLRPz5ra0vM0YawfWYFkwD+cn
cm1Ve+qRLPCAIYDMBlTokq6XAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUVkT8NtGB
PuVcQKBRBdHVs1k9JZAwHwYDVR0jBBgwFoAU3Hp9C5oBv4XomicX87lm2Z5F9+cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk4QTkwLzREODM5NTRDN0I5
MzExRjFBNkU3NkQxOTZGQTMwRkJDLzNIcDlDNW9CdjRYb21pY1g4N2xtMlo1Rjkt
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvM0hwOUM1b0J2NFhvbWljWDg3bG0yWjVGOS1jLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OEE5MC80RDgzOTU0QzdCOTMxMUYxQTZFNzZEMTk2RkEzMEZCQy8wM0MyNEQwNjgw
RTYxMUYxQTE1RUEyOTQ2MUEzMEZCQy5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE
AgABMAwDBACg7HwDBACiBJswDQYJKoZIhvcNAQELBQADggEBAE6z7OT77kW/0C/v
T5KyhZftkcmfOXprbcazt7BlWV68QPTmemVZR6W9gsEPa1HWa0uHab4O9OAl0I9D
Cb+ybdD+JmFS+QghjBALm7wZEAAF9/tdRw+862i2EnsC25qP9eiwmYomLz7MK4OW
2w0vNZPy8RS6tg/2jZzg2tgXnRd6LdhaAkZoCEpkifrt16moWly/m1zGwhcOwY2V
FrjP/aQb3eMWjH2S7NOeqPJW0zzFX1kBXvY96E/16kod5VFui/rB9b7xQ/3smwNP
EH1rSoaP9LxTzZGS11vhHJkNCWLNEvT40870yKy+ENbFqo3Na6FAkQEIwTFNPOwf
wz/sAQE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:56:23 2026 by rpki-client