Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/1C236FDEE51411EFA6CE3C1EC4F9AE02.roa
File:                     1C236FDEE51411EFA6CE3C1EC4F9AE02.roa (raw, json)
Hash identifier:          dz5htNtz6B/YK8WvexH2V0gl/URlN+hf24kH7PZk6Yw=
Subject key identifier:   38:7F:0C:E6:55:0F:E9:D3:80:ED:85:13:15:CF:E5:2B:0B:FD:1E:0A
Certificate issuer:       /CN=A91AA618/serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
Certificate serial:       013E
Authority key identifier: C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/1C236FDEE51411EFA6CE3C1EC4F9AE02.roa
Signing time:             Thu 23 Jul 2026 06:32:33 +0000
ROA not before:           Thu 23 Jul 2026 06:32:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139922
IP address blocks:        160.250.254.0/23 maxlen: 23
                          160.250.254.0/24 maxlen: 24
                          160.250.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl
                          rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA618, serialNumber=C13A8ABD57043AAFA58F5853BE2FABCA9F26F0ED
        Validity
            Not Before: Jul 23 06:32:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a61b581-edc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:66:d8:63:7d:68:75:ae:69:f5:15:d0:ef:0a:
                    f6:a5:cf:f3:44:70:c2:c8:ca:36:ea:75:f4:08:a7:
                    24:85:ef:08:f0:3b:92:b3:8d:1e:2c:35:da:3c:fd:
                    01:1d:53:1b:70:44:69:98:f4:04:43:55:a9:4e:6a:
                    5f:42:d9:48:f2:1f:73:bd:f5:b3:3e:6a:b4:4a:ff:
                    6b:51:a0:4e:52:35:47:a4:4a:92:86:ea:fc:9f:56:
                    93:b3:42:77:f5:b4:c0:0d:b9:57:18:09:df:d2:37:
                    e6:88:32:f1:8e:66:d2:03:42:f6:0d:6b:c6:09:48:
                    e3:d2:aa:ca:61:7c:5f:e0:0b:d1:f0:ff:48:2c:51:
                    c0:11:f8:e0:62:6c:c6:af:39:71:91:3c:10:67:2c:
                    4c:14:2c:42:93:21:b2:b5:42:b2:5b:07:27:c7:55:
                    fd:ac:55:f5:e7:16:32:0f:60:42:d2:44:25:0b:e9:
                    6c:22:a3:3a:45:82:48:6b:4d:50:ea:64:bd:7f:a4:
                    8a:71:63:2b:eb:87:f3:97:8c:2e:b7:0b:41:93:22:
                    e4:54:63:36:ab:4d:99:3d:09:8f:99:47:2f:f0:96:
                    7b:28:25:ba:e6:9d:b0:60:1d:b4:05:bf:5a:01:71:
                    42:5c:ee:e4:05:36:fb:ba:39:3b:93:21:44:b7:10:
                    73:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7F:0C:E6:55:0F:E9:D3:80:ED:85:13:15:CF:E5:2B:0B:FD:1E:0A
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8A:BD:57:04:3A:AF:A5:8F:58:53:BE:2F:AB:CA:9F:26:F0:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/wTqKvVcEOq-lj1hTvi-ryp8m8O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wTqKvVcEOq-lj1hTvi-ryp8m8O0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA618/E6F66DD2BEC311EFAFDC1D29C4F9AE02/1C236FDEE51411EFA6CE3C1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:96:e7:57:92:3b:43:1c:d3:c8:14:ce:f9:09:c2:fc:fb:4a:
         4b:c1:0c:c9:e8:ce:d6:19:9c:3b:a6:64:b4:40:7a:87:30:54:
         95:08:cb:11:44:e1:ba:f7:64:2f:10:51:75:ec:f8:7c:f9:5d:
         1f:36:98:15:ad:00:95:75:b6:00:24:bd:f8:d7:c5:40:6a:51:
         6c:e8:d2:a4:e0:b7:d4:5f:aa:2a:0a:32:fd:da:be:bd:bc:45:
         e8:28:10:14:81:85:3d:6d:2d:cc:de:d9:5c:81:92:f0:cf:56:
         4a:e6:0b:b8:2c:b8:33:6c:09:43:d6:04:d6:55:c6:48:cd:ca:
         27:80:9b:59:18:f2:ff:65:d4:14:c6:ac:cc:64:7a:27:8b:4a:
         9f:72:bd:f4:18:92:d2:f5:c0:ff:9d:dc:bd:39:35:c9:c3:eb:
         d9:00:84:a5:5c:a7:6f:08:9a:74:ff:c0:47:0c:68:0c:93:ed:
         c2:6c:ed:ce:1e:ce:d3:73:31:fc:85:28:5d:83:17:77:3f:2f:
         87:13:ec:c4:4e:18:36:1c:08:07:d6:5a:f1:91:3b:b4:9c:6f:
         16:41:7a:10:5f:b6:31:88:8e:12:41:df:19:c7:14:63:bf:c0:
         ac:4c:b2:f3:5d:26:eb:01:5d:03:f4:4e:aa:b0:e4:42:42:c1:
         48:a9:fd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:39:41 2026 by rpki-client