Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa
File:                     E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa (raw, json)
Hash identifier:          NqE9i46L1vG7UOkedUiFkp1Yy9rxKpf9fmQ7FVuJqeY=
Subject key identifier:   70:53:E8:DD:AD:29:8D:4E:F9:E2:5E:06:E6:F1:EE:11:83:AF:39:12
Certificate issuer:       /CN=A91B0DE0/serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
Certificate serial:       0185
Authority key identifier: 8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa
Signing time:             Fri 11 Sep 2026 04:56:12 +0000
ROA not before:           Fri 11 Sep 2026 04:56:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     153310
IP address blocks:        160.30.238.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl
                          rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0DE0, serialNumber=8EA5B9563227C2E58D438BC17BA822507542443B
        Validity
            Not Before: Sep 11 04:56:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa389eb-a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:45:52:d5:c9:35:6b:cb:10:e5:14:1e:92:9e:
                    b9:82:68:62:b5:69:38:2a:9c:bd:ba:d7:12:d3:c6:
                    80:ff:7f:d6:5a:05:a7:3e:9c:6d:a4:4e:ba:be:22:
                    e5:2c:f9:42:3d:4d:48:7e:e1:e3:29:60:cb:59:e8:
                    8a:21:18:3a:25:a9:4d:fe:9f:5e:01:85:27:b5:75:
                    71:8c:7f:8d:a2:33:e5:69:c5:69:a3:8f:4a:5a:f0:
                    d6:f9:e8:74:d4:9e:c9:fa:69:de:c5:56:cd:3c:66:
                    13:4f:5f:5a:88:dd:29:8e:e0:f6:ca:0c:ff:0c:51:
                    59:71:73:20:e6:71:cf:1b:b0:c9:78:ad:b2:d4:dd:
                    a8:13:f8:6f:e6:35:62:ad:fb:0f:5b:be:3a:0e:a3:
                    bc:f7:8e:ee:94:96:7b:a6:77:ec:0c:78:08:57:d6:
                    60:7d:05:c0:17:70:89:28:21:7a:58:ef:82:5b:d3:
                    23:03:d6:15:9e:d0:41:bb:db:70:19:cb:bc:85:b5:
                    21:15:d9:e3:2f:ea:5e:d7:d5:0a:e8:af:3a:8b:69:
                    34:1d:96:0c:f4:6e:96:3f:9e:d4:a7:29:1a:70:34:
                    b6:4f:f9:9a:ea:04:5a:47:be:3b:2e:92:c4:8b:ca:
                    c2:5e:aa:e8:ef:f6:07:56:23:6e:e2:b2:cc:7c:49:
                    89:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:53:E8:DD:AD:29:8D:4E:F9:E2:5E:06:E6:F1:EE:11:83:AF:39:12
            X509v3 Authority Key Identifier:
                keyid:8E:A5:B9:56:32:27:C2:E5:8D:43:8B:C1:7B:A8:22:50:75:42:44:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/jqW5VjInwuWNQ4vBe6giUHVCRDs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/jqW5VjInwuWNQ4vBe6giUHVCRDs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0DE0/7040A8E86A8511EFB1568147C4F9AE02/E569D6DA6A8511EF9DB1CD4DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:76:35:c7:df:d2:56:5b:9f:88:c6:64:6e:35:b0:b7:7e:47:
         de:5e:9e:f3:8c:cd:e5:2b:c3:14:d9:73:b7:69:d5:02:38:58:
         18:5b:33:cc:08:44:b7:19:49:c6:c0:d2:5d:25:a7:78:12:6c:
         11:b8:58:63:c1:14:e5:28:95:4b:f2:0c:16:34:b7:5e:7e:36:
         95:f5:6b:d4:ef:9e:f1:b8:58:1f:2e:a6:24:45:12:b3:39:49:
         5e:79:04:fc:e1:8d:25:b7:42:42:85:1b:fd:d6:2d:00:7b:4d:
         8b:bb:c3:8d:5d:fa:3d:74:24:0d:6e:8b:63:41:4e:a5:49:a0:
         a5:6a:d8:e9:28:70:c1:fb:bf:5e:26:24:93:6f:fb:b4:d5:d7:
         a9:b8:58:ec:53:22:ed:54:56:64:75:aa:ec:0e:ab:44:c7:7e:
         d6:84:11:4f:dc:cc:b8:a7:c1:2e:2f:45:c3:e4:7a:93:b0:f2:
         6d:5f:19:35:09:8f:65:29:7e:bb:85:42:30:2a:22:67:0d:32:
         47:ef:a5:12:d7:3a:1d:63:8f:b1:2d:08:bc:e2:6b:5c:a5:03:
         af:1a:b3:d9:68:85:74:70:3b:7b:43:7c:f8:26:f9:4b:90:1f:
         57:50:58:92:d7:f6:74:fd:9e:41:36:e9:b1:9b:b3:9b:6d:a6:
         2f:c5:e8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:45:46 2026 by rpki-client