Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EA810E6278FA11EF9043060AC4F9AE02.roa
File:                     EA810E6278FA11EF9043060AC4F9AE02.roa (raw, json)
Hash identifier:          cb0xCHL1dV5N7XyIruiC/PJxxp8M1xlcJSMtvdRnQog=
Subject key identifier:   C9:2B:5D:7D:87:8D:A0:F5:43:FD:A4:97:E7:D1:8B:CE:2A:E5:99:A1
Certificate issuer:       /CN=A91B1E55/serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
Certificate serial:       011D
Authority key identifier: DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EA810E6278FA11EF9043060AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:03:33 +0000
ROA not before:           Tue 25 Nov 2025 03:51:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141346
IP address blocks:        160.187.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl
                          rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1E55, serialNumber=DD7C8D0F478F9BE6ABF739C04F5B5BE4DC9F61F8
        Validity
            Not Before: Nov 25 03:51:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a598b5-5554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b9:3b:f7:08:57:23:fb:11:7c:b5:12:29:d5:
                    4a:72:70:2d:77:07:e6:d7:f5:fc:b6:7f:03:7b:39:
                    83:a2:5d:1f:aa:a5:75:5d:ee:e7:69:0e:12:a0:55:
                    a8:60:68:c1:9a:e0:2a:a3:6b:ab:bf:ff:09:a1:49:
                    c2:82:bd:40:d3:e8:dd:d7:0b:9a:71:46:88:2e:b3:
                    d4:bc:c7:f9:8f:e3:79:c7:32:2c:af:0f:f8:31:d3:
                    ec:ce:f3:76:a0:ac:07:47:6b:44:3b:e3:89:01:5a:
                    26:d8:9e:d9:1e:86:2e:9f:09:3d:73:9e:85:c9:e8:
                    26:59:83:2a:1e:dd:7c:90:15:14:de:92:5a:a7:3a:
                    78:ed:3d:c6:49:28:de:b0:c3:c9:c6:11:7d:2f:04:
                    16:0d:53:59:75:04:24:ca:77:25:0f:60:35:22:58:
                    21:a1:1c:ea:45:30:c3:c3:d5:32:ce:12:9c:ce:92:
                    38:97:24:b7:4e:0b:58:40:52:cf:76:ea:27:2d:c3:
                    39:f8:a8:03:68:b8:74:97:44:25:4d:40:7f:fe:8b:
                    55:cd:00:f2:c6:16:42:ad:72:57:83:93:79:fb:28:
                    03:e4:bb:2a:e7:70:22:e3:6f:03:e9:da:c6:c4:a1:
                    9f:02:69:03:f1:e4:3d:71:ae:4a:2f:02:45:17:30:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2B:5D:7D:87:8D:A0:F5:43:FD:A4:97:E7:D1:8B:CE:2A:E5:99:A1
            X509v3 Authority Key Identifier:
                keyid:DD:7C:8D:0F:47:8F:9B:E6:AB:F7:39:C0:4F:5B:5B:E4:DC:9F:61:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/3XyND0ePm-ar9znAT1tb5NyfYfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3XyND0ePm-ar9znAT1tb5NyfYfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/4C09862E78FA11EFA44FE586C4F9AE02/EA810E6278FA11EF9043060AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:81:26:17:1f:40:4d:93:50:e3:19:87:38:8e:43:90:d6:7b:
         86:41:20:90:cc:f3:ed:9c:e2:db:08:85:2f:8f:d4:68:eb:cf:
         60:41:c6:40:58:e5:12:bb:ba:d7:40:9a:63:29:29:18:0e:ef:
         36:ec:9c:cc:a0:b1:e1:67:2d:bd:a1:65:6b:3d:19:5f:94:22:
         bc:12:3d:f5:5d:ba:2e:f7:e1:8a:84:84:e4:26:fc:0a:d2:c3:
         e7:82:dd:a2:d1:f1:73:4f:38:ed:58:37:87:c4:b4:cc:3f:6b:
         d0:12:b8:56:a4:d1:10:f1:a1:d1:ad:55:bb:74:72:9b:fd:40:
         69:bf:8b:ed:e3:47:64:fc:42:8d:d6:9a:d1:aa:a1:49:a1:60:
         a8:5c:63:81:b9:f8:2e:16:fe:b4:56:5c:fb:6e:77:ee:f7:34:
         ef:70:d0:d2:94:e6:d0:72:c9:90:35:20:f4:00:e2:5a:67:75:
         db:f6:f9:c1:0d:12:36:67:f2:05:65:79:dd:88:5e:35:9d:82:
         24:1d:fd:e3:ac:44:e6:08:a2:aa:d5:1f:f0:58:3d:76:73:0c:
         4b:21:0c:90:26:cf:5f:03:d9:3e:bb:7f:a3:7d:f4:9e:25:9f:
         94:16:aa:ad:8e:17:33:24:b8:97:b1:d9:ff:ed:96:e1:e6:7e:
         30:19:7b:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:37:32 2026 by rpki-client