Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/723EACFE6E8511EF83048D43C4F9AE02.roa
File:                     723EACFE6E8511EF83048D43C4F9AE02.roa (raw, json)
Hash identifier:          QHT2EqJHyPujaDEriJMd/9h9fPZLETh+MJuliPGlg9k=
Subject key identifier:   34:96:59:FF:15:58:BE:58:46:3D:69:85:9C:38:94:53:47:86:D6:14
Certificate issuer:       /CN=A91B9AB9/serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
Certificate serial:       013A
Authority key identifier: F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/723EACFE6E8511EF83048D43C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:15:53 +0000
ROA not before:           Sun 19 Oct 2025 09:12:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     214441
IP address blocks:        160.187.22.0/24 maxlen: 24
                          160.187.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl
                          rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9AB9, serialNumber=F9CD70E762BE695F4BA4902AA20B940F770A0638
        Validity
            Not Before: Oct 19 09:12:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a58d89-a5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d3:51:d1:7e:d2:aa:6a:ad:0a:ef:5d:70:33:
                    cf:bd:cc:df:14:12:8f:84:6e:b5:6c:3c:c4:e9:34:
                    2f:c7:1d:61:95:8f:1b:d6:93:ab:c2:23:a6:78:5d:
                    c1:f7:fc:48:57:fe:3f:06:bc:44:21:f4:e2:c8:c4:
                    d0:65:81:3d:ed:1c:a9:51:55:23:d9:7f:3c:72:29:
                    59:8e:6b:c2:0f:49:0d:8d:5c:cd:8f:4c:bf:ce:22:
                    5d:0f:ec:0c:92:21:03:85:f7:96:19:64:0a:57:00:
                    77:aa:fc:2f:80:85:33:26:01:0c:c2:c1:79:1a:69:
                    66:cf:be:de:d3:07:25:84:08:64:11:9b:ed:43:89:
                    c9:d7:63:43:ac:a2:01:24:88:ba:2b:4a:91:66:ed:
                    71:92:78:84:37:ea:85:56:f0:3d:a2:33:2c:07:fc:
                    5f:1b:b9:98:4d:3c:dd:c9:cc:80:68:33:4b:1c:67:
                    25:d2:fb:2b:3a:7d:0d:37:b1:86:d4:b4:85:57:1a:
                    f6:cf:03:42:aa:ad:d7:40:f8:49:90:0d:40:f1:48:
                    fa:a3:07:df:34:7d:49:3a:15:63:9b:30:e4:a3:eb:
                    fd:ad:2a:84:00:90:f8:98:fc:6f:12:5a:91:d8:52:
                    06:e3:64:b7:61:d8:63:4d:a8:45:7c:ab:68:3d:ba:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:96:59:FF:15:58:BE:58:46:3D:69:85:9C:38:94:53:47:86:D6:14
            X509v3 Authority Key Identifier:
                keyid:F9:CD:70:E7:62:BE:69:5F:4B:A4:90:2A:A2:0B:94:0F:77:0A:06:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/-c1w52K-aV9LpJAqoguUD3cKBjg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-c1w52K-aV9LpJAqoguUD3cKBjg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AB9/C76F92C06E8411EFA3CD983FC4F9AE02/723EACFE6E8511EF83048D43C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:e3:56:2f:c9:29:c5:0c:0c:54:63:6d:ee:4c:35:5e:0f:bc:
         52:f7:ac:b2:3f:c1:56:89:9c:d8:d8:88:52:1c:d3:0a:5e:df:
         d3:77:30:ee:6d:a9:59:ba:d9:36:51:97:74:57:92:a7:20:09:
         f5:21:a5:69:7b:70:29:b7:18:0b:7d:70:d6:0d:16:1a:03:c4:
         f0:1d:66:01:05:46:0f:69:a9:26:9d:61:79:e0:07:66:b5:56:
         15:48:e5:28:2b:24:a7:5e:98:73:72:75:69:56:a8:ce:12:86:
         e5:ae:eb:24:c3:b0:a7:e7:bb:2f:b1:3c:c6:d6:57:72:dd:5e:
         64:fb:05:22:93:a4:a9:8b:5e:92:cd:34:1c:7d:63:e3:e6:76:
         4f:c7:b8:d3:28:21:76:0c:c7:af:b3:f6:70:bf:5d:36:e7:e6:
         59:f2:c9:ff:c6:b1:94:ef:e9:4f:4f:de:c9:87:76:e8:c9:0b:
         87:97:68:99:aa:11:dc:88:2f:bd:2b:d5:9b:d6:d7:36:eb:cd:
         71:b6:71:f2:bf:44:4b:a7:b2:c2:f6:b5:d4:6f:cf:d5:48:ff:
         b4:a9:e0:4b:a9:81:63:b8:c5:71:dc:e6:c7:85:1e:9f:ad:ae:
         44:46:86:e0:0c:47:23:b6:5c:34:75:17:4e:da:3e:e0:e0:2a:
         d9:5d:e7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:17:23 2026 by rpki-client