Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
File:                     E36214403D0011EFAD623342C4F9AE02.roa (raw, json)
Hash identifier:          NA5xm/Sk+UM1S0R7e4w/A2uHlcPucDhnuPiGtwppY30=
Subject key identifier:   E6:38:C9:A9:8B:59:86:89:B8:1F:ED:BB:33:3C:03:E8:D7:E9:EF:D7
Certificate issuer:       /CN=A91E1604/serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
Certificate serial:       0141
Authority key identifier: F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:35:54 +0000
ROA not before:           Mon 23 Jun 2025 05:25:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152919
IP address blocks:        160.22.184.0/23 maxlen: 23
                          160.22.184.0/24 maxlen: 24
                          160.22.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl
                          rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1604, serialNumber=F22CF8EF76ADFDF2CF9EFEDBEC12134886356F4D
        Validity
            Not Before: Jun 23 05:25:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5a04a-a674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1c:5e:93:dd:e3:ec:7c:79:2d:e0:99:86:8a:
                    7b:b2:36:0d:2c:f1:25:12:14:7e:5d:f6:08:c3:1b:
                    b2:77:be:2d:e4:0c:95:98:41:ad:27:7a:d3:92:da:
                    60:b2:06:1b:dd:29:fd:31:cf:af:74:87:fa:41:87:
                    4c:df:95:dd:a5:25:85:62:e0:9d:a1:37:ab:a3:f1:
                    be:79:3d:58:a7:4a:3c:5b:27:c7:e5:e0:11:d3:2b:
                    32:35:c9:c0:91:fc:53:51:54:5d:aa:4d:88:54:49:
                    c8:47:5b:54:3f:53:6c:6e:e3:5b:67:94:5d:ef:24:
                    6f:3e:72:9f:fe:2b:82:ca:9d:73:ab:22:6f:21:33:
                    af:34:94:f8:d5:2a:2c:bf:90:ec:de:80:48:1b:4c:
                    3d:aa:4e:73:e0:0f:23:b0:f1:1f:be:44:f5:c0:32:
                    f6:dd:64:7c:5a:f4:f6:dc:5f:fb:18:51:3e:14:79:
                    3d:de:95:40:a0:31:77:c0:56:08:26:c0:b7:55:de:
                    19:c2:cc:87:fe:c9:80:51:90:d5:f8:29:9b:ec:2e:
                    01:f4:c5:3c:8a:50:cd:b4:9e:bb:0a:9a:42:e4:02:
                    a2:d0:de:96:c2:88:f8:6e:99:19:b3:d7:8b:3d:62:
                    50:29:b5:83:61:75:13:0e:50:3c:bb:b3:da:2b:a4:
                    b8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:38:C9:A9:8B:59:86:89:B8:1F:ED:BB:33:3C:03:E8:D7:E9:EF:D7
            X509v3 Authority Key Identifier:
                keyid:F2:2C:F8:EF:76:AD:FD:F2:CF:9E:FE:DB:EC:12:13:48:86:35:6F:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/8iz473at_fLPnv7b7BITSIY1b00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8iz473at_fLPnv7b7BITSIY1b00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1604/09A112343CEB11EF94E24F59C4F9AE02/E36214403D0011EFAD623342C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:8f:89:8e:8d:bb:a8:51:26:95:b3:45:d0:f1:87:85:67:de:
         ff:74:53:a7:a1:bb:23:b3:88:b5:ab:8c:6e:31:26:f1:4a:f8:
         f3:ba:46:8a:44:91:ca:95:c0:0a:d3:6f:d9:87:20:25:51:21:
         1c:5a:9e:b5:e9:d2:2d:bd:d1:76:9f:ff:35:35:1c:6d:5b:f2:
         43:ac:9d:fa:a6:06:f3:ee:74:58:9c:63:9b:fe:77:b4:69:03:
         1c:80:92:38:db:2f:c1:95:0a:05:98:15:d5:14:67:ad:56:14:
         f7:9b:da:66:f2:31:13:75:86:e7:13:4e:97:cd:04:72:52:fe:
         15:88:4a:cc:80:89:2c:f1:d0:03:4d:23:d1:33:dd:20:1c:ad:
         8d:78:09:4f:c0:53:38:ca:1e:5c:1b:67:b1:fe:2d:90:55:26:
         8e:ad:7a:a0:be:06:65:96:c0:a2:4b:f4:4f:03:b5:b1:2b:47:
         6a:9f:bb:6f:57:9e:a9:f7:bf:f4:10:a6:cd:b6:6a:cc:d3:11:
         1e:9f:61:5a:b1:e1:d2:68:67:43:e6:3d:a3:a9:ed:56:97:eb:
         29:79:ab:68:91:ac:0f:62:c4:b4:cf:c4:82:07:a8:bf:12:0f:
         6b:8c:83:69:7b:fe:f6:ad:a0:cb:2c:29:3e:88:f7:60:75:f9:
         84:15:7a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:51 2026 by rpki-client