Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/ECDD26C485F411F18488A9A174A30FBC.roa
File:                     ECDD26C485F411F18488A9A174A30FBC.roa (raw, json)
Hash identifier:          VW4iL+otXl2aCZSt2+vQ6u30LJgxp5dtKkbiclHRg5w=
Subject key identifier:   3F:43:16:EC:1A:13:59:A9:7A:F1:B3:93:E3:63:CE:5C:34:2F:6A:90
Certificate issuer:       /CN=A91F53E8/serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
Certificate serial:       02
Authority key identifier: 01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/ECDD26C485F411F18488A9A174A30FBC.roa
Signing time:             Wed 22 Jul 2026 17:44:02 +0000
ROA not before:           Wed 22 Jul 2026 17:44:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        160.236.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl
                          rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:44:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53E8, serialNumber=016B9AED818C4FD304794EB242D8B3E56765A545
        Validity
            Not Before: Jul 22 17:44:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a610162-ed5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bc:67:49:1c:0d:7e:eb:16:d7:25:4f:9d:3d:
                    09:42:8d:b4:4e:28:87:4b:ca:b5:ba:c1:5e:00:23:
                    92:02:d3:3c:f2:30:b1:d5:2f:3e:1d:3d:d9:62:93:
                    f2:78:18:36:e8:dc:0c:1f:50:a0:bc:94:aa:ba:46:
                    23:6a:0b:f1:63:e2:f0:14:4c:2e:08:53:0b:c9:2e:
                    eb:a8:49:63:27:ce:7b:5e:46:d6:2a:2b:4e:fe:c0:
                    f7:4a:13:d6:43:60:35:af:a6:55:7a:df:00:a5:f8:
                    a7:12:a8:ba:65:4f:77:de:e8:6e:d6:3f:91:8b:4f:
                    53:13:de:7b:82:3a:ee:07:e0:50:d3:f0:d5:84:70:
                    f0:34:4c:a0:c7:26:d1:0e:68:fc:3f:ee:79:da:ba:
                    7b:52:c5:d3:66:b2:66:17:0d:d1:3a:40:38:4b:4f:
                    aa:6e:c4:c4:e9:49:02:3c:91:5b:80:8d:34:95:24:
                    58:39:88:d4:91:59:eb:e9:cd:c2:33:da:71:ba:af:
                    fd:cc:1c:f6:97:0b:e6:d0:01:2a:bb:8c:2d:eb:93:
                    89:1a:d4:f7:da:94:87:f6:c4:c6:c9:22:18:d7:6c:
                    fe:10:fa:85:be:56:31:de:d7:4b:66:32:12:3d:62:
                    f0:18:cc:65:cf:f0:98:16:e0:37:6e:95:50:10:a4:
                    e7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:43:16:EC:1A:13:59:A9:7A:F1:B3:93:E3:63:CE:5C:34:2F:6A:90
            X509v3 Authority Key Identifier:
                keyid:01:6B:9A:ED:81:8C:4F:D3:04:79:4E:B2:42:D8:B3:E5:67:65:A5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/AWua7YGMT9MEeU6yQtiz5WdlpUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AWua7YGMT9MEeU6yQtiz5WdlpUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53E8/6BEC592285F411F1B9A0048874A30FBC/ECDD26C485F411F18488A9A174A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:40:04:5e:f7:55:c8:7c:d6:63:dd:f4:73:70:de:2f:6d:fe:
         42:e1:b3:e7:9f:06:8c:b2:21:51:4b:32:af:af:a1:3a:ff:86:
         c4:d3:d8:b7:14:8c:72:82:45:c6:95:3b:f9:fe:d0:2a:05:6e:
         e6:0a:95:a5:0a:6d:5e:94:bd:b1:49:72:dc:17:28:0f:dc:86:
         01:f7:72:0a:a7:4b:2c:b8:31:f9:1b:7b:66:ee:d4:05:24:c6:
         58:18:15:d7:62:99:04:a8:45:f2:5c:97:d8:b6:9a:ed:bd:2e:
         d7:45:64:32:ed:ce:a4:80:37:86:a6:ac:10:a1:28:a1:9a:41:
         ab:b6:d4:69:d8:10:e7:82:3b:78:d2:de:fb:66:0a:d1:4e:ea:
         83:e8:8e:16:a5:c7:d8:7c:d0:0f:74:5b:c4:77:47:27:91:cf:
         83:79:d8:c3:6a:86:95:64:b4:e6:d2:cf:44:64:3c:46:1e:96:
         f0:de:03:54:0c:dd:1d:24:c4:64:d1:e0:8e:7a:6f:b1:d2:13:
         e2:b7:29:df:41:87:2c:d5:3b:00:dc:48:63:4d:e5:98:c2:16:
         86:b4:56:74:1f:dd:18:36:b2:45:dd:82:b5:33:c2:fe:f7:09:
         a3:72:9c:3b:37:a4:a9:9b:37:37:ec:d6:19:f4:ba:57:95:20:
         11:94:e2:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:46 2026 by rpki-client