Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa
File:                     097951DC271E11EFA1884C2EC4F9AE02.roa (raw, json)
Hash identifier:          wfWPCJF64COMQ4+GFRDWNSHHIcvg9J+oSNDdFL1r5Eg=
Subject key identifier:   B9:ED:54:DC:33:5A:AB:03:A5:AD:C7:64:70:2E:BC:00:2F:CD:74:8A
Certificate issuer:       /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
Certificate serial:       0150
Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:18:58 +0000
ROA not before:           Wed 25 Jun 2025 05:39:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152906
IP address blocks:        160.22.104.0/23 maxlen: 23
                          160.22.104.0/24 maxlen: 24
                          160.22.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl
                          rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 04:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A
        Validity
            Not Before: Jun 25 05:39:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a58e42-9819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:2c:20:3b:c1:6d:02:0b:ac:09:66:41:9e:
                    f3:bc:c0:1d:a7:21:07:7e:b0:c8:5c:82:67:b8:ea:
                    47:87:9e:81:21:b9:5d:d2:bb:0e:0f:0a:08:e0:ad:
                    92:ae:8b:01:a5:99:1b:b4:1a:85:f3:11:0e:8d:6d:
                    bd:89:58:b1:c7:e7:37:ef:b6:6b:6d:df:39:2b:b3:
                    13:9b:e2:b7:4a:cc:17:30:3a:c4:e2:8d:87:04:98:
                    fc:b9:3f:46:33:67:55:f5:85:4c:5c:6b:28:8f:83:
                    08:dc:0f:21:a2:a2:00:5d:80:d7:2a:9e:64:e8:19:
                    0d:02:35:a7:93:70:3c:14:b7:97:e6:06:63:61:f5:
                    27:b8:43:16:a1:e5:3d:50:d1:9a:18:67:fc:ca:d3:
                    26:96:21:80:37:35:d8:fd:cc:56:51:2c:74:14:f1:
                    bd:85:b2:62:c3:82:2e:74:3e:95:b8:22:94:72:e0:
                    8a:04:fe:11:55:79:f6:9a:3a:13:a7:ab:ff:87:39:
                    7c:02:40:d0:50:fd:53:8d:f8:22:c2:0a:b0:63:36:
                    e0:55:bc:22:cf:cd:3c:e4:ee:2c:6b:11:fb:2b:63:
                    4a:30:78:ac:ba:8b:18:e9:61:bf:38:5c:61:58:80:
                    fe:8a:c0:48:b3:c1:f6:c5:07:6c:41:fe:d5:0c:0b:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:54:DC:33:5A:AB:03:A5:AD:C7:64:70:2E:BC:00:2F:CD:74:8A
            X509v3 Authority Key Identifier:
                keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:b0:e9:3b:81:6a:bf:e2:90:7d:5a:c2:11:7a:1e:53:23:21:
         7a:71:d6:51:e7:38:1c:99:99:77:1d:ff:ad:17:bd:fa:51:94:
         63:49:b6:0e:6a:03:73:43:86:06:fb:cd:86:11:d0:ce:3a:ba:
         46:bc:af:ca:26:6e:93:58:4b:2a:33:3c:0f:c9:09:d7:3a:dc:
         86:4d:2f:88:0f:70:1b:cb:d6:fe:5f:18:46:4f:8d:58:e6:ab:
         81:ab:a3:c1:f8:38:08:7a:e8:7c:f8:64:79:03:a5:1c:9e:94:
         87:00:c8:02:75:bd:14:79:7a:6e:be:94:77:7e:8c:db:f2:e7:
         f7:c8:1a:80:bf:a8:ea:17:09:13:e2:80:a3:c8:1d:47:83:22:
         93:9f:ae:4e:64:81:7f:79:1b:46:79:0b:89:6d:40:3e:86:9f:
         d3:ba:26:ae:0c:4f:b4:f8:e2:9c:55:da:b7:ce:a8:76:3d:37:
         87:c9:6d:07:75:b4:02:2b:f1:be:02:5c:f6:6f:64:87:21:d1:
         32:d2:98:59:a9:c4:e8:8c:f9:8a:b5:68:4c:0a:d6:ae:22:3e:
         da:36:63:26:c4:8f:fa:4e:a0:42:69:2f:6b:d8:80:9a:38:a5:
         f1:92:98:61:4d:51:18:90:ae:19:fd:d5:76:62:9b:32:e0:d2:
         2a:cc:89:d9
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG
OTQ2OEQ5NUEwHhcNMjUwNjI1MDUzOTI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGU0Mi05ODE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLEsIDvBbQILrAlmQZ7zvMAdpyEHfrDIXIJnuOpHh56BIbld0rsODwoI4K2S
rosBpZkbtBqF8xEOjW29iVixx+c377Zrbd85K7MTm+K3SswXMDrE4o2HBJj8uT9G
M2dV9YVMXGsoj4MI3A8hoqIAXYDXKp5k6BkNAjWnk3A8FLeX5gZjYfUnuEMWoeU9
UNGaGGf8ytMmliGANzXY/cxWUSx0FPG9hbJiw4IudD6VuCKUcuCKBP4RVXn2mjoT
p6v/hzl8AkDQUP1TjfgiwgqwYzbgVbwiz8085O4saxH7K2NKMHisuosY6WG/OFxh
WID+isBIs8H2xQdsQf7VDAseCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLntVNwz
WqsDpa3HZHAuvAAvzXSKMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2
RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y
Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjgzREMvOTlDNzQ4ODgyNkVEMTFFRkI0QzlCQTI4QzRGOUFFMDIvMDk3OTUxREMy
NzFFMTFFRkExODg0QzJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBZoMA0GCSqGSIb3DQEBCwUAA4IBAQAZsOk7gWq/4pB9WsIReh5T
IyF6cdZR5zgcmZl3Hf+tF736UZRjSbYOagNzQ4YG+82GEdDOOrpGvK/KJm6TWEsq
MzwPyQnXOtyGTS+ID3Aby9b+XxhGT41Y5quBq6PB+DgIeuh8+GR5A6UcnpSHAMgC
db0UeXpuvpR3fozb8uf3yBqAv6jqFwkT4oCjyB1HgyKTn65OZIF/eRtGeQuJbUA+
hp/TuiauDE+0+OKcVdq3zqh2PTeHyW0HdbQCK/G+Alz2b2SHIdEy0phZqcTojPmK
tWhMCtauIj7aNmMmxI/6TqBCaS9r2ICaOKXxkphhTVEYkK4Z/dV2Ypsy4NIqzInZ
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:15 2026 by rpki-client