Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/90D05F8EABB711F1BEA6DAFF5411F970.roa
File:                     90D05F8EABB711F1BEA6DAFF5411F970.roa (raw, json)
Hash identifier:          MkS+e7RWc04qmAprNFSaDQdzetMMyHG8u/16PJQSYfQ=
Subject key identifier:   78:34:D3:FA:09:0A:A2:42:4D:3E:D4:4B:45:09:21:5C:8A:30:D4:AF
Certificate issuer:       /CN=A9186249/serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
Certificate serial:       01ED
Authority key identifier: 4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/90D05F8EABB711F1BEA6DAFF5411F970.roa
Signing time:             Tue 08 Sep 2026 19:00:32 +0000
ROA not before:           Tue 08 Sep 2026 19:00:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153550
IP address blocks:        160.191.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl
                          rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 03:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186249, serialNumber=4DFAF12599BC8A9F71DA60AB3920E0A1F40158E5
        Validity
            Not Before: Sep  8 19:00:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6aa05b50-4d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:cb:9b:82:d1:a3:72:2f:66:5d:a3:70:c8:
                    2f:f7:4a:7e:b4:fc:9e:d2:9a:dc:04:c5:f9:0a:6d:
                    49:7c:e6:f2:61:1c:51:fd:27:32:6c:f8:0a:1c:9e:
                    98:db:1e:a7:94:00:4a:68:89:aa:6e:cf:7b:da:d8:
                    13:ff:0d:26:25:20:34:16:d9:02:0b:6e:fd:56:a2:
                    e3:97:eb:82:a3:2d:48:74:42:f7:9c:91:1d:51:7d:
                    84:72:9f:43:28:2e:69:91:8d:6e:2e:0e:e9:14:df:
                    ff:a4:ad:e5:aa:74:2b:f2:23:88:6f:2e:8f:ff:56:
                    c8:20:e6:eb:2b:08:39:8b:d2:17:be:c8:14:6d:b5:
                    bf:40:26:e0:e4:0a:21:3b:49:bf:c2:0e:b9:91:d4:
                    7d:10:7e:9d:d1:e3:1b:d3:a4:9a:7b:d5:1f:38:75:
                    8a:98:c4:a1:11:ad:6e:67:8a:2d:d2:41:e3:76:13:
                    57:d5:df:27:31:96:9d:70:7d:b5:32:bb:41:ca:75:
                    bb:81:79:2b:7d:a5:e2:3f:65:15:e5:a1:b3:08:1e:
                    2d:f7:a3:d8:e4:ec:32:88:db:6a:3c:03:9d:3e:a0:
                    5c:c1:e2:d6:8e:b5:e5:a9:7e:2b:22:00:22:18:66:
                    fc:1a:67:bb:f0:d0:cc:82:6e:e7:e9:e5:18:b7:1e:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:D3:FA:09:0A:A2:42:4D:3E:D4:4B:45:09:21:5C:8A:30:D4:AF
            X509v3 Authority Key Identifier:
                keyid:4D:FA:F1:25:99:BC:8A:9F:71:DA:60:AB:39:20:E0:A1:F4:01:58:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/TfrxJZm8ip9x2mCrOSDgofQBWOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TfrxJZm8ip9x2mCrOSDgofQBWOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186249/98726D6ED17011EEA6151C4DC4F9AE02/90D05F8EABB711F1BEA6DAFF5411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:76:d0:96:d8:aa:17:f5:15:56:b3:10:66:ed:a4:7c:8c:0c:
         0c:4f:55:76:12:12:f0:91:33:50:c0:4c:ae:65:71:27:e2:d2:
         9f:a6:cc:e0:22:b4:8b:8f:df:3b:d1:ac:ce:0c:fa:85:d1:22:
         a6:ea:14:32:67:dd:44:a1:9d:2e:a7:51:2d:dd:5c:29:f5:b5:
         8f:46:87:21:14:54:50:92:19:a4:77:92:fd:61:80:20:e4:8a:
         d0:13:0c:c0:8c:0d:02:ad:33:64:84:04:71:b3:6b:da:51:62:
         3b:82:bb:26:4b:38:53:dd:e5:02:29:c5:58:76:07:3f:63:bd:
         6c:8d:b2:d0:5e:c1:8c:ee:56:2d:a3:61:9a:ec:81:cd:a6:a3:
         f5:f4:35:20:69:4b:2a:74:43:53:4f:a9:e7:a1:68:49:58:ce:
         4d:76:d3:9a:dd:60:95:55:bf:d9:34:bb:5b:6f:7d:62:83:4d:
         39:3e:24:66:5d:93:47:dd:9d:12:42:93:f0:29:cf:dd:41:0b:
         e8:a6:81:d3:55:ec:d4:f9:d6:7d:c4:b2:db:0d:d1:fb:d6:9c:
         23:9f:bf:be:36:21:c9:ec:42:e5:4d:cf:16:e9:a9:93:a2:44:
         15:27:62:40:2b:14:98:c8:22:74:e7:d5:5a:37:fb:87:b8:8a:
         43:e6:1c:48
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyNDkxMTAvBgNVBAUTKDRERkFGMTI1OTlCQzhBOUY3MURBNjBBQjM5MjBFMEEx
RjQwMTU4RTUwHhcNMjYwOTA4MTkwMDMyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwNWI1MC00ZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtp/Lm4LRo3IvZl2jcMgv90p+tPye0prcBMX5Cm1JfObyYRxR/ScybPgKHJ6Y
2x6nlABKaImqbs972tgT/w0mJSA0FtkCC279VqLjl+uCoy1IdEL3nJEdUX2Ecp9D
KC5pkY1uLg7pFN//pK3lqnQr8iOIby6P/1bIIObrKwg5i9IXvsgUbbW/QCbg5Aoh
O0m/wg65kdR9EH6d0eMb06Sae9UfOHWKmMShEa1uZ4ot0kHjdhNX1d8nMZadcH21
MrtBynW7gXkrfaXiP2UV5aGzCB4t96PY5OwyiNtqPAOdPqBcweLWjrXlqX4rIgAi
GGb8Gme78NDMgm7n6eUYtx4HTwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHg00/oJ
CqJCTT7US0UJIVyKMNSvMB8GA1UdIwQYMBaAFE368SWZvIqfcdpgqzkg4KH0AVjl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjI0OS85ODcyNkQ2RUQx
NzAxMUVFQTYxNTFDNERDNEY5QUUwMi9UZnJ4SlptOGlwOXgybUNyT1NEZ29mUUJX
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RmcnhKWm04aXA5eDJtQ3JPU0Rnb2ZRQldPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyNDkvOTg3MjZENkVEMTcwMTFFRUE2MTUxQzREQzRGOUFFMDIvOTBEMDVGOEVB
QkI3MTFGMUJFQTZEQUZGNTQxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoL9CMA0GCSqGSIb3DQEBCwUAA4IBAQAHdtCW2KoX9RVWsxBm7aR8
jAwMT1V2EhLwkTNQwEyuZXEn4tKfpszgIrSLj9870azODPqF0SKm6hQyZ91EoZ0u
p1Et3Vwp9bWPRochFFRQkhmkd5L9YYAg5IrQEwzAjA0CrTNkhARxs2vaUWI7grsm
SzhT3eUCKcVYdgc/Y71sjbLQXsGM7lYto2Ga7IHNpqP19DUgaUsqdENTT6nnoWhJ
WM5NdtOa3WCVVb/ZNLtbb31ig005PiRmXZNH3Z0SQpPwKc/dQQvopoHTVezU+dZ9
xLLbDdH71pwjn7++NiHJ7ELlTc8W6amTokQVJ2JAKxSYyCJ059VaN/uHuIpD5hxI
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:05 2026 by rpki-client