Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/055E28204B3111EFA73EC24AC4F9AE02.roa
File:                     055E28204B3111EFA73EC24AC4F9AE02.roa (raw, json)
Hash identifier:          yHOzafZjnt1usQMUcbzhVxjHGgYL1KzDp4x0YiHmxM0=
Subject key identifier:   C7:9F:B8:A5:41:E8:60:32:DE:48:31:52:98:15:EF:61:82:7A:AD:91
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0817
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/055E28204B3111EFA73EC24AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:14:58 +0000
ROA not before:           Thu 28 Aug 2025 14:51:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152952
IP address blocks:        160.22.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac52-5241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:fb:0f:c3:ba:42:78:c3:fc:4c:e6:c8:81:
                    fa:58:5f:ff:ff:d0:1e:83:c2:6d:a8:e6:ed:05:b7:
                    44:b7:6a:8e:6c:1d:2d:64:cc:7f:f6:2d:80:dd:00:
                    0f:ab:8c:9b:85:ff:2a:a3:d5:6f:c9:e6:ee:c6:85:
                    0c:1c:51:60:c4:19:32:6b:7c:09:3d:81:8e:a9:a4:
                    05:1b:d8:49:de:d8:2b:22:5c:81:59:02:fa:e4:c9:
                    67:34:e4:4e:83:40:47:37:c4:72:67:32:a1:d1:5e:
                    d1:7c:11:9a:d1:7c:05:9e:b9:73:4a:00:40:ee:10:
                    26:58:c9:c7:98:ed:1d:11:67:13:09:7b:d2:56:f4:
                    27:61:11:54:a2:51:8e:18:af:21:55:0d:a8:76:7d:
                    e1:7d:42:fe:fb:1f:53:d1:c4:98:fe:c7:f7:a8:22:
                    1d:3d:41:06:eb:5b:33:b1:a8:bf:99:68:2b:c7:72:
                    21:ef:2d:63:6b:f6:0e:22:9b:60:c7:36:fd:16:2b:
                    99:f5:9a:22:a4:08:78:36:f9:5b:99:b8:f9:07:96:
                    ed:6c:aa:89:b3:c3:fb:02:a4:00:8f:38:61:8a:6f:
                    48:20:39:1b:78:c7:87:37:4d:6b:86:fa:09:53:b9:
                    1d:cb:d9:a0:31:19:db:df:15:8d:9d:bd:26:86:9b:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9F:B8:A5:41:E8:60:32:DE:48:31:52:98:15:EF:61:82:7A:AD:91
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/055E28204B3111EFA73EC24AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:26:ef:de:d5:8d:d1:b9:8f:41:b2:7b:08:6f:37:e9:22:
         25:81:10:09:91:ce:66:70:1b:f0:2b:f2:9b:76:2a:b7:07:cb:
         86:8d:f4:3c:75:55:e2:d1:08:50:59:20:9b:0d:11:9f:4c:ac:
         1f:6e:d4:de:8a:4b:71:7a:4d:d2:a4:7e:66:dc:9e:dd:aa:82:
         7b:bb:86:b8:7c:49:92:23:48:88:97:86:d8:aa:bf:6b:16:00:
         a1:99:1e:66:d4:c6:a7:52:ba:e3:95:1e:f3:aa:12:3f:75:5e:
         a5:a7:00:00:34:aa:dd:1e:64:f1:45:6d:ef:cf:32:d9:3b:7e:
         5c:0e:cb:ab:79:6d:fb:df:6b:92:02:a0:c7:74:aa:d0:cb:f9:
         58:91:6d:e6:60:43:ca:5b:77:db:1a:36:20:67:83:ba:7d:5f:
         57:66:1f:72:10:33:9f:10:98:31:e2:82:71:29:5b:27:4c:fc:
         3c:d3:69:6b:09:22:e7:68:a9:f9:01:a6:eb:e0:8d:04:d5:ac:
         6b:9b:5e:e8:f0:34:9b:ef:10:95:e3:db:5f:bc:cd:20:18:55:
         a3:7a:be:68:43:8d:e4:76:dc:9b:40:1d:02:02:53:f4:44:ca:
         e6:c0:49:32:45:d6:55:2c:84:29:eb:74:63:f9:ab:42:b4:13:
         7f:f9:a6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:41 2026 by rpki-client