Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0FECD496C69011EF9334B50FC4F9AE02.roa
File:                     0FECD496C69011EF9334B50FC4F9AE02.roa (raw, json)
Hash identifier:          v+WOLesynM0YSH1Ku8HYusIHq11IbXVDp+05Vc0lomA=
Subject key identifier:   99:9C:97:71:E1:C1:F3:93:D6:52:2C:B8:B3:7F:B9:D7:1E:E9:4E:4B
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       081D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0FECD496C69011EF9334B50FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:15:03 +0000
ROA not before:           Thu 28 Aug 2025 14:51:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152969
IP address blocks:        160.30.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac57-c9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c2:d4:9a:1c:3e:c6:e4:9c:e2:39:33:f7:66:
                    52:57:d0:ee:a3:e3:8c:da:1a:e3:15:70:f8:e4:65:
                    f0:25:57:a7:e8:04:50:e0:48:04:a8:04:a5:d2:e4:
                    bc:c4:e3:03:9b:57:6e:9e:16:da:e8:f9:a7:ad:f8:
                    3e:e5:75:a5:9f:4f:1b:b1:4c:62:cb:3f:f4:f6:07:
                    23:86:8e:d3:5c:c3:4a:92:5e:37:7a:35:7c:43:79:
                    d6:ca:fb:85:1d:23:c9:27:83:e8:fd:c4:20:e2:2e:
                    2b:1a:77:72:bf:80:11:dd:44:47:c6:04:13:39:e4:
                    34:37:e6:5b:ce:52:96:29:b4:04:72:f6:3d:ac:51:
                    8a:41:8b:b9:a0:e9:27:dd:86:e9:10:a6:72:84:80:
                    f6:f3:27:23:42:cb:a7:c0:22:7b:29:12:36:7e:a7:
                    65:b6:a0:f8:b0:5b:65:0e:1f:72:97:b9:3c:28:36:
                    b6:f3:64:75:ca:3b:43:09:7e:fb:74:5d:8e:2a:48:
                    bb:ea:70:f3:51:65:bc:ae:cb:db:50:d8:89:07:e8:
                    22:5b:ca:d8:59:ce:98:d4:ff:7e:9d:e6:46:f1:84:
                    ea:c2:93:02:bd:ed:5d:39:73:5e:91:6c:39:f0:60:
                    8e:0e:bf:8e:73:83:8a:b5:b9:49:e8:b3:e3:1d:29:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9C:97:71:E1:C1:F3:93:D6:52:2C:B8:B3:7F:B9:D7:1E:E9:4E:4B
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0FECD496C69011EF9334B50FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:35:a6:f2:a0:44:81:d1:b8:e4:56:32:39:d4:1b:27:49:74:
         38:53:87:a7:0e:57:db:90:8d:76:c7:c9:52:0c:b4:87:90:81:
         4c:b0:51:e8:77:cd:d1:04:f2:57:f2:77:ec:53:e0:ed:61:70:
         ac:2e:97:5f:d7:4c:2d:60:2f:85:51:bd:b8:89:8e:5b:c8:4f:
         f0:9b:d0:aa:46:40:82:12:7e:f2:67:f1:7e:c8:ed:97:bf:56:
         95:d0:20:30:d1:8a:af:ce:00:d2:25:f5:bd:9f:3e:99:30:4c:
         b6:c5:8e:df:bd:20:d5:8e:07:f6:1f:84:e1:9a:54:86:8f:a9:
         07:a7:8b:23:20:47:83:ad:e2:f8:4f:7c:36:15:e9:f7:10:18:
         bb:35:8f:d4:a4:1b:42:1b:ad:84:96:88:eb:40:fc:f4:4a:85:
         6e:dc:2e:65:df:06:51:01:13:f1:d7:64:2d:92:be:c6:f9:8f:
         25:43:94:5f:fa:9b:1d:bc:ac:6a:01:a6:6a:60:40:5b:9b:57:
         c7:70:63:bf:3e:97:2a:61:1b:4b:d4:4d:a8:d1:44:b0:a7:45:
         8b:a5:92:51:23:5e:ea:32:72:d5:18:78:c3:72:dc:5a:9b:a8:
         0f:a3:8e:90:a9:90:6b:11:c1:a1:2e:f0:34:e6:a6:be:a1:93:
         65:5d:54:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:33:04 2026 by rpki-client