Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
File:                     3A0740706A0111F1AE9FA49E6847A888.roa (raw, json)
Hash identifier:          /Srq5MiMNluOeB/MaAcPWH/+xgC/lA9Gk28hUJt1d5o=
Subject key identifier:   B5:DD:42:FB:E5:CB:94:7B:0A:62:DD:F7:E9:2D:0D:4F:DA:E3:B3:26
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23EC
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa
Signing time:             Fri 02 Oct 2026 15:20:55 +0000
ROA not before:           Fri 02 Oct 2026 15:20:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154552
IP address blocks:        160.25.232.0/24 maxlen: 24
                          160.25.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9196 (0x23ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:20:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbd6-f3bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fb:45:8d:9f:ba:33:2a:90:f9:86:c9:8f:a3:
                    ea:b5:32:b4:77:d1:15:53:49:f7:49:01:12:3f:bc:
                    03:19:69:08:ae:6c:73:9e:cc:c8:94:84:78:5d:32:
                    26:fb:a4:df:e7:b4:49:c9:eb:2e:1b:6c:85:d9:48:
                    fa:a4:26:37:fe:05:ed:dd:30:61:af:3e:cf:9c:8b:
                    83:5f:b9:91:56:ee:b4:85:78:8b:5f:80:35:5f:60:
                    22:b0:2e:0e:5c:24:ca:a9:c4:e6:22:63:d3:f9:19:
                    d2:93:2c:e0:52:3e:23:19:01:2d:9c:bb:a2:40:1a:
                    f2:b3:fc:e5:97:f4:5e:54:38:74:a1:29:27:96:2a:
                    25:46:1a:c7:f1:3a:1a:98:e6:dd:70:93:87:b3:94:
                    11:5c:a0:92:6b:bf:f6:d6:a7:40:83:bc:7f:2a:27:
                    99:5b:7f:65:a7:00:dd:f3:3a:fe:43:4d:48:2a:ca:
                    36:5d:9f:4b:36:91:ad:7b:f6:be:ec:b8:18:bf:69:
                    d0:cb:a8:a8:65:7c:b3:28:45:36:01:e0:5a:63:1f:
                    aa:33:b3:8d:df:c0:06:72:40:3c:52:43:49:20:ee:
                    5b:fd:08:84:c9:ba:22:a2:c2:32:b9:2e:83:53:90:
                    b1:2b:04:0e:96:69:a9:ab:38:1c:c4:db:b9:a9:cc:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DD:42:FB:E5:CB:94:7B:0A:62:DD:F7:E9:2D:0D:4F:DA:E3:B3:26
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0740706A0111F1AE9FA49E6847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:4b:65:99:7f:b1:41:ed:60:a5:fe:da:a8:33:61:86:cf:e9:
         fd:71:32:61:68:bf:1c:d6:46:e0:60:5e:89:38:d9:f3:58:7f:
         bb:bd:c9:30:01:81:fb:75:f1:cc:21:2a:bf:73:9e:e0:60:c1:
         4a:0f:92:8a:ee:a2:f2:1d:80:be:90:16:58:6e:b2:fd:4e:34:
         d1:93:7e:34:81:d8:6d:94:b7:2f:6f:83:fe:be:7c:a3:f3:7c:
         28:51:92:3c:44:cd:d5:c6:fc:f9:e5:a4:8b:8f:d0:a7:89:8e:
         f3:b8:9b:de:e9:80:5b:da:1c:22:38:9f:67:aa:4e:10:e0:b8:
         eb:cb:33:6d:a5:a6:49:86:ee:02:b7:2e:ea:fd:fb:0c:1d:2e:
         d1:b1:9a:8b:9e:84:4a:77:70:90:15:3b:62:d5:2c:16:d9:e6:
         bb:cf:45:12:c2:d0:15:84:27:f9:d8:29:2e:a8:fd:bb:e7:f6:
         7d:ca:76:45:d3:52:48:c7:59:d3:b5:7c:8d:0e:71:05:02:90:
         25:89:60:ca:28:73:12:91:13:7f:6b:d7:56:66:54:13:3f:05:
         6b:b8:93:10:c8:1c:75:3f:c1:72:a7:31:fd:20:2f:06:06:84:
         5b:f9:3c:7e:1b:99:07:af:5f:22:06:aa:ce:f8:89:1e:2a:ac:
         a0:90:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:11:50 2026 by rpki-client