Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/554A2D46AB0A11EF96A1610EC4F9AE02.roa
File:                     554A2D46AB0A11EF96A1610EC4F9AE02.roa (raw, json)
Hash identifier:          wRFAXPTq/tv2rnSe6SvAQvNyn3TRGK7fXb4ruOeNH5U=
Subject key identifier:   8E:28:0C:7E:97:AB:21:D3:C2:2E:21:A9:2D:9F:7A:9A:2D:A6:E9:42
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0831
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/554A2D46AB0A11EF96A1610EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:15:21 +0000
ROA not before:           Thu 28 Aug 2025 14:51:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153403
IP address blocks:        160.191.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2097 (0x831)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:45 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac69-e7d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:25:66:87:c1:46:73:e3:a8:ff:e3:e6:62:
                    5f:aa:28:0a:f2:e8:f6:41:91:49:45:66:15:35:78:
                    da:d5:d4:0f:11:f2:20:97:1a:76:c7:b3:09:04:17:
                    a3:26:bd:90:36:1b:7e:44:cf:2f:73:9a:ff:16:e9:
                    e1:66:e8:bd:b1:c0:1a:37:c6:97:87:cf:90:ec:36:
                    d4:7e:66:fa:de:0f:4f:6f:a1:11:15:6a:d2:5d:a3:
                    82:af:7a:67:4b:8c:9d:b1:45:7c:22:10:c7:c4:9b:
                    a9:98:cc:fb:95:3a:4e:ee:d3:a6:1f:2f:9c:46:2c:
                    67:d4:e0:4a:17:7f:1d:57:bc:60:6a:ad:8a:dd:ec:
                    24:74:91:ab:c3:ec:44:6f:f9:b7:32:ac:b3:c1:b8:
                    87:1b:21:c0:39:14:c6:6b:9b:c6:94:7b:05:5f:87:
                    ae:bb:b2:89:c0:82:04:93:2e:8c:0d:bc:7b:72:cb:
                    5f:91:82:ef:f4:dd:61:ae:a6:af:33:dc:7f:27:a0:
                    c2:8c:bb:2c:fc:a0:aa:52:1f:ab:56:d8:7b:36:02:
                    03:80:fd:2f:2f:4d:7f:7f:e6:51:22:26:05:c2:2e:
                    6f:ac:12:3a:df:f4:02:13:e1:88:6e:89:40:75:5f:
                    db:d7:c9:a3:70:6b:cc:65:14:2b:a2:83:61:79:32:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:28:0C:7E:97:AB:21:D3:C2:2E:21:A9:2D:9F:7A:9A:2D:A6:E9:42
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/554A2D46AB0A11EF96A1610EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:4b:88:59:dd:70:21:81:e6:e6:88:d3:f6:a9:cd:eb:36:aa:
         c8:c0:f0:7d:a7:c3:1c:e2:69:9e:0e:22:6b:17:a5:78:e2:19:
         68:ee:72:5a:b2:67:76:d9:a3:66:94:91:db:14:c1:00:82:af:
         55:f8:1d:af:77:33:e1:fc:da:32:f6:f4:8f:aa:ab:8f:73:27:
         5d:50:21:38:98:63:00:1f:d3:c1:34:55:11:a1:63:62:f9:5b:
         99:fa:f7:3b:a8:5d:6a:25:9a:e7:92:8e:53:2e:d0:c0:d8:88:
         3e:ff:cc:be:d2:79:7e:01:3d:da:e8:5e:ea:da:a0:53:30:3d:
         c6:54:60:e5:74:5c:de:86:70:56:f4:86:c4:d9:6f:2d:24:37:
         00:b5:ee:df:24:da:eb:5b:93:be:0d:2a:2b:83:c1:78:7f:3e:
         ad:6f:a6:58:a1:86:68:bd:15:a9:af:b9:20:12:c9:9e:e9:70:
         11:90:8d:5a:cb:d8:40:3c:bb:85:54:b7:67:8d:52:e7:fc:f7:
         22:1d:9c:bd:80:a3:2e:db:4c:58:36:fc:a2:b4:93:56:e8:50:
         26:bf:0f:b8:65:e3:ab:fa:b9:a5:26:55:ba:b7:76:f9:50:a2:
         4d:f2:f8:ee:e8:1f:25:17:3a:ea:a0:58:7c:a5:d0:29:9c:5c:
         b0:99:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:03 2026 by rpki-client