Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
File:                     55760A78736F11F0A16F9258C4F9AE02.roa (raw, json)
Hash identifier:          6nY3XfLcXq8L8tTuBgaNvlRcrHrdwupYRjmvvtp7V0U=
Subject key identifier:   EA:F1:E7:58:C5:2E:B4:D0:BA:48:5C:C8:9A:E0:08:B9:55:DE:A8:B2
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0651
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 09:17:26 +0000
ROA not before:           Thu 07 Aug 2025 09:17:26 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149113
IP address blocks:        160.250.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug  7 09:17:26 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68946f26-2771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1f:b5:88:7a:96:4a:68:e8:71:12:51:90:b5:
                    9e:19:3c:7f:d0:01:f2:56:8f:29:2e:50:78:55:e5:
                    cf:c7:6e:19:ba:37:40:71:a6:f4:56:97:45:1c:20:
                    24:36:fe:15:e1:3f:00:cc:1c:68:c4:14:b9:5b:54:
                    74:e5:12:3b:5d:d6:7c:5d:dc:74:21:24:e2:18:8a:
                    2a:0e:4b:8e:a7:c1:cd:2a:25:2f:90:c5:78:e6:5c:
                    f3:b6:fe:42:bf:ae:9c:d2:c6:d4:bc:6a:fe:41:fb:
                    4e:c3:d5:d7:89:b8:d8:79:9b:80:32:2d:54:67:f1:
                    6b:f7:f6:65:0c:02:9c:71:cd:a1:1c:2d:64:8a:5d:
                    d7:a5:00:82:0a:30:41:b4:62:c7:4e:b9:5a:b2:a7:
                    56:d0:44:b7:e9:7f:d2:b7:06:c6:c9:ee:3e:36:5c:
                    95:34:7b:8f:f9:dd:bc:a5:34:48:9d:d9:5d:28:45:
                    0a:86:82:c3:5d:5a:c9:7c:e5:b6:21:2c:92:e7:bc:
                    37:ae:32:a6:d9:e0:a0:74:86:a1:f4:4c:58:63:6f:
                    cf:0b:88:de:1f:da:5c:1e:50:2d:f2:1a:08:f6:7d:
                    f8:9c:a5:6b:f0:de:70:a8:84:a9:01:b7:06:45:64:
                    3f:42:cc:8c:94:7f:5f:ad:7d:fb:57:38:2e:96:7f:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:E7:58:C5:2E:B4:D0:BA:48:5C:C8:9A:E0:08:B9:55:DE:A8:B2
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:a3:85:f5:2c:44:ea:48:6f:c7:89:15:9b:a1:ed:fe:7f:10:
         42:aa:db:0d:aa:82:05:3c:b7:da:9d:de:5c:d5:c7:6f:28:ac:
         01:55:f1:80:e8:0b:b4:46:88:17:fe:a5:69:14:c8:9f:be:fa:
         4a:c1:eb:6a:10:cc:39:ec:13:76:94:9b:26:3d:bf:03:6e:99:
         2c:c0:9e:c7:5a:02:d6:b3:b0:1c:9a:04:2f:f0:fa:6d:b4:d8:
         aa:16:2a:c9:5f:be:bc:f8:fe:11:9b:7f:de:f8:b7:04:94:e4:
         31:7f:28:49:43:9e:08:6f:a4:3b:b7:cb:83:0d:b2:bd:e2:aa:
         1d:72:c6:a5:f3:1b:b5:f8:cc:fb:fe:2a:da:4c:83:67:79:4b:
         3d:09:9c:de:93:29:a4:ce:01:75:9d:f1:da:a9:69:0d:b4:2e:
         48:1e:61:95:01:7c:3b:66:b8:1a:f9:4c:04:e7:0b:18:e1:cc:
         9f:33:fc:e6:4e:3c:be:b8:07:84:b8:7b:a8:bc:74:d7:5e:1d:
         1a:01:c8:e7:6c:4b:b9:9e:8b:54:c5:ff:00:36:35:70:17:ff:
         07:b1:b3:35:93:e2:d5:79:a3:96:b4:22:bd:9a:ef:4b:fa:7a:
         06:d8:b7:d4:b8:6a:d2:b4:f5:81:08:c9:08:30:3a:f5:b3:d9:
         09:07:3c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:24 2025 by rpki-client