Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6ABF128A92A111EF8384F726C4F9AE02.roa
File:                     6ABF128A92A111EF8384F726C4F9AE02.roa (raw, json)
Hash identifier:          onA2ex0TaUYJWAdpAHF86MNMetxuTBUx1ORVSjTXeYQ=
Subject key identifier:   1B:06:0E:25:FF:93:2B:B8:B8:55:49:49:C9:C2:9D:E6:AE:E6:53:A6
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       082F
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6ABF128A92A111EF8384F726C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:15:19 +0000
ROA not before:           Thu 28 Aug 2025 14:51:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153017
IP address blocks:        160.191.46.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac67-7b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:85:b2:c5:03:84:1f:ea:ff:c5:ac:17:50:67:
                    bf:fc:61:e3:1c:a1:ad:fd:22:83:06:fb:21:16:13:
                    19:68:46:d7:34:5b:fc:f2:50:66:8c:ba:e3:fe:83:
                    b1:81:65:96:5a:25:54:50:c5:64:03:07:3e:f7:e7:
                    83:19:50:07:a8:73:5c:5e:ef:0f:28:c0:ce:3c:47:
                    08:71:81:67:b1:fd:76:43:68:f6:58:11:1e:ec:0a:
                    e1:14:6b:a7:f5:99:46:24:80:3b:71:ab:22:34:5a:
                    b9:8a:5c:18:c4:ff:4c:f5:48:0e:e6:e6:03:26:0c:
                    df:c7:b6:a0:d1:f2:82:b6:e3:79:09:b5:2b:f8:c1:
                    a4:38:53:2e:55:ac:ac:d1:4f:13:e4:79:97:8f:b7:
                    9b:49:24:4f:b4:da:25:28:a7:b0:b0:2f:dd:77:ba:
                    e9:c3:94:6a:ed:2a:59:f9:fd:1b:cf:e2:f1:8f:20:
                    b2:78:e2:d1:6f:e5:f5:03:12:73:e4:16:0f:65:e3:
                    f8:36:a8:07:1c:c4:1a:53:d0:48:c2:d4:a2:d5:05:
                    89:46:70:06:07:5c:47:5b:70:3d:91:ca:41:26:ea:
                    1e:41:30:14:be:48:74:fa:67:cf:73:6d:44:60:8a:
                    2c:40:dd:7e:b1:e8:77:f4:89:0a:d2:84:f0:c3:42:
                    4e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:06:0E:25:FF:93:2B:B8:B8:55:49:49:C9:C2:9D:E6:AE:E6:53:A6
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6ABF128A92A111EF8384F726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:86:cb:d6:f1:53:e6:60:7f:f3:2c:95:dc:e7:b4:c2:0b:86:
         02:7f:2f:bd:70:a8:ed:35:77:b2:1e:5f:3a:2a:93:c7:fa:0e:
         5b:ed:1d:c5:8e:0e:80:5f:e7:c0:06:d9:26:02:22:8c:89:d2:
         4f:45:10:a8:88:4a:d6:1e:59:8d:4c:7c:74:cb:32:9e:51:dd:
         a2:02:b8:2c:90:e3:3b:6c:73:7d:5b:08:92:1e:57:1e:de:81:
         f2:f6:2d:69:d3:80:27:be:4a:c1:9b:b1:9a:8e:33:24:fc:6d:
         5c:f2:a8:68:cb:59:3c:35:6c:88:d0:70:c6:cf:c6:38:5d:75:
         6f:7c:50:77:83:4c:48:55:92:5a:11:41:36:40:88:e3:42:96:
         52:36:c0:a9:23:3e:b3:52:55:e9:bc:1f:16:35:8a:66:ad:fe:
         a4:4d:b2:5f:51:c2:96:c8:52:3a:86:5b:fe:54:b5:f2:9a:74:
         93:61:38:77:44:66:74:af:9a:9e:52:21:b1:06:61:4d:3b:ff:
         d0:25:12:74:e1:8f:2c:91:84:9e:2a:56:b1:e2:30:94:7d:50:
         06:a8:63:34:31:74:f0:49:f8:e1:22:1f:86:08:d0:6c:cf:e2:
         fb:c0:6a:04:6a:13:e4:e0:b9:46:12:82:77:31:83:28:f2:cf:
         2a:63:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:35 2026 by rpki-client