Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/812B7A9E905411EF9B4B1342C4F9AE02.roa
File:                     812B7A9E905411EF9B4B1342C4F9AE02.roa (raw, json)
Hash identifier:          fAamefLHNOSeQgplRkPA7921C4/+E2ZS4jK3rvLu+S4=
Subject key identifier:   B7:14:59:40:C6:47:D7:70:06:21:11:F3:5C:03:22:5E:8C:07:3B:77
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       07EE
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/812B7A9E905411EF9B4B1342C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:14:23 +0000
ROA not before:           Thu 28 Aug 2025 14:50:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131378
IP address blocks:        160.191.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2030 (0x7ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac2f-60a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:97:77:35:e4:64:b6:62:54:10:c6:c1:f5:e4:
                    ba:41:89:85:f3:80:f5:ee:44:34:24:ad:36:d8:c6:
                    e2:3a:d8:31:ad:a7:be:8c:fa:27:ef:d3:0d:68:b2:
                    49:e5:a8:f3:0e:48:dd:37:33:0f:a6:c4:bb:b5:b3:
                    8d:2c:91:f9:d2:b7:01:a4:61:cf:6f:e8:d6:95:91:
                    82:ac:b0:35:6d:90:e0:47:fe:76:34:a0:7c:42:a7:
                    61:5f:b2:98:ec:76:25:9d:06:c1:a1:42:c4:ec:ad:
                    b3:54:bb:1c:df:ab:14:7e:82:5a:b4:dc:b1:c6:ce:
                    ec:f9:93:70:7a:e5:37:27:74:62:b1:79:51:50:a3:
                    7c:91:e2:ea:f0:22:84:7b:55:a3:78:55:11:59:9e:
                    3b:26:2b:be:e1:0c:83:64:f4:a8:c9:0d:15:38:a0:
                    6e:14:93:63:cf:fc:43:2c:a6:e1:a6:0f:79:10:5b:
                    01:48:a0:f0:3b:36:93:b4:e8:3f:46:92:a9:7b:94:
                    c6:61:39:b7:0d:1d:ce:65:37:9f:6a:b4:93:d3:e4:
                    40:b2:63:97:23:3c:94:72:df:00:be:b5:d2:12:37:
                    eb:76:5f:ed:5a:44:fc:d3:03:e3:33:14:38:de:47:
                    8e:ef:2f:0c:88:19:0d:d7:be:37:3b:45:a9:0f:87:
                    1c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:14:59:40:C6:47:D7:70:06:21:11:F3:5C:03:22:5E:8C:07:3B:77
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/812B7A9E905411EF9B4B1342C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:65:e7:63:75:5b:ff:b0:9b:01:a8:1a:3d:82:ed:c8:9e:7d:
         95:d2:ce:da:99:fc:d0:d7:4c:9d:dd:89:0c:56:49:9f:99:2e:
         6a:2c:ab:5c:e3:e2:91:da:ba:ec:8f:3c:31:67:2a:eb:4f:c2:
         16:2f:91:61:b4:28:33:d6:88:ba:33:5b:4e:6d:98:9c:5f:17:
         b6:a2:22:2e:6e:0e:10:40:70:31:d2:72:67:9d:0f:79:a9:ab:
         5b:57:a5:16:e5:dc:06:4d:36:da:1f:8a:04:50:ab:f5:01:2a:
         23:4a:87:7b:83:22:35:8a:07:58:cd:a2:82:98:06:32:00:58:
         b4:ca:7f:21:8e:5b:a7:9d:db:c9:b3:e7:86:a2:2a:f1:10:d1:
         ed:49:5f:34:68:0e:b7:9d:46:52:48:ae:3f:ba:80:f2:bc:16:
         e9:86:95:44:7f:f9:66:b9:a3:97:32:95:93:fc:cb:4c:df:2e:
         75:1e:30:d0:71:b4:63:14:8f:c4:a6:d2:6d:1b:a7:1f:8f:92:
         1c:b0:14:ac:b9:85:01:e6:ac:b0:c3:5b:0c:b4:3a:de:86:85:
         55:df:a1:3f:fd:ec:5e:3e:b2:71:01:66:ef:50:fc:6d:a0:b6:
         cf:47:d9:c6:ea:a9:90:da:96:17:82:05:81:9a:cc:94:b7:78:
         18:fa:f0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:16 2026 by rpki-client