Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa
File:                     8855006E717911EFBEA3FD86C4F9AE02.roa (raw, json)
Hash identifier:          rQDc+NfOpZlVuDxy0TTMNTUyuByBiN/uq8htLMp2xpw=
Subject key identifier:   CE:88:C2:B2:D4:CC:F5:11:58:2B:41:5A:10:CF:06:31:99:77:9D:06
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0824
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:15:10 +0000
ROA not before:           Thu 28 Aug 2025 14:51:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152982
IP address blocks:        160.30.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac5d-89b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:4a:6f:01:38:56:21:08:11:22:57:c6:99:
                    78:e2:49:cf:0a:e2:c5:eb:85:ae:53:f5:d1:ff:e2:
                    91:b4:5c:35:9a:d0:a8:b4:29:25:38:74:ce:78:a5:
                    e1:1c:04:73:41:ae:16:87:87:56:1d:5a:fc:76:e3:
                    8b:ce:56:43:fd:c5:49:ad:48:75:67:98:91:75:45:
                    8a:a1:b9:ca:2f:7d:94:2e:bf:33:9d:14:38:25:ad:
                    88:03:94:b8:74:ee:75:63:95:37:c7:91:61:cf:9d:
                    6d:a6:12:b5:d5:13:e0:18:3a:a3:6b:86:91:51:bd:
                    76:af:76:5a:4f:eb:a2:1a:02:38:ec:c9:5f:94:03:
                    47:5d:75:52:ae:fd:6d:49:53:4c:69:6c:31:d6:73:
                    4a:62:14:f7:af:cc:24:0f:a2:57:c4:d8:2a:9e:51:
                    5d:b7:12:3f:a7:2a:9f:3f:88:03:04:40:00:63:24:
                    2c:2c:8d:1f:ef:fc:13:f5:16:37:0d:45:e3:cf:07:
                    e1:0a:14:52:c0:d7:05:73:97:26:0e:bb:9e:b5:cf:
                    e1:7f:ef:e6:ff:b6:96:a0:a0:12:f8:83:af:62:4f:
                    75:2a:b3:2b:88:ad:49:52:11:50:9d:f2:dd:cd:b8:
                    ec:fc:f2:c7:99:c9:0b:f0:2b:0e:92:5b:50:23:b6:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:88:C2:B2:D4:CC:F5:11:58:2B:41:5A:10:CF:06:31:99:77:9D:06
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:4f:cc:ef:63:5b:93:f9:1a:e3:a5:1a:d4:41:47:7c:89:
         4e:5c:5d:a7:ea:67:f0:25:c2:79:82:f5:e4:72:8d:b9:62:63:
         de:20:1e:29:04:e2:4d:3b:39:cb:20:a9:e5:1b:06:7d:25:aa:
         a2:ec:ea:ee:dd:80:16:69:39:19:41:7c:ef:47:eb:79:cd:26:
         d9:e3:96:45:c8:34:69:79:3c:b3:f7:6f:61:da:07:b1:ae:d3:
         ba:ed:76:e5:93:9e:1c:13:90:a5:fd:ab:ed:44:5b:f5:be:fd:
         35:72:2c:a0:a3:bc:58:4f:b3:18:18:c1:48:db:e9:3f:de:0c:
         a6:f3:95:4b:e5:1e:b4:cf:65:c3:01:10:3c:75:0b:76:b8:8d:
         f1:8d:7d:6b:1e:4c:d5:af:8b:6e:f6:89:14:bd:23:e6:7a:35:
         77:f6:20:03:8b:16:1c:ec:6c:fb:e4:3b:f5:15:fb:27:d5:74:
         d5:68:7b:de:dc:65:b1:8a:75:e3:b7:6d:2f:ec:ec:6f:e2:8e:
         be:c9:2c:b1:df:02:b2:11:96:49:72:f2:e2:e9:c8:af:5b:d6:
         91:82:aa:cb:2a:21:4b:75:fc:98:6c:1a:bb:2a:c6:93:62:9a:
         9f:69:7f:55:83:46:d1:41:05:79:8f:5f:2f:17:5c:60:2c:18:
         cf:43:2b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:40 2026 by rpki-client