Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/99286D10699D11EFA9CA5639C4F9AE02.roa
File:                     99286D10699D11EFA9CA5639C4F9AE02.roa (raw, json)
Hash identifier:          eVSVyk1oMaPMnrz8WYfowFkUHxQ9lqosYwP6QqCKVfU=
Subject key identifier:   B7:78:CE:88:5C:A5:50:96:83:F1:3A:00:5F:E6:9E:41:1B:08:AD:DC
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23C1
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/99286D10699D11EFA9CA5639C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:19:26 +0000
ROA not before:           Fri 02 Oct 2026 15:19:26 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152983
IP address blocks:        160.30.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 Oct 2026 15:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9153 (0x23c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:19:26 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb7e-ffdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:50:c2:b5:bb:12:99:79:04:5d:e0:e6:bc:
                    2d:8e:6b:67:10:43:03:ff:25:30:f1:d1:87:c6:66:
                    de:55:e2:29:6b:05:38:db:80:39:a3:3a:11:58:54:
                    24:d7:46:7b:41:7b:4e:a1:6a:0f:ce:21:73:c0:1e:
                    10:04:e3:e9:e4:62:d4:d4:1e:32:bb:22:71:d3:fe:
                    63:4a:5e:7c:14:75:79:b7:2f:39:a8:f7:cb:a3:5e:
                    33:08:7c:af:3b:81:78:c9:d7:99:66:4a:d5:82:56:
                    e5:d9:5b:fe:b1:bd:8f:fd:58:08:59:70:fd:22:bd:
                    84:5a:3d:88:42:1c:c1:59:b7:dd:d7:67:96:87:29:
                    04:a7:9a:b1:c6:e8:6f:7a:e9:33:e5:c9:80:d2:ee:
                    b6:95:47:8a:45:b5:e8:36:14:04:ac:92:4c:e8:f7:
                    ff:b8:1f:3c:09:51:8a:82:9b:26:23:e0:55:a7:61:
                    2d:84:1c:bc:5b:54:e8:ba:b7:ef:d8:0f:6c:7b:7b:
                    a1:17:a3:ff:ef:dc:8f:8d:e8:22:20:ce:3e:44:f2:
                    b1:4d:0e:b5:9a:96:c6:5a:a9:db:b1:2c:62:ab:9e:
                    bc:72:0f:09:91:4c:12:28:b8:99:3f:08:ae:62:42:
                    8f:36:15:e4:80:06:07:ba:d7:c3:4e:05:1b:53:9c:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:78:CE:88:5C:A5:50:96:83:F1:3A:00:5F:E6:9E:41:1B:08:AD:DC
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/99286D10699D11EFA9CA5639C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:95:6e:8d:40:7b:0b:96:90:07:aa:ba:b1:47:66:69:3b:fe:
         e5:98:0c:d6:cc:43:a4:6b:06:6d:93:90:2e:8a:72:af:86:b4:
         95:ed:30:53:90:01:7a:fa:9e:4f:62:0a:3c:89:3b:29:5e:67:
         01:28:cf:7d:06:7a:d6:57:8d:81:5f:85:56:37:04:6e:6d:b4:
         d0:f2:75:da:6c:e2:0d:36:8b:51:7c:f5:9e:4e:cc:8a:bb:bf:
         e7:70:15:b8:98:53:a8:74:53:7f:27:bf:34:cc:af:b9:6e:6a:
         05:ed:a2:03:7a:3d:00:87:22:d3:5f:62:94:98:35:a9:20:e0:
         3a:ce:cc:81:75:3e:0f:ba:6d:99:2d:8d:01:67:00:3c:b0:95:
         11:7a:d7:a2:4b:ad:5b:b3:02:24:b1:ba:41:f1:c0:37:c3:9d:
         02:61:7e:41:38:4c:91:b4:86:29:e2:6f:63:7d:11:90:10:95:
         7b:ac:44:04:5b:ce:3a:61:2f:9d:ef:5a:85:00:b3:74:dc:45:
         22:06:09:e9:7d:d1:75:db:63:44:fc:2f:fd:7c:cf:df:74:d8:
         89:12:c0:52:88:05:8d:2a:a3:b1:5e:f6:72:ac:ed:a1:b9:64:
         b0:cc:a1:5a:3f:65:eb:38:58:5f:9c:d7:4a:6d:cd:c0:ae:a1:
         f6:ad:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:36:34 2026 by rpki-client