Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B0EF234717C11EF9BE6B668C4F9AE02.roa
File:                     9B0EF234717C11EF9BE6B668C4F9AE02.roa (raw, json)
Hash identifier:          KI9HWUUpIKQ/BZLeyfKf/EZtQM9dlxyWxEUl+DD4jiI=
Subject key identifier:   86:9D:27:E8:A2:33:69:80:0B:44:C6:5C:B5:62:B6:0E:1E:6E:F3:2C
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       081E
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B0EF234717C11EF9BE6B668C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:15:04 +0000
ROA not before:           Thu 28 Aug 2025 14:51:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152974
IP address blocks:        160.30.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2078 (0x81e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:30 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac58-6170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:88:8d:77:aa:2d:22:d3:59:f6:e5:f8:c4:
                    f6:7f:e4:31:3f:9b:7d:06:60:ca:a0:a5:0e:97:ec:
                    18:41:2d:83:7d:8c:65:86:2c:ad:79:f1:09:8a:4c:
                    6c:b2:77:ee:c8:22:2b:36:14:37:d6:67:c6:93:2d:
                    7a:f6:20:9f:ea:85:30:e2:df:cd:88:f8:43:36:00:
                    84:6c:33:56:f3:10:c6:2a:6c:0d:2b:59:14:a5:b4:
                    11:99:5f:20:12:c7:39:60:64:01:31:11:ee:a5:0c:
                    5c:25:3c:9b:7e:30:92:12:2d:a8:80:b1:d3:13:02:
                    22:7a:0d:0f:0e:1e:f6:7d:dd:d2:a2:53:b0:67:3c:
                    96:99:d9:40:8f:33:4a:e6:75:dc:d2:6c:7e:24:3f:
                    f8:63:30:8d:0d:82:33:bd:e2:cb:05:6b:3f:e6:78:
                    ca:92:a7:90:94:5d:62:5f:b1:32:c8:31:0c:26:51:
                    ff:3c:11:dd:2d:c6:cb:9b:90:48:71:3b:33:d6:45:
                    ce:5c:b3:5d:3a:fd:aa:a2:74:a3:07:77:c0:a7:38:
                    69:74:d7:45:5b:0f:a1:66:dd:74:a7:93:95:07:8b:
                    b4:ab:65:fd:e3:4d:de:77:41:1b:1e:c2:17:ea:54:
                    23:05:ec:f2:31:e8:ea:ce:40:5b:5d:d4:11:55:cf:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9D:27:E8:A2:33:69:80:0B:44:C6:5C:B5:62:B6:0E:1E:6E:F3:2C
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B0EF234717C11EF9BE6B668C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:80:d5:25:c9:0c:f4:6d:1a:8c:75:e4:43:6d:9f:f3:e9:9c:
         8b:4a:30:49:a0:45:89:6e:23:6e:64:3e:f4:e6:a2:3e:1b:b8:
         f4:17:c1:94:a0:3f:ce:bf:44:8f:9a:d8:fd:18:8d:b4:9a:bb:
         ca:bc:ac:54:83:a4:6b:02:41:38:d1:01:18:db:7f:dc:67:73:
         cb:74:a8:d6:bc:95:f0:a2:8d:4d:d1:ba:6d:cc:9b:f1:80:4c:
         ad:39:fc:ea:0e:f8:72:89:d0:92:24:ca:b0:bc:be:9a:9a:13:
         45:55:c8:64:b7:b9:df:eb:3b:c8:6f:ee:8d:63:68:fd:3a:f1:
         bd:5c:7f:45:a4:bf:ff:1f:5f:f3:55:82:db:f1:2c:5e:bc:75:
         89:3b:ed:09:8e:e9:e3:19:e5:ba:58:fd:15:c8:8f:ca:79:5d:
         3a:aa:07:4a:08:a8:d9:90:32:b2:cc:4e:a4:e9:12:57:7b:cf:
         d3:71:d9:de:97:9a:de:e3:c0:07:75:c8:e5:4f:d2:b5:bb:e2:
         01:ae:b5:c2:0d:6d:2d:7c:8d:1b:7e:d2:b9:27:b1:e1:b4:b4:
         e9:4a:75:b1:7f:71:1a:d0:97:78:d8:a8:bf:a7:ed:13:d1:d6:
         2f:55:46:ae:b6:28:2b:bd:80:dd:c5:3e:48:c2:da:f9:99:ad:
         79:22:11:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:33 2026 by rpki-client