Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BD712758315B11F08E91F930C4F9AE02.roa
File:                     BD712758315B11F08E91F930C4F9AE02.roa (raw, json)
Hash identifier:          7dErMh5ewcVUlqwv8Md90J4xo9+pVkUYcbN+h8yIMHg=
Subject key identifier:   BE:2B:C1:DD:15:B0:A7:9F:15:8B:6C:32:4C:F4:5D:32:31:80:41:FA
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       080B
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BD712758315B11F08E91F930C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:14:48 +0000
ROA not before:           Thu 28 Aug 2025 14:51:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151922
IP address blocks:        157.66.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac48-e7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:51:61:00:2f:67:17:1f:fe:a9:4b:3d:eb:
                    a6:63:6f:16:03:c6:a0:c3:2f:cb:24:72:65:ab:76:
                    51:89:7d:9c:69:04:45:eb:bd:3c:6f:54:37:6f:8f:
                    57:9c:54:90:d6:96:14:cd:12:48:7c:c2:c0:8d:8b:
                    11:a8:b9:9c:59:cd:51:29:98:69:e0:4e:f0:25:2f:
                    31:0c:f4:1d:19:14:43:46:ae:b3:7c:d9:3b:33:c4:
                    66:db:62:68:d7:73:4b:03:45:d4:dc:75:6f:7b:56:
                    fb:83:75:e3:a5:11:24:55:68:12:fb:10:9a:43:83:
                    3d:4f:de:eb:bb:0b:43:07:d7:ba:53:f3:80:81:d5:
                    c3:0a:f1:1f:88:88:12:f9:b7:46:93:7b:ac:77:3f:
                    d6:bd:a2:cc:49:da:6a:42:ba:cc:7e:4b:14:08:de:
                    65:7a:e7:3f:51:da:b0:99:da:bc:25:0c:58:98:55:
                    0b:da:a2:5c:d8:e5:3a:22:5f:70:e1:08:2b:d7:6d:
                    c4:a3:af:c8:83:2d:1e:19:07:e8:ae:8a:20:2b:14:
                    80:35:a6:ef:7b:3f:6a:a5:c9:63:0e:95:fb:08:a2:
                    2d:54:7d:87:5c:f4:b2:e9:25:b1:d7:b7:83:f4:38:
                    ca:13:c7:71:62:e5:51:44:ae:69:3c:27:6b:3e:c2:
                    10:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:2B:C1:DD:15:B0:A7:9F:15:8B:6C:32:4C:F4:5D:32:31:80:41:FA
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BD712758315B11F08E91F930C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:56:cf:99:85:14:8f:de:f2:02:33:2c:20:c5:83:de:44:01:
         44:a3:5f:d9:2b:9c:92:c3:72:06:cd:e1:bc:37:ac:8f:a6:02:
         ca:d8:47:dd:1e:aa:c1:d7:db:e8:b8:11:02:49:1a:ca:43:77:
         bf:c7:04:fb:c3:a0:88:1b:ba:fa:9d:d7:42:4c:4c:f9:36:64:
         c6:f3:2d:76:94:b0:c8:28:9c:48:e4:c4:04:09:ef:31:f1:1a:
         ed:7d:02:59:61:a7:32:56:26:10:b7:c3:56:f3:94:30:58:ca:
         78:2e:d9:6c:95:53:c1:e8:62:43:94:ed:c0:95:90:38:23:52:
         92:dd:fb:ec:07:fc:bc:a2:d3:1e:11:fc:e3:0d:6e:5f:54:c3:
         68:9a:26:fc:7f:ec:e5:1a:27:e6:81:4a:f1:c4:a7:27:54:8c:
         a2:9f:1b:bd:6b:1e:45:d7:a4:5e:26:f4:0b:4e:49:69:e1:9c:
         84:a5:88:da:dd:1f:20:72:d6:73:d9:09:d4:4f:c1:12:a2:76:
         d2:27:12:e7:4b:a2:b4:aa:e2:39:f7:93:5d:9f:c0:41:2b:75:
         16:aa:38:83:17:f7:40:aa:9d:a2:22:8c:25:ae:c9:c8:27:d8:
         3a:d6:62:17:82:b6:58:fa:4b:01:b5:c0:63:2f:33:cc:22:2c:
         a8:49:89:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:17 2026 by rpki-client