Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa
File:                     CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa (raw, json)
Hash identifier:          /4r6JUyUjDvXNoE8ESnFmjeadgs/ZpKXxm3WUMGj4JA=
Subject key identifier:   BA:96:A1:69:ED:39:08:2C:8C:A7:E3:3E:5C:61:30:3A:F6:CA:82:6F
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       13A0
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:18:42 +0000
ROA not before:           Thu 28 Aug 2025 14:51:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153005
IP address blocks:        160.187.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5024 (0x13a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a58022-f9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:c5:19:c7:18:d7:3b:8c:7e:d6:78:57:8e:
                    fb:c9:10:65:8e:02:44:50:bc:8b:57:85:0e:a6:83:
                    46:94:1d:c5:59:d9:f6:30:38:b1:2b:62:31:a2:59:
                    2a:8a:36:c8:59:7d:a8:06:fc:63:7e:e6:14:f6:85:
                    d0:c5:8c:58:37:90:53:3f:51:c1:ee:ad:79:fd:1e:
                    72:9e:20:4a:5a:8b:93:b8:76:bb:45:c3:10:de:58:
                    68:15:ef:26:2a:c5:09:b0:66:9f:6f:6d:79:af:5e:
                    48:59:9e:d8:f7:8b:cf:42:69:cf:7e:b2:51:82:b7:
                    8c:19:5f:99:1f:16:87:00:d2:bd:04:7a:42:65:a1:
                    5b:7a:75:de:7d:0e:9a:8b:d4:65:30:6f:db:11:37:
                    d3:71:4e:0b:81:3d:67:62:81:7e:30:df:db:54:2b:
                    1a:99:f2:f7:3f:15:83:65:a6:de:31:00:d6:a3:43:
                    14:ad:84:c3:cf:9d:ed:3d:13:e9:d6:30:f5:8c:c4:
                    bf:50:b4:2f:1b:13:54:6c:b2:04:a9:ae:66:04:aa:
                    c5:37:6d:63:a4:17:ae:75:19:24:fa:5a:1c:de:60:
                    42:a0:65:67:cc:d5:34:e5:bb:93:3c:9b:88:90:7d:
                    38:f9:4b:9b:a7:d3:cd:32:bd:ff:81:1e:38:ca:e2:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:96:A1:69:ED:39:08:2C:8C:A7:E3:3E:5C:61:30:3A:F6:CA:82:6F
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:dc:39:71:2d:84:0e:7e:72:a6:f7:44:5f:8c:1f:e4:2b:f9:
         1b:f3:d5:d0:ad:2f:24:d9:81:1c:4b:af:e5:5d:e9:e2:40:90:
         e7:73:98:32:6b:f9:fc:06:b8:51:16:8d:02:2c:98:f1:b9:e7:
         89:17:a9:89:63:f4:25:6c:d3:93:65:f8:c2:a1:38:97:7e:87:
         71:87:25:07:35:1e:2d:ab:95:d2:09:16:dd:15:9c:b7:ea:0e:
         df:23:eb:7b:c7:41:bb:ea:0a:ef:12:7c:11:97:ed:07:3c:12:
         b0:80:6b:06:c6:2f:ad:40:c7:3e:01:2a:50:7d:1b:22:04:d0:
         95:4e:ff:5a:d8:66:4e:59:1a:db:cb:b9:95:55:c2:b8:79:21:
         40:5d:a3:db:fd:65:47:27:8c:53:4b:56:39:16:82:5c:26:31:
         55:38:09:47:e9:1d:d8:28:7b:e0:a0:44:d6:94:16:68:8f:ca:
         1c:bf:12:03:0c:b7:b8:2c:54:ca:00:55:48:89:72:ee:f2:b6:
         a4:56:90:09:a6:57:03:16:15:cc:fa:66:a1:b6:85:21:e5:07:
         39:94:60:48:63:46:21:ea:c7:ed:66:21:24:5c:09:66:1e:fa:
         3e:7b:e9:30:ba:b4:42:20:be:22:b9:23:5b:5f:47:73:cc:a1:
         2f:f1:8c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:35 2026 by rpki-client