Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/556882C8B64811F1AA5369556811F970.roa
File:                     556882C8B64811F1AA5369556811F970.roa (raw, json)
Hash identifier:          glYHRgDoUol4fEbX6q2WhmbX2gGQRrjMe/OOi8CvuWk=
Subject key identifier:   9D:DC:33:C3:38:1B:18:84:34:75:2C:77:7C:42:A1:89:B7:9E:B8:16
Certificate issuer:       /CN=A91D8BB1/serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
Certificate serial:       F8
Authority key identifier: 41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/556882C8B64811F1AA5369556811F970.roa
Signing time:             Tue 22 Sep 2026 05:42:01 +0000
ROA not before:           Tue 22 Sep 2026 05:42:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139043
IP address blocks:        160.187.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl
                          rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 06:20:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8BB1, serialNumber=412A8D17DF907A783765012A83B78B7CB1CA2512
        Validity
            Not Before: Sep 22 05:42:01 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6ab21529-a0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:08:d9:ad:ea:bc:3e:77:e3:e5:3a:e7:1d:f5:
                    26:09:b9:3e:ca:a8:6d:3d:67:1e:42:b7:74:ef:89:
                    14:16:c0:7f:53:52:fc:99:cb:8e:39:70:5d:f0:46:
                    a8:32:ab:b1:5f:87:6f:8e:2b:dd:17:05:21:d1:e0:
                    8d:25:c5:10:08:89:f2:87:f5:7c:b7:5f:e8:48:bc:
                    9a:68:6a:20:0d:84:bb:04:3d:fe:4b:49:ef:be:02:
                    82:10:3b:f6:bc:6b:ad:c2:ee:b2:2b:34:b7:48:9a:
                    ec:53:df:ff:1c:fc:df:9a:d1:ae:2d:6e:46:cf:52:
                    69:aa:6e:d6:96:f6:8b:e2:45:44:27:bd:81:7b:2b:
                    2b:50:d0:60:5a:9b:f9:68:73:11:e6:93:31:74:29:
                    0e:7d:aa:6b:6b:b7:1a:82:0d:65:bd:c2:4a:77:55:
                    5e:97:19:a8:9c:fa:49:a4:12:cc:93:e1:51:2c:f8:
                    3c:db:19:86:74:ac:a7:da:c3:b8:53:44:2e:9b:02:
                    cd:b5:3d:57:5c:76:6e:e2:ab:c2:b0:cd:91:d0:98:
                    bd:9b:ed:6a:d6:39:c9:95:85:ee:e8:6b:0e:c9:3f:
                    f2:83:1c:89:9a:a5:77:1a:67:40:ce:e3:00:5e:9e:
                    45:a0:27:58:a7:6f:b0:04:86:96:f2:19:88:ba:72:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:DC:33:C3:38:1B:18:84:34:75:2C:77:7C:42:A1:89:B7:9E:B8:16
            X509v3 Authority Key Identifier:
                keyid:41:2A:8D:17:DF:90:7A:78:37:65:01:2A:83:B7:8B:7C:B1:CA:25:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QSqNF9-Qeng3ZQEqg7eLfLHKJRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8BB1/51F9F6143D2511F080C48955C4F9AE02/556882C8B64811F1AA5369556811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:dc:26:9b:fe:56:93:b0:b8:26:54:84:2f:aa:9d:63:f1:
         64:61:18:12:bd:89:e7:03:2d:f0:3f:58:03:c3:ff:1e:f4:af:
         c1:4f:4b:c1:3a:47:3c:ba:e2:df:3b:a8:7c:98:37:50:f8:fb:
         85:cd:02:7c:cf:3d:ee:8d:cd:78:81:27:98:62:42:95:93:a2:
         18:b4:e2:e1:b4:48:f1:b9:9d:ac:36:18:0f:45:79:14:05:a0:
         49:51:76:2e:22:ad:8b:e4:c3:15:b0:17:8a:cc:44:5e:b1:e5:
         30:52:de:eb:89:d9:f2:47:f3:b5:71:fb:23:73:c6:66:61:84:
         1a:fb:d1:3c:cd:b5:6e:23:36:0c:4e:85:6f:6c:e4:5b:de:25:
         f0:17:2a:f7:dc:72:26:72:8b:a8:a4:a6:ae:2d:47:e8:19:f4:
         7d:c9:cd:12:b1:49:66:fe:69:b2:67:a2:aa:3d:ba:93:73:0e:
         a3:32:35:a1:13:a9:db:17:c1:ab:6b:14:88:7a:00:7f:a6:bb:
         2a:79:9e:03:db:b8:65:bf:aa:81:0b:9b:aa:84:1e:87:02:f1:
         2d:62:5f:c7:47:57:09:4b:11:b8:65:e3:b2:04:b0:da:d3:9e:
         32:af:f9:43:16:7c:1a:d8:82:73:aa:14:00:17:8f:83:5a:25:
         5f:5e:49:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:08:09 2026 by rpki-client