Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/DE76C686889611F1B93BA8C46911F970.roa
File:                     DE76C686889611F1B93BA8C46911F970.roa (raw, json)
Hash identifier:          qJE6TO8uJYgLahM06vJS4Wmd4X/FNEwPw6/9LFb1+gE=
Subject key identifier:   C4:E0:13:52:08:41:84:6D:90:A0:48:51:A9:C7:52:57:7C:1D:EC:6F
Certificate issuer:       /CN=A91EBA90/serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
Certificate serial:       07
Authority key identifier: E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/DE76C686889611F1B93BA8C46911F970.roa
Signing time:             Sun 26 Jul 2026 02:08:19 +0000
ROA not before:           Sun 26 Jul 2026 02:08:18 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132571
IP address blocks:        160.236.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA90, serialNumber=E48BF52FBC2F53DD3078BC94A3BBAD0A3126F3C5
        Validity
            Not Before: Jul 26 02:08:18 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a656c12-b64b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:da:f4:d4:84:34:06:d4:35:a9:1d:a3:df:
                    51:b6:64:29:cb:c4:6a:86:17:04:0f:81:d0:80:a8:
                    76:81:ee:a5:1e:36:2e:c9:f3:55:3b:e0:50:8b:8f:
                    fa:7a:11:9c:51:13:07:d5:2f:4f:7c:69:46:8d:bb:
                    45:a1:66:92:f9:8a:2d:5b:57:9a:79:17:92:2b:d0:
                    80:b2:30:ae:09:3d:82:2d:3d:8d:3d:8f:2f:7f:e1:
                    45:4d:e8:1d:d0:6a:ee:3c:3a:f3:fa:ff:31:f3:6b:
                    a4:86:c5:59:0a:9a:31:f5:c9:76:32:d3:ed:34:41:
                    57:01:e9:64:ac:92:65:0e:d6:59:0e:f9:e5:6b:6f:
                    f8:d9:15:a5:24:3d:3f:b0:13:22:03:00:01:31:a8:
                    3c:19:63:5e:76:7e:55:1d:62:3a:4d:aa:33:6e:c5:
                    28:60:b1:df:7e:18:aa:d7:b3:27:a8:70:76:df:0d:
                    31:40:67:be:7a:b7:cd:f1:d9:62:fe:c6:3a:63:67:
                    29:d9:57:5c:1b:d6:7f:bb:16:fa:ac:17:fa:53:42:
                    bc:09:fc:74:57:37:27:7a:08:3a:23:19:a9:73:39:
                    a0:06:e5:cb:80:b3:00:bb:3f:bd:74:73:dc:ec:34:
                    b9:5a:96:97:54:3c:d4:7e:9f:bc:9c:a6:10:3f:22:
                    65:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E0:13:52:08:41:84:6D:90:A0:48:51:A9:C7:52:57:7C:1D:EC:6F
            X509v3 Authority Key Identifier:
                keyid:E4:8B:F5:2F:BC:2F:53:DD:30:78:BC:94:A3:BB:AD:0A:31:26:F3:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/5Iv1L7wvU90weLyUo7utCjEm88U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5Iv1L7wvU90weLyUo7utCjEm88U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA90/A22863DC859011F1AB6CA19291A30FBC/DE76C686889611F1B93BA8C46911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:f5:b0:4a:aa:9e:c9:60:25:dd:fe:4d:94:54:ec:52:c4:35:
         63:92:89:af:75:7e:5d:4f:aa:33:e2:ea:07:b9:2f:1b:19:81:
         4d:5e:30:57:ea:e9:9c:ee:8e:43:a7:d2:0c:a5:65:9a:76:0c:
         63:7a:b5:c2:41:89:db:54:77:a3:85:11:60:2c:fe:2e:de:1d:
         96:22:f6:2e:db:b1:bf:fb:c2:50:dd:b5:8a:58:ed:c1:7a:f9:
         63:15:33:0a:42:07:96:5f:da:b7:91:e8:24:3c:12:36:1a:a9:
         0d:08:1a:2a:28:0a:a3:3f:87:ab:d8:30:a2:d1:ee:97:fd:3e:
         d3:5f:1f:a3:88:a2:f2:de:82:9b:46:e7:06:65:9d:1a:52:0a:
         e1:41:2d:6f:9f:3c:ba:b6:55:5b:28:29:6c:05:0d:3a:f9:1c:
         53:2c:dc:cf:0e:62:a6:14:15:5a:f9:10:e3:21:b9:33:9c:69:
         c0:9a:8c:1a:10:b3:a4:cb:30:48:68:1d:0c:18:c4:16:9c:d8:
         8b:98:0c:14:20:96:10:52:57:0a:54:3d:fe:27:52:5a:b2:ed:
         db:6f:33:3d:5e:9d:c7:4e:df:3e:1a:b0:a6:53:02:09:e0:cf:
         8e:c1:50:60:68:cc:95:f4:e3:1f:64:ca:03:96:46:31:f3:3e:
         92:18:eb:5d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:45:32 2026 by rpki-client