Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/405F76A699F211F18FCC90224711F970.roa
File:                     405F76A699F211F18FCC90224711F970.roa (raw, json)
Hash identifier:          5JyN7xP7RXHgrFRgLaTUohwI5F13RL7Y0ZSQKHPZWlE=
Subject key identifier:   0C:7E:72:AD:B0:7B:B5:A5:1F:20:4D:E1:01:57:11:E8:04:03:AA:68
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2358
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/405F76A699F211F18FCC90224711F970.roa
Signing time:             Mon 17 Aug 2026 04:15:17 +0000
ROA not before:           Mon 17 Aug 2026 04:15:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154814
IP address blocks:        160.236.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9048 (0x2358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 17 04:15:17 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a828ad5-f49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:af:38:bb:ae:c5:88:42:34:b7:d0:4d:ed:50:
                    69:06:d8:2c:cb:12:db:10:ef:55:70:a6:ab:6e:8a:
                    09:a6:e8:ac:f4:00:e7:46:d1:dc:55:1c:ad:30:72:
                    79:88:75:88:c2:ab:b1:94:05:28:8b:1d:87:e3:08:
                    99:be:27:d5:bb:2f:5e:bf:75:6e:b0:96:84:42:43:
                    a5:2f:09:fe:41:b9:13:8a:11:f1:1c:5c:f8:9a:91:
                    68:bd:17:89:59:17:d4:55:9d:92:35:e3:7b:3a:46:
                    54:4e:32:6c:70:2d:c0:26:f4:aa:4d:45:f4:c7:5b:
                    23:ce:02:da:40:91:a3:56:47:00:c1:1a:01:42:30:
                    35:07:1a:29:16:ff:e2:c1:c8:8b:19:25:f6:cd:50:
                    06:6e:51:9e:18:97:03:c6:9d:2b:1e:f5:97:af:72:
                    14:6e:5c:45:51:4a:c2:44:92:dc:ba:61:4d:2f:d0:
                    e6:df:57:60:4d:3d:46:19:47:8c:bf:0d:b0:14:7d:
                    09:f8:a7:89:b9:7a:9b:ec:16:d9:42:13:7d:8b:2a:
                    09:03:de:d4:a8:2f:32:78:85:af:ff:9f:d2:7e:7f:
                    ec:8a:3c:bc:4c:3f:79:00:33:5f:45:05:94:4f:39:
                    1b:d9:a6:aa:31:3d:36:7e:1d:ac:0e:c4:ce:cd:e0:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7E:72:AD:B0:7B:B5:A5:1F:20:4D:E1:01:57:11:E8:04:03:AA:68
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/405F76A699F211F18FCC90224711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:ea:72:59:0b:52:e4:14:4c:1e:49:bc:8c:5b:a0:44:6c:9f:
         5e:9d:7c:e6:ac:8d:5f:bd:b2:1b:46:cf:85:96:f0:25:48:23:
         b9:e0:ae:ef:23:bf:ac:c4:2d:0a:d5:e8:cb:47:7a:b6:24:a1:
         4f:1f:d5:fd:00:1a:09:62:82:e8:5c:d9:f2:c6:3f:fd:ee:4a:
         d2:c4:86:5c:5c:3a:6d:0f:cb:40:5f:15:ed:b7:ad:62:59:87:
         7a:48:d8:bd:4b:e7:fd:ff:cc:bd:5b:2c:7d:18:0c:ed:b2:1d:
         a2:63:4e:f5:e9:09:68:cd:0c:da:8d:16:69:90:14:5f:e4:f4:
         71:03:63:24:12:37:98:6b:61:38:cf:8f:bf:4c:26:ef:d8:f8:
         69:b6:5f:d7:61:58:76:53:08:52:26:93:1d:cc:a7:a3:0a:46:
         56:16:cc:60:e4:b1:78:f7:19:97:95:dd:40:8c:92:96:da:90:
         b5:54:27:55:99:a9:4b:30:46:37:73:fa:68:0b:f0:10:11:d4:
         3e:17:2b:29:86:83:a0:cb:48:ee:76:65:e4:d1:e8:71:f8:bc:
         6f:21:cf:9b:c8:aa:52:b3:b2:8f:74:92:5b:62:1c:03:c0:0a:
         13:d3:f2:75:6c:5e:c2:5f:fb:e4:fc:de:e7:7f:17:18:77:a4:
         18:33:79:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:01 2026 by rpki-client