Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6021A844923911F1A16E312F7011F970.roa
File:                     6021A844923911F1A16E312F7011F970.roa (raw, json)
Hash identifier:          pf/NNijaIIETWXijBjNV7v9zguLYjTQA2YgBkqyQ8GM=
Subject key identifier:   5D:82:0A:F9:87:72:F7:71:EB:6C:7F:E1:61:CE:D5:91:3D:E5:48:29
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       234E
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6021A844923911F1A16E312F7011F970.roa
Signing time:             Fri 07 Aug 2026 08:24:15 +0000
ROA not before:           Fri 07 Aug 2026 08:24:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154782
IP address blocks:        160.236.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:32:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9038 (0x234e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug  7 08:24:15 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a75962f-3f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:0d:49:0a:66:e6:0a:96:0a:c4:59:65:2a:
                    23:4a:0c:b9:83:22:6a:34:7a:c0:2b:ad:47:7a:9e:
                    41:d9:64:31:48:ba:9a:c1:7a:e6:a0:e4:fc:6b:78:
                    df:25:6b:90:8b:08:30:df:9c:a4:10:29:98:14:4c:
                    20:43:3c:8a:25:1e:e0:ba:1f:55:f6:76:2c:c1:3c:
                    a4:af:78:db:c9:a5:7b:aa:9f:69:33:3c:d9:d1:af:
                    a4:83:68:7b:ff:0d:70:ec:44:2b:eb:51:90:9f:b7:
                    92:c2:9d:77:16:e9:96:52:6c:f7:5c:fd:b7:b5:b1:
                    9a:8f:77:e2:9c:28:c5:e5:9c:0a:41:ca:af:64:fe:
                    e4:de:60:b0:1f:2f:5d:34:03:5f:04:09:80:93:6c:
                    4a:33:ef:86:04:2e:80:77:d1:10:b6:e0:c4:bd:65:
                    dc:21:70:00:f4:c5:16:86:75:28:5d:2b:4f:b0:2c:
                    ef:9d:27:9e:7b:d0:9b:a4:9c:80:9f:78:84:b9:83:
                    b9:3e:96:de:88:3f:c5:57:c5:f2:57:6a:1f:27:bf:
                    df:48:ae:5d:64:fd:4f:38:ac:5f:7f:d1:21:ba:20:
                    c0:d1:1c:54:6b:32:a9:7f:6d:65:cf:11:d6:9f:b0:
                    d3:16:fd:d6:02:30:81:3c:ff:19:b4:66:e6:0e:2c:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:0A:F9:87:72:F7:71:EB:6C:7F:E1:61:CE:D5:91:3D:E5:48:29
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/6021A844923911F1A16E312F7011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:35:64:7e:3c:9b:3e:23:d2:c2:39:fc:ae:de:f5:6c:7b:ac:
         55:c4:a4:5d:0b:bd:df:8c:33:ad:c6:cd:14:1d:d3:13:c7:fc:
         80:da:7f:c2:13:61:79:03:5b:6b:ae:9b:3d:08:f3:a6:73:2e:
         04:6b:81:b7:e0:fc:ee:05:5b:e6:c3:f2:5e:1a:f6:78:20:43:
         24:d6:8a:1b:a8:50:e5:b6:99:58:1a:36:d1:73:f4:c4:99:ba:
         a9:47:85:bb:c4:7a:e0:a4:02:e5:6b:b3:31:e8:b9:14:da:97:
         e4:19:09:9f:d6:d6:b5:9d:b3:40:2d:3a:3e:6c:05:54:fe:b5:
         71:b1:97:75:a0:15:e6:3a:57:e9:f0:88:3f:81:95:b4:5b:36:
         92:5d:65:0d:16:6e:5c:44:20:37:d2:d8:11:f7:c7:35:09:8f:
         64:a7:cf:39:49:35:b1:5f:0a:81:8c:19:7f:59:85:d1:07:59:
         32:eb:5c:09:2a:ff:54:67:30:5d:28:d1:40:27:9b:5a:da:71:
         07:d0:10:13:14:f8:26:33:22:55:33:f5:e3:93:32:33:33:6f:
         12:25:98:82:34:4f:9b:ec:9c:f2:9e:d5:65:57:90:5c:5d:f6:
         d6:10:54:ce:15:59:d5:41:42:59:40:26:d9:6f:d3:4d:3d:c9:
         90:82:12:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:27:06 2026 by rpki-client