Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
File:                     A55B56FC812311F1A313CCFA74A30FBC.roa (raw, json)
Hash identifier:          B/6yUAqz3UFMEFVVFzKb3P2jonmiBMOTRqF1EEEr/+s=
Subject key identifier:   89:FD:4D:91:DD:23:FD:F1:AC:F5:12:17:A4:47:70:1A:DF:8C:BD:65
Certificate issuer:       /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C
Certificate serial:       11
Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
Signing time:             Thu 16 Jul 2026 14:35:53 +0000
ROA not before:           Thu 16 Jul 2026 14:35:53 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154755
IP address blocks:        160.236.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl
                          rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:33:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C
        Validity
            Not Before: Jul 16 14:35:53 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a58ec48-99f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:45:24:40:2f:6a:99:ee:92:c9:63:ec:11:23:
                    34:c6:d0:a5:b4:05:51:4e:3c:5b:69:f2:8b:e3:45:
                    04:22:7b:55:f2:61:d4:17:62:b6:95:90:46:62:16:
                    0c:5e:b2:1a:ac:57:77:fc:f8:90:bc:27:9c:b6:fb:
                    9f:22:25:20:fe:0c:dd:17:52:8c:5d:ee:78:91:26:
                    12:d7:30:1a:2d:cf:9e:0a:ca:c2:99:3d:66:16:02:
                    f4:e4:16:c6:ff:a6:52:dc:3e:ee:80:c6:80:77:79:
                    0e:bf:89:71:3f:4d:4a:d8:7b:80:28:32:ea:e4:75:
                    b8:db:9f:9f:1a:cd:95:d4:e2:f8:95:be:39:0e:ff:
                    d3:74:3e:f8:e8:6a:b7:6e:5c:87:f7:3e:82:f7:7d:
                    14:79:86:ef:4e:67:66:48:e0:f9:27:5e:ee:5e:7f:
                    12:97:f7:2c:bc:3f:0c:13:8a:d7:b4:41:a6:05:9b:
                    f4:89:8d:06:96:99:80:14:15:52:75:4a:47:c4:62:
                    d9:bb:ec:7a:d1:23:28:70:c8:80:23:d6:8e:3c:56:
                    a7:1f:c1:c2:8d:e0:d7:6a:3e:d0:32:0c:42:34:df:
                    08:b6:e2:d5:a6:db:64:38:0a:7b:cc:88:5a:8f:b0:
                    fe:2f:af:cc:b4:10:73:53:eb:d0:26:c0:0d:b4:ba:
                    0c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FD:4D:91:DD:23:FD:F1:AC:F5:12:17:A4:47:70:1A:DF:8C:BD:65
            X509v3 Authority Key Identifier:
                keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:bd:49:df:f3:15:42:13:8e:1a:c1:d0:af:e0:60:98:03:d3:
         45:3d:6b:4c:bc:f3:5e:55:61:13:2d:52:2a:2d:31:d1:1a:08:
         b7:21:f0:a5:52:b4:97:07:7b:38:78:bc:b2:0c:ce:a7:6b:98:
         97:72:fc:ca:f0:4f:81:29:6c:1a:1a:06:f9:d7:9e:a8:6c:30:
         26:b1:b6:d3:77:91:a7:93:9a:da:d3:07:3a:ad:1a:ef:df:9d:
         a8:60:76:be:28:5f:ce:0f:fd:4f:20:ea:3b:ae:41:e2:cf:e0:
         bf:01:19:97:9f:60:d3:84:9f:69:93:ee:07:39:82:00:5b:76:
         03:ad:3d:22:d6:e4:d7:1b:d1:83:aa:8e:67:09:a6:07:a5:c1:
         56:b8:52:d8:d3:87:34:95:48:f9:7b:e1:75:d5:f4:2b:94:35:
         bc:be:94:a8:db:01:6c:f7:f8:d0:33:c9:0b:1d:b2:3d:5d:43:
         93:a9:8c:a0:08:0f:a9:6b:be:ab:e3:d9:9a:38:3d:cd:f1:78:
         b8:10:ad:fe:97:c3:40:d2:a0:0d:e4:b3:e0:bd:a9:f9:da:7c:
         46:7c:a5:cc:c6:21:3d:95:38:5a:f3:99:68:30:0f:11:47:a5:
         b8:6f:88:04:f7:b5:ff:8b:c4:ad:7e:fe:57:59:b4:ff:a9:d3:
         24:48:19:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:18:28 2026 by rpki-client