Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/ABF1FAF2860211EF8D8AD011C4F9AE02.roa
File:                     ABF1FAF2860211EF8D8AD011C4F9AE02.roa (raw, json)
Hash identifier:          QzecNRiadvNS3uXz4puDDg8aeFgkZFgzMCT4KbxjYQg=
Subject key identifier:   CB:54:9C:87:74:95:BE:53:30:43:5E:37:7F:5C:0B:95:89:57:D0:CC
Certificate issuer:       /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial:       0110
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/ABF1FAF2860211EF8D8AD011C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:28:38 +0000
ROA not before:           Thu 13 Nov 2025 03:51:12 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153357
IP address blocks:        160.187.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:35:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272 (0x110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
        Validity
            Not Before: Nov 13 03:51:12 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58276-32ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:98:64:85:b0:26:ff:b0:01:fe:68:cc:63:c4:
                    38:25:d3:73:cb:b0:bf:e0:b9:4a:08:fe:30:cc:ea:
                    6c:10:a6:14:4e:17:98:ba:84:b8:75:e9:77:7d:0d:
                    08:99:06:59:da:2f:a5:e1:ee:77:a6:3a:2b:4f:41:
                    40:1f:67:ab:52:bb:4e:62:81:47:4a:b3:ea:ad:e0:
                    f5:3d:a0:35:ad:20:de:d2:89:25:95:af:58:0c:f4:
                    41:2c:ad:65:c5:47:d1:37:48:79:1f:02:0f:a2:24:
                    8d:35:c8:6c:e3:21:55:47:a9:fc:23:f0:d5:66:d7:
                    08:3e:1d:06:0c:e4:13:07:44:20:47:cc:90:cb:df:
                    a8:cc:d4:2f:c6:bb:16:e2:86:52:5a:25:46:29:7e:
                    62:f4:a6:9e:e7:13:af:fc:74:13:5d:ca:42:b7:9e:
                    1d:7b:fa:c1:fd:77:db:c6:3a:27:36:65:47:7b:14:
                    6f:2b:ce:82:28:26:a7:86:9c:6a:5b:6d:44:33:a8:
                    b8:96:06:23:5a:01:20:4e:a0:22:62:9c:60:a0:2e:
                    9d:69:1e:1a:42:b1:e1:9e:95:c4:da:34:77:04:e5:
                    e7:53:cd:0d:ce:52:9f:cc:39:18:4f:76:81:8b:67:
                    64:ab:76:a0:cb:51:ba:3b:41:a7:5e:61:1b:b7:8a:
                    d9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:54:9C:87:74:95:BE:53:30:43:5E:37:7F:5C:0B:95:89:57:D0:CC
            X509v3 Authority Key Identifier:
                keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/ABF1FAF2860211EF8D8AD011C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a9:6b:a9:b5:eb:b1:56:19:6f:ae:12:98:2e:46:9a:9e:42:
         40:c8:3e:26:0a:95:5f:98:8a:9b:91:8e:58:e4:bc:48:d2:28:
         6b:0f:f1:57:51:a3:ce:ce:ca:4c:7f:d3:43:bb:c0:f3:a3:46:
         cd:ab:fc:83:ba:03:fa:48:6e:27:db:fa:fe:15:4f:89:9d:4a:
         0f:54:f9:04:b5:0d:7a:d6:8a:6a:ba:40:12:55:b0:7a:8c:22:
         52:07:63:61:ce:b0:3b:7d:7c:b0:72:73:aa:b3:d3:68:80:1d:
         19:a8:37:83:d2:3b:d7:f9:d3:9f:50:6a:a0:d3:9e:15:99:4a:
         aa:7d:1b:94:eb:94:3a:8b:68:f9:36:35:23:e7:30:26:5f:f6:
         4c:c1:e0:c4:74:79:d8:f0:4b:45:30:6c:41:7c:3b:3c:4d:c9:
         76:16:4b:44:8e:e6:4d:c4:3a:fa:ed:b4:b5:e6:6e:d9:a3:ae:
         d8:3b:57:a3:f5:62:50:ca:02:28:fa:35:71:d3:e9:a3:69:01:
         8b:78:e1:c6:02:a1:4d:db:06:3f:54:0c:cc:af:4a:0f:c8:17:
         db:b7:a0:57:ff:09:11:ea:22:db:69:e9:e6:36:8b:fc:ee:28:
         91:b8:88:c5:f4:82:6d:a6:5e:5e:c8:2a:c5:22:58:40:eb:23:
         af:dc:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:12 2026 by rpki-client