Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/1C247386C63411F18D09886A5211F970.roa
File:                     1C247386C63411F18D09886A5211F970.roa (raw, json)
Hash identifier:          M3jFNc5AL7aOL1gnvOVGMM8mcs2Z7pXUWJsdP4ebfLU=
Subject key identifier:   54:2B:03:6D:59:0A:E5:4A:42:99:95:B7:0A:9B:47:4F:77:C3:D1:A5
Certificate issuer:       /CN=A91807BB/serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
Certificate serial:       017F
Authority key identifier: FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/1C247386C63411F18D09886A5211F970.roa
Signing time:             Mon 12 Oct 2026 11:57:34 +0000
ROA not before:           Mon 12 Oct 2026 11:57:34 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     153347
IP address blocks:        160.187.128.0/23 maxlen: 23
                          160.187.128.0/24 maxlen: 24
                          160.187.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 Oct 2026 05:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=FD8012BFE99129EF9C8BB7A460321442F6D26562
        Validity
            Not Before: Oct 12 11:57:34 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6acccb2e-abb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:28:30:47:35:81:24:44:8e:90:d6:59:7b:c0:
                    91:35:bb:86:b2:e8:39:14:7e:80:6e:02:fa:98:f1:
                    2d:52:0e:e9:d1:e5:5e:ca:8a:1e:5b:c4:70:f4:44:
                    46:ea:9e:e2:e3:c5:d5:1f:df:11:3b:26:ed:29:20:
                    24:80:8b:d9:2f:79:c1:7c:17:15:3c:62:86:9d:8e:
                    66:d9:91:c1:76:5a:cf:f6:31:6c:d1:2c:36:d8:f6:
                    5c:94:8d:e1:1c:0a:47:e1:a7:5e:a0:3a:63:68:e1:
                    8b:d2:8f:db:1a:57:e8:63:45:a5:79:66:47:a9:0c:
                    89:40:3b:8a:d5:04:f8:d2:cb:1d:07:a3:30:bb:02:
                    bd:f5:7b:c3:f9:a2:8c:88:d8:94:ab:7b:b4:72:38:
                    d0:96:8c:17:b2:b7:5b:10:ea:36:f2:56:03:9f:ab:
                    ad:fe:f1:90:c8:aa:7d:ad:23:88:2c:72:3a:9b:1c:
                    e1:73:b8:15:b0:eb:d4:d8:12:05:7e:9f:92:44:3f:
                    3a:95:13:66:ed:72:f1:da:f0:ce:e9:a7:46:0b:6c:
                    2a:db:1d:cc:d0:78:4c:d9:ee:d2:12:01:33:bb:1f:
                    34:55:64:09:2f:14:27:12:28:31:a2:28:de:64:d5:
                    71:ca:6f:45:cc:a2:e4:6c:ea:82:6c:60:33:86:34:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2B:03:6D:59:0A:E5:4A:42:99:95:B7:0A:9B:47:4F:77:C3:D1:A5
            X509v3 Authority Key Identifier:
                keyid:FD:80:12:BF:E9:91:29:EF:9C:8B:B7:A4:60:32:14:42:F6:D2:65:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/_YASv-mRKe-ci7ekYDIUQvbSZWI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YASv-mRKe-ci7ekYDIUQvbSZWI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/01D239A47CB311EF96C9F250C4F9AE02/1C247386C63411F18D09886A5211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:01:49:da:8a:68:45:f4:14:16:e6:37:ab:39:72:2b:14:39:
         66:b4:73:96:0d:76:3d:ff:04:78:eb:ef:9c:1b:37:f8:68:b9:
         65:e9:79:cf:51:14:cb:09:9f:fa:54:66:90:06:44:15:ca:dc:
         47:c7:d5:1a:70:95:79:27:df:dc:94:40:e1:02:60:b7:f2:50:
         69:96:10:b7:ba:d9:2a:c5:b6:44:15:72:05:40:a8:8a:1a:3c:
         4f:3f:d8:de:66:78:7e:78:6e:83:b7:f5:7c:53:4c:91:a5:66:
         56:09:87:b4:e3:49:f4:bd:23:07:06:bb:eb:a1:25:f6:55:61:
         20:2d:5f:fd:1e:12:92:bd:35:89:36:f0:96:d8:c0:c2:47:55:
         e1:87:76:27:7f:34:c2:1e:df:fe:61:e0:68:6a:20:a0:74:6a:
         0f:d2:85:be:8a:a5:12:0c:3c:d6:09:55:f1:37:34:d5:15:1c:
         f4:ed:a2:98:11:3a:92:cb:66:67:f5:98:66:de:97:38:0f:ee:
         ec:27:e7:d8:48:a7:6b:6e:4e:e3:da:04:00:56:38:a3:5f:1e:
         0b:22:36:77:da:78:44:43:6f:3d:89:d5:78:46:f8:3a:b5:e8:
         c2:c1:39:27:2d:8c:9a:95:63:7b:8e:6c:91:e0:77:b2:be:2e:
         4d:97:b3:3d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA3QkIxMTAvBgNVBAUTKEZEODAxMkJGRTk5MTI5RUY5QzhCQjdBNDYwMzIxNDQy
RjZEMjY1NjIwHhcNMjYxMDEyMTE1NzM0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNjY2IyZS1hYmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3ygwRzWBJESOkNZZe8CRNbuGsug5FH6AbgL6mPEtUg7p0eVeyooeW8Rw9ERG
6p7i48XVH98ROybtKSAkgIvZL3nBfBcVPGKGnY5m2ZHBdlrP9jFs0Sw22PZclI3h
HApH4adeoDpjaOGL0o/bGlfoY0WleWZHqQyJQDuK1QT40ssdB6MwuwK99XvD+aKM
iNiUq3u0cjjQlowXsrdbEOo28lYDn6ut/vGQyKp9rSOILHI6mxzhc7gVsOvU2BIF
fp+SRD86lRNm7XLx2vDO6adGC2wq2x3M0HhM2e7SEgEzux80VWQJLxQnEigxoije
ZNVxym9FzKLkbOqCbGAzhjRGMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFQrA21Z
CuVKQpmVtwqbR093w9GlMB8GA1UdIwQYMBaAFP2AEr/pkSnvnIu3pGAyFEL20mVi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDdCQi8wMUQyMzlBNDdD
QjMxMUVGOTZDOUYyNTBDNEY5QUUwMi9fWUFTdi1tUktlLWNpN2VrWURJVVF2YlNa
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZQVN2LW1SS2UtY2k3ZWtZRElVUXZiU1pXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODA3QkIvMDFEMjM5QTQ3Q0IzMTFFRjk2QzlGMjUwQzRGOUFFMDIvMUMyNDczODZD
NjM0MTFGMThEMDk4ODZBNTIxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLuAMA0GCSqGSIb3DQEBCwUAA4IBAQB/AUnaimhF9BQW5jerOXIr
FDlmtHOWDXY9/wR46++cGzf4aLll6XnPURTLCZ/6VGaQBkQVytxHx9UacJV5J9/c
lEDhAmC38lBplhC3utkqxbZEFXIFQKiKGjxPP9jeZnh+eG6Dt/V8U0yRpWZWCYe0
40n0vSMHBrvroSX2VWEgLV/9HhKSvTWJNvCW2MDCR1Xhh3YnfzTCHt/+YeBoaiCg
dGoP0oW+iqUSDDzWCVXxNzTVFRz07aKYETqSy2Zn9Zhm3pc4D+7sJ+fYSKdrbk7j
2gQAVjijXx4LIjZ32nhEQ289idV4Rvg6tejCwTknLYyalWN7jmyR4Heyvi5Nl7M9
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:28:15 2026 by rpki-client