Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/DE46E22CB7C111F1832B5E195F11F970.roa
File:                     DE46E22CB7C111F1832B5E195F11F970.roa (raw, json)
Hash identifier:          rebc37ILLoiuFl9EqWNBC2c/17CX+P4pukcboRsSrqI=
Subject key identifier:   88:26:07:7F:2C:2F:11:28:0E:12:41:F1:ED:6B:FE:E3:7E:9C:89:1B
Certificate issuer:       /CN=A91927A0/serialNumber=B2827B17B7010F93AF1F2D48E3C037385C641713
Certificate serial:       02
Authority key identifier: B2:82:7B:17:B7:01:0F:93:AF:1F:2D:48:E3:C0:37:38:5C:64:17:13
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/DE46E22CB7C111F1832B5E195F11F970.roa
Signing time:             Thu 24 Sep 2026 02:44:31 +0000
ROA not before:           Thu 24 Sep 2026 02:44:31 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154803
IP address blocks:        160.236.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.crl
                          rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 09:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91927A0, serialNumber=B2827B17B7010F93AF1F2D48E3C037385C641713
        Validity
            Not Before: Sep 24 02:44:31 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab48e8f-beda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:15:98:08:14:52:4e:11:c2:c3:22:57:c9:
                    33:d3:da:88:45:02:84:8e:a1:11:03:fb:38:03:67:
                    cc:10:75:78:1f:3e:82:c6:66:b3:f5:2b:cf:bc:19:
                    87:2d:9e:f9:54:b1:a9:dc:6f:f8:11:f2:95:31:c6:
                    c4:37:17:8a:65:62:2f:36:fd:1c:6f:5b:d9:78:3f:
                    a6:88:73:c4:2f:14:a5:7c:bb:9b:00:00:3c:36:c3:
                    31:01:3c:a7:d7:9e:3c:9f:b9:64:63:28:ba:06:08:
                    9a:8c:e8:59:dd:65:2e:4e:0b:ed:6d:71:a2:ae:fc:
                    63:96:e5:e5:ad:0b:af:05:4a:78:ab:44:dd:ee:3a:
                    0e:87:3a:e2:2e:ca:b0:30:8a:f2:13:c1:25:17:d5:
                    1f:3a:02:f1:b0:21:9c:10:47:a3:5b:cb:70:a1:e6:
                    d4:e1:67:7d:11:fb:32:23:f6:cb:c8:33:91:66:8d:
                    dc:3f:de:2e:3e:fc:88:eb:62:34:ae:17:d3:cc:7d:
                    ba:7d:7c:20:6c:90:a4:c3:b7:8f:b7:1a:7f:65:5c:
                    bd:bc:72:2f:6b:95:1b:e2:ec:e6:dc:5b:34:4a:ab:
                    b3:3a:16:3e:68:9d:10:cf:b2:b9:d8:9a:57:4a:e3:
                    be:99:55:55:c3:11:b6:df:b4:03:f4:ec:3e:83:98:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:26:07:7F:2C:2F:11:28:0E:12:41:F1:ED:6B:FE:E3:7E:9C:89:1B
            X509v3 Authority Key Identifier:
                keyid:B2:82:7B:17:B7:01:0F:93:AF:1F:2D:48:E3:C0:37:38:5C:64:17:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/soJ7F7cBD5OvHy1I48A3OFxkFxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/soJ7F7cBD5OvHy1I48A3OFxkFxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91927A0/18A098D8B7C111F1B0FFD2025F11F970/DE46E22CB7C111F1832B5E195F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:58:01:16:e6:87:2a:12:03:42:82:5c:56:50:3b:fa:9c:9d:
         06:22:c9:66:e8:13:e2:0a:5e:01:2d:44:cf:f1:9c:35:78:c4:
         17:31:dd:f7:38:8b:6a:ba:c5:9e:95:cf:97:21:c8:c5:27:7c:
         f3:8c:68:c3:59:ca:15:e9:77:61:f7:61:2d:19:3c:8a:c1:1a:
         1c:3d:3a:44:70:c8:5a:eb:dc:95:15:a1:e1:36:f4:e8:d4:f8:
         b9:cd:96:68:89:b0:f5:78:3a:62:df:f6:e1:17:f1:16:e2:9b:
         52:77:70:dd:d0:dc:c7:26:8a:ca:f7:e3:3d:66:29:47:91:75:
         9b:50:20:b0:10:d1:57:7e:ea:1b:6d:6b:2f:39:78:71:13:83:
         ff:1d:45:99:a3:75:83:d6:bd:3b:54:76:26:16:24:de:a3:ba:
         9c:6e:2f:26:e7:b0:09:aa:27:df:59:82:a8:d9:3e:1e:ae:05:
         8e:fb:9f:da:69:9a:03:dc:94:83:55:61:3f:ea:4d:fe:9c:90:
         fb:eb:1e:21:75:1a:19:39:2d:2b:fe:5f:9b:48:38:6a:b5:83:
         dd:de:d5:59:2a:fc:76:df:91:6a:a3:37:98:61:1a:9d:d0:3a:
         c6:41:19:d6:1e:c1:98:4b:71:f1:0c:10:99:6d:db:b7:79:59:
         3a:9e:49:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 10:48:17 2026 by rpki-client