Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/A19BECB47DC011F0907B9458C4F9AE02.roa
File:                     A19BECB47DC011F0907B9458C4F9AE02.roa (raw, json)
Hash identifier:          mPpc2gVSiIA4mhoDYgTXEf2CYWV9o2k7934LA3uchfI=
Subject key identifier:   E6:12:A9:33:21:8C:88:7B:34:50:41:27:62:E9:8D:36:D9:E8:E0:89
Certificate issuer:       /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
Certificate serial:       0763
Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/A19BECB47DC011F0907B9458C4F9AE02.roa
Signing time:             Wed 02 Sep 2026 22:44:08 +0000
ROA not before:           Wed 02 Sep 2026 22:44:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154117
IP address blocks:        160.238.14.0/24 maxlen: 24
                          160.238.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl
                          rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 22:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7
        Validity
            Not Before: Sep  2 22:44:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a98a6b7-827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:e5:8b:e2:64:0f:cb:dd:b9:aa:16:0e:98:
                    5a:2c:fb:12:40:47:f6:fa:34:d3:82:26:fb:28:a0:
                    ac:4d:b7:18:09:17:ec:56:84:68:64:7a:cd:c1:c1:
                    9f:45:38:d4:bf:d3:50:c8:94:aa:e5:b1:71:da:7c:
                    96:ad:13:3e:07:dd:76:83:04:3a:5a:fa:9a:72:15:
                    6b:47:61:82:e1:e1:a4:bc:0e:ae:1b:6b:fe:1d:f8:
                    84:0a:f9:5a:cd:3c:98:34:fa:b9:96:19:8b:7c:60:
                    90:49:6f:16:2c:07:f8:81:18:65:d6:98:97:1f:c5:
                    04:d8:b7:37:02:cd:be:41:4a:1b:a8:c0:76:f2:80:
                    c0:de:8e:17:89:dc:48:1b:d2:9d:fd:6b:a5:a3:61:
                    bd:5a:31:75:78:a6:de:c7:bd:6b:8e:f5:67:d8:9f:
                    2a:39:ff:5c:db:6b:31:8c:cc:4d:06:54:a0:e7:9a:
                    fb:94:52:b9:04:4a:56:54:40:bd:55:bb:f8:c4:3c:
                    d3:4a:52:cc:2e:d4:ac:3d:ab:de:9c:81:97:ca:7b:
                    a9:68:e3:b8:a5:c6:97:55:5e:f4:76:92:12:09:42:
                    0b:7f:1c:8c:3f:cd:83:a3:42:b5:63:ea:fc:2d:34:
                    33:2d:4a:4c:1d:49:a6:95:40:3f:ef:1c:b8:04:4e:
                    44:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:12:A9:33:21:8C:88:7B:34:50:41:27:62:E9:8D:36:D9:E8:E0:89
            X509v3 Authority Key Identifier:
                keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/A19BECB47DC011F0907B9458C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:0c:52:de:af:5e:5f:20:d9:e9:bf:94:d3:a8:d6:0d:cc:24:
         ad:82:8e:b2:b2:59:99:00:20:0e:57:0f:3e:25:4c:79:df:42:
         89:7a:e0:93:f5:31:ce:3a:da:70:70:48:54:50:04:7b:38:cb:
         25:a0:f9:55:71:2b:67:79:c3:5f:ac:31:1b:1c:a7:c7:e6:be:
         9b:9f:2e:28:bf:a6:d3:dd:82:b1:52:48:47:d7:8c:63:fc:11:
         00:75:39:0f:46:43:d3:69:3d:29:6e:9c:56:7c:0c:aa:41:b4:
         a9:67:36:5e:1d:05:92:18:d2:77:c4:7a:0e:0b:22:2d:7f:19:
         65:1e:ac:41:95:c2:ce:43:08:e7:0d:4b:14:b2:0d:a0:2b:be:
         4e:22:78:ab:2e:6a:57:ca:a2:ba:b0:92:2a:9b:f0:2f:0f:13:
         90:aa:17:64:65:9b:20:10:5f:0c:00:e9:f8:62:ea:1a:b2:7c:
         34:ce:f1:07:12:b9:b0:46:45:8b:9f:dc:7b:d4:9e:27:69:bd:
         a2:80:4f:a9:99:dc:51:d8:e9:06:6d:bb:df:bf:5a:19:85:e9:
         86:7b:59:6c:68:9e:85:c1:3b:7d:0a:7c:2a:8a:2d:a6:a4:9f:
         75:67:7c:a6:cc:75:0b:15:ff:41:58:94:70:4b:d5:67:b8:da:
         db:59:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:08:43 2026 by rpki-client