Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0095C4A6795811EF9834565CC4F9AE02.roa
File:                     0095C4A6795811EF9834565CC4F9AE02.roa (raw, json)
Hash identifier:          /L/G0wpvpaIZnkbCOfBEIwgGjPw/sLX+05ZQijFF3U0=
Subject key identifier:   9C:01:28:60:21:12:5C:9A:62:DB:7F:E6:43:FA:17:34:A6:5A:6C:00
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2151
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0095C4A6795811EF9834565CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:25 +0000
ROA not before:           Thu 28 Aug 2025 14:51:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152976
IP address blocks:        160.30.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8529 (0x2151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:31 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61bb1-cea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:5d:c3:5c:b1:85:0e:cc:bd:74:9e:a8:97:
                    9c:29:91:68:51:01:c6:f6:9c:95:6b:4e:ed:60:c5:
                    0e:17:f0:62:4c:24:30:e2:f7:8e:b1:36:a5:b5:c4:
                    cd:92:c6:d5:a8:c1:79:a9:0f:e9:d5:34:97:f5:82:
                    94:3d:0a:ac:e0:07:0f:ce:77:51:2d:da:18:91:f0:
                    74:74:ed:58:1e:fc:20:cd:fb:9d:71:52:c5:12:39:
                    75:de:bb:ce:a3:78:cc:91:f2:ef:02:ce:19:36:f6:
                    19:30:76:5c:a7:b8:b1:75:9e:9d:62:27:e4:15:3f:
                    1b:94:d6:e7:45:60:cb:21:30:75:ce:83:69:e4:0d:
                    86:d8:5f:c3:13:8b:d7:b0:0b:6d:40:28:da:3d:0a:
                    5d:63:22:8e:c3:63:94:ff:06:a5:62:5f:78:44:d9:
                    ca:ba:ca:df:74:e5:35:3b:e1:c1:15:74:14:c2:a6:
                    a8:a5:b3:a6:38:bc:3f:98:15:26:dc:93:77:ba:a4:
                    b7:59:38:25:49:d7:87:e6:dc:43:c4:52:f4:60:a8:
                    4d:91:fe:26:8b:be:a0:19:c3:05:2d:02:4f:00:a9:
                    c6:03:27:52:af:a9:cd:c5:71:16:ce:ac:f5:37:58:
                    d6:c5:76:27:41:5f:c4:b1:eb:bd:5d:fe:1c:01:e8:
                    d2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:01:28:60:21:12:5C:9A:62:DB:7F:E6:43:FA:17:34:A6:5A:6C:00
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/0095C4A6795811EF9834565CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:6a:d7:39:7a:9e:cf:f1:8e:5b:b6:55:d1:2f:06:21:22:27:
         e1:3f:ee:8e:9a:89:b9:f3:f0:ee:46:17:43:cc:64:ea:eb:44:
         71:c7:ab:d6:29:86:69:eb:5b:ba:ac:b0:99:92:a0:72:6c:40:
         f7:ff:3a:35:ea:e0:1d:3a:12:bc:c3:f5:c0:e9:a5:8b:c8:ba:
         83:11:ab:1c:37:2d:b2:5c:cb:01:5c:b6:70:01:8e:51:2b:34:
         a0:5b:7d:26:2d:62:28:9e:b6:24:e2:3b:fd:ee:6f:e0:01:51:
         cc:40:da:84:56:c0:bf:21:b7:88:68:76:26:47:c3:3f:75:87:
         6f:35:56:5d:1c:af:34:ec:e5:2c:0e:98:94:f0:d5:9e:c7:5b:
         b2:9e:6d:0e:3f:ab:8f:18:39:50:26:0a:2c:98:07:0d:34:fd:
         01:83:ef:2c:97:33:af:88:59:dc:ef:60:f8:4e:67:0e:56:d9:
         9a:42:90:e4:9b:83:5c:0e:0e:c7:34:14:10:35:a5:57:dd:72:
         83:30:b8:18:67:bf:6d:7d:94:b0:54:0a:6c:3c:3c:a7:fa:9e:
         16:0a:e2:9d:c7:f0:ee:cb:9e:3f:93:90:d9:0e:66:18:68:88:
         ae:8a:d6:ac:4d:a4:8c:4e:50:fa:af:06:73:a5:cc:cc:f3:af:
         86:a4:f3:f7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWJiMS1jZWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzB1dw1yxhQ7MvXSeqJecKZFoUQHG9pyVa07tYMUOF/BiTCQw4veOsTaltcTN
ksbVqMF5qQ/p1TSX9YKUPQqs4AcPzndRLdoYkfB0dO1YHvwgzfudcVLFEjl13rvO
o3jMkfLvAs4ZNvYZMHZcp7ixdZ6dYifkFT8blNbnRWDLITB1zoNp5A2G2F/DE4vX
sAttQCjaPQpdYyKOw2OU/walYl94RNnKusrfdOU1O+HBFXQUwqaopbOmOLw/mBUm
3JN3uqS3WTglSdeH5txDxFL0YKhNkf4mi76gGcMFLQJPAKnGAydSr6nNxXEWzqz1
N1jWxXYnQV/Eseu9Xf4cAejSkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJwBKGAh
ElyaYtt/5kP6FzSmWmwAMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDA5NUM0QTY3
OTU4MTFFRjk4MzQ1NjVDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB6aMA0GCSqGSIb3DQEBCwUAA4IBAQClatc5ep7P8Y5btlXRLwYh
IifhP+6Omom58/DuRhdDzGTq60Rxx6vWKYZp61u6rLCZkqBybED3/zo16uAdOhK8
w/XA6aWLyLqDEascNy2yXMsBXLZwAY5RKzSgW30mLWIonrYk4jv97m/gAVHMQNqE
VsC/IbeIaHYmR8M/dYdvNVZdHK807OUsDpiU8NWex1uynm0OP6uPGDlQJgosmAcN
NP0Bg+8slzOviFnc72D4TmcOVtmaQpDkm4NcDg7HNBQQNaVX3XKDMLgYZ79tfZSw
VApsPDyn+p4WCuKdx/Duy54/k5DZDmYYaIiuitasTaSMTlD6rwZzpczM86+GpPP3
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:21 2026 by rpki-client