Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/055E28204B3111EFA73EC24AC4F9AE02.roa
File:                     055E28204B3111EFA73EC24AC4F9AE02.roa (raw, json)
Hash identifier:          Dvdbq6Oo0YU3Bs0Et4MBq/j9gszA/GjQdKd353dK49Q=
Subject key identifier:   9E:9B:BB:C5:AB:E9:8B:1B:40:19:A5:08:D9:E7:13:EE:85:5C:80:F6
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2159
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/055E28204B3111EFA73EC24AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:33 +0000
ROA not before:           Thu 28 Aug 2025 14:51:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152952
IP address blocks:        160.22.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8537 (0x2159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61bb9-50ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:18:4a:43:25:8d:a6:17:3f:16:cd:1c:21:
                    f3:b3:73:aa:15:6a:2f:b9:01:6c:33:86:da:d5:ec:
                    d7:d8:2c:f6:8f:32:37:81:2a:fb:fd:3f:72:ef:1c:
                    6c:70:af:52:c7:d8:0a:06:44:aa:7f:7e:61:6b:8c:
                    e2:45:3f:d3:c8:ec:d0:9e:53:33:dc:ff:f6:9c:10:
                    40:81:38:1c:b9:06:d9:74:38:a4:36:36:6e:b8:42:
                    78:ce:a0:8e:a7:f7:81:67:2f:07:ce:41:6a:44:21:
                    25:39:43:e8:fd:22:b3:77:bd:10:e6:ce:7c:01:85:
                    20:c8:26:2d:21:52:0e:27:95:fa:10:45:4e:01:3a:
                    7f:32:c1:ab:ee:f3:63:5e:31:fa:37:d7:b0:d2:8c:
                    0f:3a:35:c2:d0:36:be:30:dd:db:0a:df:63:9d:c9:
                    a4:a8:33:6c:46:e2:2e:10:6b:1e:7e:13:c1:72:b6:
                    00:8c:6b:2b:e1:a6:ec:58:34:4c:41:49:ca:17:00:
                    0f:ee:5e:b2:a8:3e:6a:ac:d6:79:30:a3:dc:0b:e6:
                    47:a8:90:d5:60:85:59:e0:1b:9b:34:fc:c7:f3:08:
                    bf:ef:57:df:56:19:d0:aa:65:e9:95:aa:56:4d:05:
                    9f:e0:5f:59:43:17:fc:ff:09:22:42:5c:df:1c:c1:
                    f4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9B:BB:C5:AB:E9:8B:1B:40:19:A5:08:D9:E7:13:EE:85:5C:80:F6
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/055E28204B3111EFA73EC24AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:be:21:ae:06:92:78:48:72:50:3c:4b:63:60:c6:80:dc:
         b1:6f:e1:3c:36:f9:6b:c1:d5:19:07:14:92:9f:a0:29:3c:26:
         3f:8b:5d:55:8c:94:1a:52:d8:4c:25:b5:2d:47:c2:b0:b2:41:
         54:2d:b1:59:cf:53:78:6d:0f:a1:a2:3a:07:ba:7b:6d:50:06:
         51:94:c8:cf:cd:57:a3:7c:fb:c9:3c:7d:00:4d:6d:0a:6c:46:
         9d:dd:76:24:44:db:2c:f4:53:e1:a4:92:bc:c2:7e:f5:64:16:
         82:4a:bf:91:66:42:9a:95:0e:2d:9d:b3:4b:9a:fa:0e:2c:94:
         47:99:a4:e2:0e:44:39:94:e7:0a:55:56:0d:35:30:ce:37:a1:
         ff:24:8c:d0:5b:92:68:09:ad:cc:89:25:dd:a5:b5:7c:da:77:
         3d:b1:f1:a1:2a:ff:52:94:ef:99:ba:68:91:8f:f9:21:0f:f1:
         97:2f:b8:78:4e:af:7a:ee:01:89:58:68:03:a3:2d:5c:e4:f4:
         17:4f:a8:81:3b:bb:7b:be:4c:65:07:ac:62:f3:7a:be:bc:0d:
         a3:c6:04:e0:b9:5f:ba:5f:41:39:76:66:d7:0a:de:72:c8:59:
         7f:ab:e9:ff:3a:89:ef:31:80:a3:71:e3:95:c9:6c:10:c9:6c:
         08:72:f1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:35 2026 by rpki-client