Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/176EE8246A3311F1BA523DEE7847A888.roa
File:                     176EE8246A3311F1BA523DEE7847A888.roa (raw, json)
Hash identifier:          r8hl+GJxeK1+3SxMmpVpJlXiMFYK7RUwhusn4wQCm0o=
Subject key identifier:   6A:21:E1:CE:66:13:9A:99:08:66:04:37:43:1F:96:31:53:66:06:AF
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23EF
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/176EE8246A3311F1BA523DEE7847A888.roa
Signing time:             Fri 02 Oct 2026 15:21:02 +0000
ROA not before:           Fri 02 Oct 2026 15:21:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154712
IP address blocks:        162.4.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9199 (0x23ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:21:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbdd-c671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ce:fd:e2:8b:f0:9d:60:6d:69:a8:18:70:da:
                    18:01:9f:bc:de:c8:c5:5d:d7:d2:c1:37:cc:07:bc:
                    4f:23:42:84:9a:c1:17:41:38:fc:33:fa:1e:b2:15:
                    f2:df:df:1d:c9:9d:1b:a8:0f:e4:ec:f3:f7:53:ed:
                    93:d1:8d:e1:9c:eb:a0:30:0a:58:5a:bc:37:b2:90:
                    fb:77:64:5b:ec:58:32:ad:ee:9f:6d:93:e2:11:77:
                    ea:b5:b8:c7:ad:ee:4f:8b:0e:c2:b1:d5:4f:4c:39:
                    c4:14:b0:e1:05:9c:84:72:74:3c:16:f6:9b:e8:c8:
                    92:71:44:58:96:47:c0:7f:95:54:c1:bd:88:46:96:
                    fe:dd:b6:73:57:bf:85:7d:4e:97:97:92:c1:ab:35:
                    2d:c3:81:0a:dd:cb:c9:a2:e3:bf:83:e6:63:62:00:
                    60:87:c9:5c:aa:73:09:f0:96:db:d2:7f:f5:65:1a:
                    90:bf:e1:c2:ab:88:f8:3c:1a:ca:a3:76:93:97:d2:
                    22:90:1d:84:00:d1:fb:89:db:45:cd:33:0d:f3:36:
                    a1:f4:8c:96:34:ad:2c:33:f8:d3:fc:ad:2d:8c:cc:
                    c5:40:a6:cb:08:20:e1:33:c6:40:9f:e8:f7:80:d6:
                    55:e1:08:6d:c9:6a:00:32:84:39:da:03:82:d9:8e:
                    55:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:21:E1:CE:66:13:9A:99:08:66:04:37:43:1F:96:31:53:66:06:AF
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/176EE8246A3311F1BA523DEE7847A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:c4:8a:12:c9:4c:a3:04:40:55:fe:d8:e4:fd:57:43:b9:2f:
         37:91:f0:82:b0:78:e8:4f:81:e9:80:6d:84:4d:32:06:b9:f9:
         ea:91:76:10:d4:eb:0a:69:64:e7:c7:c5:3e:a7:4a:ef:07:07:
         0f:42:b8:8c:18:eb:57:9a:61:94:06:71:d1:c0:af:70:a7:80:
         51:cd:7a:b2:fe:0b:f0:f6:3b:41:c7:04:ce:04:01:89:1e:06:
         4c:3a:54:c9:9d:de:12:0c:36:67:f0:f6:06:d6:21:cb:ae:06:
         99:82:14:72:ea:14:14:e3:5c:85:0a:65:b3:d8:88:58:30:42:
         99:43:c5:df:93:9e:c6:cc:8a:fa:c6:94:90:41:c6:01:67:b5:
         d2:9b:cb:b4:4f:bc:15:31:98:80:cf:50:91:f1:3f:95:16:f4:
         6b:71:bc:70:0c:20:eb:6c:01:37:a9:ba:47:37:0c:09:53:f1:
         05:1b:29:bf:c7:4d:da:51:c0:96:45:86:97:ed:ac:df:4a:66:
         9e:fb:a9:de:78:d1:ef:e7:09:58:80:d3:74:67:c3:59:ee:78:
         50:be:65:60:6f:22:d0:a3:88:b9:af:13:a0:0e:3b:a4:ce:93:
         af:2b:ca:2b:45:53:bb:3f:69:d4:66:96:30:0c:52:c1:fd:4b:
         c6:74:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:21 2026 by rpki-client