Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2FAFAA2E1DFB11F1A7DCD3F1193D8C67.roa
File:                     2FAFAA2E1DFB11F1A7DCD3F1193D8C67.roa (raw, json)
Hash identifier:          9YAH2FSP5wllag6HlfQaAd+Lb4wmGmCqtta6EFHg550=
Subject key identifier:   EC:FD:0D:29:4B:04:61:E0:50:F3:DD:7D:B2:54:0E:9C:EA:3A:A6:D6
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2391
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2FAFAA2E1DFB11F1A7DCD3F1193D8C67.roa
Signing time:             Fri 02 Oct 2026 15:17:44 +0000
ROA not before:           Fri 02 Oct 2026 15:17:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150698
IP address blocks:        157.10.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9105 (0x2391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb18-ec7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:04:8b:e8:e5:be:c6:ee:42:71:5a:20:a0:
                    8b:3d:31:26:e8:96:9e:03:5e:52:42:05:4b:3a:8d:
                    6b:64:84:a2:86:5a:61:d3:60:e0:17:7a:6e:93:00:
                    7e:41:1f:50:7a:40:69:7a:73:50:fa:fb:a1:93:9a:
                    2b:55:22:11:a2:84:36:de:98:3c:d1:63:0e:9b:91:
                    f4:d4:16:a2:f1:c8:83:d2:04:3b:f8:89:b8:31:36:
                    2c:d7:cc:36:9d:db:ec:df:c6:4e:05:40:ae:f1:1a:
                    05:da:27:0e:32:77:cd:7c:b0:d0:ec:11:2f:0d:c3:
                    cc:ab:4e:13:93:21:ab:ec:e3:85:41:ac:51:c7:a8:
                    79:10:9c:52:26:6b:96:d5:e3:9a:3a:46:07:37:f7:
                    72:2d:5c:e4:af:45:70:e2:e1:17:4d:f3:0f:e5:f0:
                    cd:5e:3f:b4:45:45:af:00:76:1c:cb:c2:fd:c5:9c:
                    a6:9c:ed:ae:c3:2b:50:2b:b6:bc:5a:5e:70:46:2f:
                    16:32:b2:c2:16:86:d2:4f:bf:12:12:40:3d:c1:7f:
                    b4:e2:83:4e:13:25:81:a6:70:25:f1:8e:3b:78:c0:
                    7c:01:69:7a:37:ad:49:38:e5:39:e2:f2:19:93:5d:
                    3c:cf:5f:b8:a9:d4:c4:af:24:b9:70:79:cd:c4:e4:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:FD:0D:29:4B:04:61:E0:50:F3:DD:7D:B2:54:0E:9C:EA:3A:A6:D6
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2FAFAA2E1DFB11F1A7DCD3F1193D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:c1:fb:6c:40:fe:12:40:51:d5:5b:89:f4:54:20:15:8d:34:
         cb:5c:7d:75:fb:31:e2:36:81:a6:6a:b7:9d:62:e4:e7:de:d7:
         52:20:5d:a3:1f:f7:8f:e5:a0:a4:04:f9:89:17:63:53:7c:e3:
         17:2f:8c:51:f6:69:98:67:15:6c:70:f7:3c:e5:6a:f2:41:c8:
         78:57:7b:1a:01:cd:01:fc:ac:ff:ab:c5:13:59:90:21:b5:7b:
         56:5a:c5:9c:96:ea:d9:2c:a1:3e:b3:23:38:88:9a:cb:f1:84:
         4b:18:d4:91:89:6b:1a:11:52:90:ac:57:a7:64:52:55:8f:e8:
         c8:a3:1b:db:52:ba:04:4b:bc:5f:cd:a6:29:81:fb:f3:b0:26:
         f5:14:d1:39:ba:3d:3f:28:51:60:94:77:ac:07:42:73:95:cf:
         a6:c9:1e:e8:f7:00:ae:f5:d2:58:7d:d9:8b:b3:15:ef:23:d8:
         0e:46:a3:ab:5c:58:f0:11:a5:cd:5a:d5:c0:38:02:d3:90:fb:
         7c:ac:50:5e:a6:56:16:7a:71:05:72:33:cc:c0:40:03:65:fd:
         83:ee:13:cd:c4:1a:fb:94:7d:82:45:84:34:b8:b5:6f:0b:c4:
         16:e9:d0:c4:f8:cb:98:fc:c8:b0:e0:8d:b7:46:89:9f:47:b5:
         0c:9d:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:21:45 2026 by rpki-client