Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/405F76A699F211F18FCC90224711F970.roa
File:                     405F76A699F211F18FCC90224711F970.roa (raw, json)
Hash identifier:          TcrhKmAVK8Xmpjku/57gOfiN4dgC+gCZOnI1W/8f3SU=
Subject key identifier:   AC:8E:C5:E4:A4:9B:03:EB:04:64:1B:27:59:B7:0D:C7:5E:78:7A:DF
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23F3
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/405F76A699F211F18FCC90224711F970.roa
Signing time:             Fri 02 Oct 2026 15:21:12 +0000
ROA not before:           Fri 02 Oct 2026 15:21:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154814
IP address blocks:        160.236.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9203 (0x23f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:21:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbe7-ff2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:48:0f:44:95:e5:14:f4:fb:0c:94:9e:06:ab:
                    7a:1b:ea:26:03:b0:72:f0:10:3d:6b:d3:05:8d:50:
                    f6:f0:c4:43:9b:3c:2a:dc:fb:52:80:b9:b4:5b:2c:
                    5a:55:67:42:8e:36:2a:b9:5a:f4:88:99:0d:ea:8f:
                    8b:c0:57:f8:88:15:ee:a9:66:26:a9:72:83:f3:bd:
                    61:46:ce:c8:59:c4:d7:16:69:53:02:a5:bc:31:f4:
                    c3:ed:5f:0a:22:e4:4b:cd:3c:06:45:d0:20:7b:cb:
                    36:f5:e7:60:5e:75:ae:d7:61:dd:94:c1:88:35:5a:
                    24:d8:09:b9:29:3b:22:f7:72:31:5a:df:5e:0d:f2:
                    62:d5:71:1f:9c:77:c7:9f:d7:de:0f:91:35:35:f6:
                    32:cc:49:e2:bf:62:f0:0a:db:b4:53:92:2d:c5:3b:
                    a3:9a:4e:9f:7e:7a:70:a1:f3:43:85:98:3a:2f:ea:
                    95:a8:81:fb:ae:85:45:56:2e:ed:a3:94:98:e1:5d:
                    ce:2c:ec:63:a7:d0:ea:14:e5:88:25:e5:be:e7:7d:
                    d5:71:72:7b:14:de:35:8c:9e:da:50:4a:ed:ea:9b:
                    6f:11:c3:cc:f0:02:de:5e:8b:ab:4b:92:a0:50:a6:
                    26:08:a0:af:f8:41:20:a0:07:92:28:9d:e7:9d:0f:
                    dd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8E:C5:E4:A4:9B:03:EB:04:64:1B:27:59:B7:0D:C7:5E:78:7A:DF
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/405F76A699F211F18FCC90224711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:68:48:a7:16:c5:72:cd:3c:40:69:8c:8e:a8:92:e0:cd:a1:
         55:ca:c8:eb:cd:b8:78:07:06:22:dc:3e:c4:28:0c:13:e5:f4:
         39:74:34:8e:29:62:3a:22:45:33:a2:6c:37:84:08:aa:1c:76:
         97:72:6f:d9:1c:81:e5:e3:f1:15:e3:72:9b:8e:98:10:7f:25:
         50:69:0b:3c:fd:b0:7e:5d:3d:24:91:96:6b:f1:f5:c2:87:a8:
         12:b7:1b:11:a8:8a:d2:88:b5:4e:09:31:51:e1:36:ae:10:8c:
         60:cd:72:17:ba:0e:7e:62:84:20:bf:7e:35:d1:44:c9:3e:56:
         82:40:d4:2c:68:78:6a:24:43:62:a5:92:cf:4c:34:ff:7a:cf:
         d2:0f:dc:cb:4b:a7:68:d5:98:1b:fe:7c:2e:2d:de:fb:f0:e0:
         b2:64:c7:4e:08:c3:ef:ed:53:ef:c9:86:e7:71:cd:a7:e0:b7:
         06:d1:6d:9a:4b:3c:72:f7:b4:15:c4:e9:7d:24:a6:07:eb:23:
         4c:88:6d:e5:54:1b:5e:d5:43:b3:63:cf:2e:b4:b8:c2:b9:03:
         b9:c5:41:ad:87:80:b1:4c:a7:05:20:30:8e:2d:e9:17:36:f3:
         83:1b:d2:8a:82:36:15:d8:92:38:a6:e2:1c:12:a7:30:9f:f8:
         de:a6:75:21
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUyMTEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2JlNy1mZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA40gPRJXlFPT7DJSeBqt6G+omA7By8BA9a9MFjVD28MRDmzwq3PtSgLm0Wyxa
VWdCjjYquVr0iJkN6o+LwFf4iBXuqWYmqXKD871hRs7IWcTXFmlTAqW8MfTD7V8K
IuRLzTwGRdAge8s29edgXnWu12HdlMGINVok2Am5KTsi93IxWt9eDfJi1XEfnHfH
n9feD5E1NfYyzEniv2LwCtu0U5ItxTujmk6ffnpwofNDhZg6L+qVqIH7roVFVi7t
o5SY4V3OLOxjp9DqFOWIJeW+533VcXJ7FN41jJ7aUErt6ptvEcPM8ALeXourS5Kg
UKYmCKCv+EEgoAeSKJ3nnQ/d5QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKyOxeSk
mwPrBGQbJ1m3DcdeeHrfMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDA1Rjc2QTY5
OUYyMTFGMThGQ0M5MDIyNDcxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoOy+MA0GCSqGSIb3DQEBCwUAA4IBAQBgaEinFsVyzTxAaYyOqJLg
zaFVysjrzbh4BwYi3D7EKAwT5fQ5dDSOKWI6IkUzomw3hAiqHHaXcm/ZHIHl4/EV
43KbjpgQfyVQaQs8/bB+XT0kkZZr8fXCh6gStxsRqIrSiLVOCTFR4TauEIxgzXIX
ug5+YoQgv3410UTJPlaCQNQsaHhqJENipZLPTDT/es/SD9zLS6do1Zgb/nwuLd77
8OCyZMdOCMPv7VPvyYbncc2n4LcG0W2aSzxy97QVxOl9JKYH6yNMiG3lVBte1UOz
Y88utLjCuQO5xUGth4CxTKcFIDCOLekXNvODG9KKgjYV2JI4puIcEqcwn/jepnUh
-----END CERTIFICATE-----
Generated at Sun Oct 25 04:53:28 2026 by rpki-client