Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/46D6A9427BDF11EF9058416FC4F9AE02.roa
File:                     46D6A9427BDF11EF9058416FC4F9AE02.roa (raw, json)
Hash identifier:          TQpuX08Mt+lfxlRQeDFvjNYqvFIL1smlUBkZFzrU1zQ=
Subject key identifier:   16:F5:54:F1:D3:13:C8:42:8A:EA:FB:3D:E5:1D:ED:43:E1:9B:90:62
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23C2
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/46D6A9427BDF11EF9058416FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:19:28 +0000
ROA not before:           Fri 02 Oct 2026 15:19:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152989
IP address blocks:        160.187.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9154 (0x23c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:19:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb80-07c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:49:eb:f3:5b:3d:b1:97:73:c3:0e:1b:fc:
                    50:65:e9:cd:25:cb:47:e2:93:ad:a1:8a:aa:fe:55:
                    f1:b8:48:fc:f0:bc:3b:3f:29:a0:43:53:45:4c:83:
                    26:61:c9:25:1f:a7:31:2f:1a:71:bc:51:d9:fa:04:
                    73:b2:e0:b6:41:64:9c:4e:48:ba:e1:e5:64:9f:3a:
                    bb:5e:ea:8c:3d:37:88:20:a7:87:10:a8:c8:f6:cc:
                    8e:5e:de:38:fe:fb:41:4b:c9:ea:c3:bc:93:16:a3:
                    de:bf:5e:01:fd:ea:1d:b3:8d:b6:34:f8:c2:93:3c:
                    cd:8a:82:44:79:bb:56:f5:d4:79:bb:d4:c7:74:00:
                    b2:7c:91:40:d5:50:1a:58:cb:69:3a:bf:c5:4e:5e:
                    0f:32:52:54:ee:96:8d:7a:29:be:16:de:4e:66:d2:
                    b8:a2:89:be:6a:4c:3b:3b:60:56:10:4d:2d:c6:f3:
                    a1:99:c8:ab:06:f5:27:b2:68:5d:a9:f6:98:44:35:
                    e4:33:27:c0:3f:06:c4:a2:cd:99:e2:bf:92:52:c1:
                    39:26:1e:61:4b:4a:7b:54:07:8c:e5:28:d7:a1:44:
                    2f:b5:ba:96:b5:94:d7:28:dc:cc:dc:77:8d:e8:f1:
                    86:4e:bf:08:b8:9b:2d:86:96:4d:fa:cc:3f:17:b4:
                    41:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F5:54:F1:D3:13:C8:42:8A:EA:FB:3D:E5:1D:ED:43:E1:9B:90:62
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/46D6A9427BDF11EF9058416FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:0c:2d:8b:12:79:e0:7b:d6:3c:fe:06:f7:4d:22:fa:98:5b:
         a1:10:7b:4e:bd:62:7d:45:c0:6d:db:f2:16:fe:12:c0:8a:03:
         74:a5:d2:f2:cf:4f:62:a8:1d:8b:20:3d:62:75:fa:c3:21:0c:
         dd:59:47:5b:d1:be:59:d5:1c:a9:8d:27:d0:59:10:72:e9:27:
         1d:f1:ff:3d:96:17:e8:f8:80:be:4b:bc:b4:56:69:36:b4:51:
         74:8d:77:32:3f:3d:73:ce:12:68:5f:f6:a1:21:9d:cb:6c:95:
         bd:3c:9d:b9:44:cd:e4:b3:39:98:96:f8:1d:c8:0d:07:ed:ae:
         d1:f6:70:4f:b6:d2:17:ee:7f:60:25:f8:60:a8:73:41:78:52:
         e7:cd:f2:2b:d0:8b:a4:a5:ac:bc:89:21:4a:5f:8c:74:a6:de:
         e6:58:bd:ed:d8:d7:96:00:95:3f:87:d4:0f:c4:ac:fc:ec:b5:
         0e:f9:83:19:3d:16:38:0e:bf:29:82:8a:22:6b:80:49:7e:da:
         3c:4f:57:87:95:b6:d3:51:d2:ae:17:51:2c:bf:f0:3c:d0:b3:
         b1:46:2f:44:a6:03:d0:59:cf:30:94:12:74:86:2d:9e:5c:be:
         fa:f2:bb:98:06:50:42:4c:3f:d2:6f:89:10:7c:f0:06:97:8a:
         ca:14:25:29
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUxOTI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2I4MC0wN2MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxG5J6/NbPbGXc8MOG/xQZenNJctH4pOtoYqq/lXxuEj88Lw7PymgQ1NFTIMm
YcklH6cxLxpxvFHZ+gRzsuC2QWScTki64eVknzq7XuqMPTeIIKeHEKjI9syOXt44
/vtBS8nqw7yTFqPev14B/eods422NPjCkzzNioJEebtW9dR5u9THdACyfJFA1VAa
WMtpOr/FTl4PMlJU7paNeim+Ft5OZtK4oom+akw7O2BWEE0txvOhmcirBvUnsmhd
qfaYRDXkMyfAPwbEos2Z4r+SUsE5Jh5hS0p7VAeM5SjXoUQvtbqWtZTXKNzM3HeN
6PGGTr8IuJsthpZN+sw/F7RBuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBb1VPHT
E8hCiur7PeUd7UPhm5BiMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDZENkE5NDI3
QkRGMTFFRjkwNTg0MTZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLsmMA0GCSqGSIb3DQEBCwUAA4IBAQCyDC2LEnnge9Y8/gb3TSL6
mFuhEHtOvWJ9RcBt2/IW/hLAigN0pdLyz09iqB2LID1idfrDIQzdWUdb0b5Z1Ryp
jSfQWRBy6Scd8f89lhfo+IC+S7y0Vmk2tFF0jXcyPz1zzhJoX/ahIZ3LbJW9PJ25
RM3kszmYlvgdyA0H7a7R9nBPttIX7n9gJfhgqHNBeFLnzfIr0Iukpay8iSFKX4x0
pt7mWL3t2NeWAJU/h9QPxKz87LUO+YMZPRY4Dr8pgooia4BJfto8T1eHlbbTUdKu
F1Esv/A80LOxRi9EpgPQWc8wlBJ0hi2eXL768ruYBlBCTD/Sb4kQfPAGl4rKFCUp
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:52 2026 by rpki-client