Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4B038F14536311F183EAFC2C9E833773.roa
File:                     4B038F14536311F183EAFC2C9E833773.roa (raw, json)
Hash identifier:          2WjV9U/W+a8Av+uyV5yxmODnIkuKKHBZBRMKIK0Ofx8=
Subject key identifier:   8A:1B:30:EB:C9:BF:0F:10:D7:27:0A:28:10:D6:62:85:59:AD:72:6A
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       22BC
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4B038F14536311F183EAFC2C9E833773.roa
Signing time:             Tue 19 May 2026 09:15:35 +0000
ROA not before:           Tue 19 May 2026 09:15:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151942
IP address blocks:        160.22.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 14:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8892 (0x22bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: May 19 09:15:35 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a0c2a37-2c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:ef:12:40:48:db:be:c6:22:bd:37:b4:1f:
                    cc:38:2f:4b:8f:4b:fe:20:29:9b:25:1e:15:73:f0:
                    aa:05:41:ad:6a:91:6e:8a:e2:1b:1e:dc:2c:27:e3:
                    95:3c:35:87:b7:a7:ca:5c:b9:5f:b7:7a:28:19:14:
                    11:f6:aa:a0:c8:13:74:8b:08:5e:c9:84:aa:1f:91:
                    1c:f0:1c:53:29:ab:04:fa:3b:a4:6f:d0:7d:57:3d:
                    b3:90:60:ad:fc:4d:dc:69:0c:dc:51:cc:9c:e7:f1:
                    69:22:a7:b9:ac:27:8e:8f:be:6f:68:f4:18:40:c6:
                    d7:26:f9:8a:b0:46:92:c7:99:bf:3b:e2:7d:c8:11:
                    2e:18:d2:43:ec:b8:cf:2e:4d:74:ae:d1:63:dd:76:
                    c9:60:c1:29:4e:af:89:a0:d7:25:9a:68:31:22:90:
                    cf:b4:dc:03:ab:62:1b:a1:ba:9b:b0:3a:81:00:3b:
                    13:cf:44:0e:e7:00:50:e9:a9:b1:2e:1e:1c:5a:43:
                    42:20:a1:f0:db:2f:dc:1a:0d:31:bb:f6:3d:dd:58:
                    cd:94:a0:5e:8e:32:eb:84:77:bf:a2:ce:12:5e:7e:
                    b9:fa:f9:24:42:6d:9b:9e:29:5f:92:67:f9:a2:4f:
                    17:30:aa:d5:4f:f9:8b:1b:7a:b4:fc:68:80:68:33:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:30:EB:C9:BF:0F:10:D7:27:0A:28:10:D6:62:85:59:AD:72:6A
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4B038F14536311F183EAFC2C9E833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:80:36:64:ae:98:09:c7:f7:b8:aa:e5:0d:44:07:b1:ed:d8:
         53:98:16:68:fd:3f:af:a6:e1:9d:b3:3e:73:81:0f:ed:be:f7:
         4e:f0:76:44:b5:d8:cb:4b:e9:cc:90:c8:8c:6d:12:cb:85:ff:
         ca:d4:6b:72:17:78:13:f4:18:49:7f:a2:72:43:d1:14:86:e7:
         21:89:fe:d9:70:5c:88:71:2d:22:43:27:89:98:3d:f3:f9:c7:
         2c:ba:b8:38:bb:80:c1:87:a7:b4:e6:34:49:87:2e:c0:77:35:
         e4:a9:e3:f2:a7:d3:89:5f:34:8b:4b:af:95:53:a9:5a:a1:d6:
         00:22:a6:41:01:9d:b5:0f:b6:ac:40:e1:b5:de:00:4d:bb:e7:
         1f:4a:d9:15:8e:47:fd:fc:49:83:64:fc:ef:18:78:a5:19:00:
         00:93:a0:53:c9:92:9c:b8:89:b5:c3:71:45:91:c8:ee:84:24:
         a4:63:b1:1b:0f:ca:68:77:86:02:60:89:9e:fe:d9:63:67:65:
         72:eb:89:80:e7:d1:75:80:1d:ff:3b:a1:17:dd:e5:af:0e:28:
         1f:81:51:e8:40:56:75:2d:11:a1:5b:1a:0b:fc:c2:ba:e3:4e:
         f9:a6:eb:e2:43:45:24:dd:63:5a:35:35:3b:18:0a:09:c2:c0:
         4d:68:d9:f0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICIrwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYwNTE5MDkxNTM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBjMmEzNy0yYzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsr7vEkBI277GIr03tB/MOC9Lj0v+ICmbJR4Vc/CqBUGtapFuiuIbHtwsJ+OV
PDWHt6fKXLlft3ooGRQR9qqgyBN0iwheyYSqH5Ec8BxTKasE+jukb9B9Vz2zkGCt
/E3caQzcUcyc5/FpIqe5rCeOj75vaPQYQMbXJvmKsEaSx5m/O+J9yBEuGNJD7LjP
Lk10rtFj3XbJYMEpTq+JoNclmmgxIpDPtNwDq2IbobqbsDqBADsTz0QO5wBQ6amx
Lh4cWkNCIKHw2y/cGg0xu/Y93VjNlKBejjLrhHe/os4SXn65+vkkQm2bnilfkmf5
ok8XMKrVT/mLG3q0/GiAaDOEMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIobMOvJ
vw8Q1ycKKBDWYoVZrXJqMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEIwMzhGMTQ1
MzYzMTFGMTgzRUFGQzJDOUU4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBZKMA0GCSqGSIb3DQEBCwUAA4IBAQC3gDZkrpgJx/e4quUNRAex
7dhTmBZo/T+vpuGdsz5zgQ/tvvdO8HZEtdjLS+nMkMiMbRLLhf/K1GtyF3gT9BhJ
f6JyQ9EUhuchif7ZcFyIcS0iQyeJmD3z+ccsurg4u4DBh6e05jRJhy7AdzXkqePy
p9OJXzSLS6+VU6laodYAIqZBAZ21D7asQOG13gBNu+cfStkVjkf9/EmDZPzvGHil
GQAAk6BTyZKcuIm1w3FFkcjuhCSkY7EbD8pod4YCYIme/tljZ2Vy64mA59F1gB3/
O6EX3eWvDigfgVHoQFZ1LRGhWxoL/MK64075puviQ0Uk3WNaNTU7GAoJwsBNaNnw
-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:03 2026 by rpki-client