Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa
File:                     4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa (raw, json)
Hash identifier:          BYvj9KhpplEZ4eMO9MNKyZU9UHbMFDIdlctFZN+3nbw=
Subject key identifier:   D6:F5:76:E4:D0:3D:8A:A2:D0:7B:E4:5F:59:89:9B:7F:CA:AA:D3:56
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23CA
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:19:44 +0000
ROA not before:           Fri 02 Oct 2026 15:19:44 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153013
IP address blocks:        160.191.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9162 (0x23ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:19:44 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb90-e8db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:3a:a9:64:53:e2:1a:9d:21:60:ef:03:a4:
                    cd:30:6c:68:2f:05:02:14:50:ef:59:c3:91:7a:f6:
                    0e:9d:14:9d:d8:eb:d7:9a:99:24:8b:66:25:a4:4f:
                    a7:59:bf:96:6c:ea:13:60:94:dc:48:ba:11:00:fe:
                    9b:8b:f1:90:84:44:70:e8:0d:24:64:b5:82:69:ba:
                    5f:63:3d:26:47:7e:27:2e:df:cc:4e:d7:45:69:a6:
                    df:80:27:bc:07:bf:30:02:f4:04:f4:73:0d:ad:6a:
                    df:21:da:7f:4d:76:e7:3d:9e:00:d4:74:03:65:2e:
                    33:17:10:99:7b:c3:ed:87:74:48:0e:4b:dc:04:ff:
                    94:ad:29:d7:9d:2e:4f:b8:79:bf:80:08:2b:a5:60:
                    26:ff:92:d1:23:be:11:75:d5:f6:56:e8:55:9c:aa:
                    89:54:23:95:55:1d:f0:66:3f:76:d4:2d:c1:68:db:
                    1e:d7:1e:a7:2b:4a:70:45:a2:85:4c:a3:40:83:a4:
                    c8:9b:55:d5:03:2c:39:05:f7:b6:e9:ee:5f:77:df:
                    09:30:2a:d3:e7:e5:78:ac:e7:fb:16:39:a2:6c:dc:
                    55:35:fc:9a:38:8e:2f:8d:ba:d0:da:8d:f0:68:7f:
                    6f:3d:0b:ae:e3:41:7e:18:b5:30:70:02:91:7d:03:
                    14:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F5:76:E4:D0:3D:8A:A2:D0:7B:E4:5F:59:89:9B:7F:CA:AA:D3:56
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4E7EFAA6C2BF11EFBE205D3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ea:db:e0:96:48:50:39:71:49:06:e1:96:f3:0b:60:ec:98:
         d9:ff:85:b2:ba:ea:2d:dc:31:ea:49:6f:44:72:70:46:33:0d:
         14:83:18:df:1a:ca:40:11:a5:72:ca:dc:53:c3:fb:01:65:75:
         17:ef:ed:f6:42:84:fc:21:87:c4:98:f5:dc:4a:dc:d4:05:53:
         99:67:4b:13:61:58:23:9d:1f:e7:b9:34:98:e5:6a:21:02:e0:
         5f:66:86:8e:dc:0e:96:55:e4:5f:82:90:45:0f:ac:1e:24:dd:
         34:c6:6d:27:ab:dc:ad:c6:c9:5b:da:45:24:db:17:f1:37:f9:
         d4:b3:6e:fc:18:8d:3b:0c:74:b3:31:d2:c7:24:df:f1:5c:8f:
         a1:81:1c:56:4a:d2:a9:f0:c2:fd:34:24:c9:85:d3:5b:ce:de:
         39:2e:94:72:f7:23:ea:32:24:c2:ca:86:b9:3a:1d:d1:c8:86:
         38:98:f3:1b:19:4c:71:2c:83:42:6d:5e:45:8f:5f:68:a6:b5:
         a2:f1:ab:6d:b1:ca:5c:48:f7:72:6d:59:e8:99:54:c2:62:13:
         b9:14:fb:8c:f2:36:f7:5b:d8:6e:a9:7f:10:63:e5:aa:f2:48:
         3d:bf:8a:fd:22:bf:58:87:84:4f:ce:0c:8c:73:ff:5b:37:be:
         70:62:16:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:53:36 2026 by rpki-client