Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
File:                     55760A78736F11F0A16F9258C4F9AE02.roa (raw, json)
Hash identifier:          eMK6b802arPpRd7Mfel7hoowIgG6u0eF/tX3kBW63gU=
Subject key identifier:   2A:67:C5:13:A0:06:E0:AB:D4:71:C4:A0:F3:70:4C:AD:B5:C1:90:7B
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0677
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:50:57 +0000
ROA not before:           Thu 28 Aug 2025 14:50:57 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149113
IP address blocks:        160.250.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1655 (0x677)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:57 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06cd1-a97c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:82:e0:e2:f0:01:40:c5:eb:35:e3:bd:be:a3:
                    1e:13:f2:db:f8:0c:7f:3b:d6:87:85:79:b1:da:d0:
                    bb:ff:7f:27:72:c5:9b:0b:3c:ea:af:33:46:24:17:
                    da:bd:4f:5a:14:6c:c7:27:30:7c:d1:7d:51:ca:25:
                    82:a5:cb:95:63:15:ca:c2:24:38:2a:a9:e7:6b:5d:
                    bd:0d:0b:5f:f3:ea:4e:3c:b2:70:65:79:fe:66:7a:
                    fb:fe:dd:2d:78:e9:5a:85:df:3e:35:09:78:d1:01:
                    8c:bf:1d:51:27:8e:8f:2d:a2:bd:d6:f6:d4:04:05:
                    a7:71:a3:5a:49:3e:7f:c7:6d:8c:e6:d6:99:5b:2f:
                    41:bc:24:37:81:56:17:3c:5c:16:1b:b3:c0:3f:55:
                    b7:9f:86:4f:32:1c:e9:46:d8:85:58:9a:d9:df:63:
                    d7:bb:75:d0:ef:d5:24:27:92:07:28:db:2e:65:f2:
                    99:5f:77:64:f2:27:a6:18:a6:ca:01:a4:86:f4:91:
                    13:19:b6:f7:2d:e8:8c:bd:27:87:5c:a8:02:2b:73:
                    e5:da:08:56:73:16:d6:a9:8a:38:7f:d0:ac:d5:c0:
                    59:b7:f7:4f:88:8f:4d:63:b6:ff:eb:98:e0:56:cb:
                    77:e5:96:54:c4:c0:82:9b:35:91:2e:fa:02:23:59:
                    2c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:67:C5:13:A0:06:E0:AB:D4:71:C4:A0:F3:70:4C:AD:B5:C1:90:7B
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:13:02:84:ba:20:39:37:04:e9:c0:e0:05:a2:06:e4:40:2a:
         4e:a8:bf:37:9c:7d:82:f5:1d:2a:da:e0:09:d0:a4:f5:a7:c1:
         2e:8c:bc:99:a4:a7:69:fe:91:a8:b9:1e:0c:a0:57:ca:9d:b1:
         bb:9d:1b:e0:1d:59:bb:68:e9:68:f6:16:a9:a8:19:8d:73:8d:
         90:d5:b5:46:20:2b:7d:57:e7:27:7f:2a:7a:78:0c:38:e4:8a:
         97:a2:c8:00:0e:26:aa:b5:30:2e:16:e5:3c:b6:c3:d0:ac:8a:
         b1:5b:83:6b:17:94:d0:19:69:f3:f3:b1:92:e6:e4:09:72:6c:
         b3:99:38:80:76:f6:e1:76:3f:2e:be:3e:41:1b:44:ad:32:e0:
         eb:23:70:e0:53:5f:ec:82:93:b4:21:53:d7:65:2b:8d:aa:2a:
         50:be:d3:e0:60:76:da:28:c2:67:30:b1:b4:55:f1:7b:ab:14:
         11:ff:9d:29:30:d9:e4:3c:5f:ac:3e:08:2f:e7:12:59:90:62:
         06:ae:f3:f5:49:9c:3d:d7:7f:b1:ca:50:6a:b3:76:35:2f:fe:
         9c:99:11:e7:52:1c:67:d2:4f:eb:7c:5d:18:e8:4b:67:79:e2:
         ce:cd:c5:1a:a4:16:65:e7:21:18:0f:d6:ad:6d:fb:87:67:91:
         ee:06:43:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 00:35:05 2025 by rpki-client