Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
File:                     55760A78736F11F0A16F9258C4F9AE02.roa (raw, json)
Hash identifier:          BYxvz8I/uOllBSux9LKVuRnB4Ogp4PcRQDX+JdciE7g=
Subject key identifier:   31:83:8E:9D:4C:CC:6F:D6:13:2B:30:8A:CF:1C:66:BB:97:12:4D:2B
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       238D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:35 +0000
ROA not before:           Fri 02 Oct 2026 15:17:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149113
IP address blocks:        160.250.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9101 (0x238d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb0f-07a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:d2:9e:97:e7:18:2a:f1:50:a7:66:5b:51:
                    ca:28:79:52:49:e3:63:fb:ac:b6:3a:6c:cb:44:cb:
                    c7:35:48:b0:a5:c6:bd:85:3f:68:aa:3d:45:c3:64:
                    4f:af:81:9e:53:99:b0:95:f1:0a:8e:4a:1d:c5:d5:
                    04:e2:da:2b:20:28:07:30:2f:bc:af:77:5d:ce:73:
                    f9:4d:74:7e:24:b2:a4:27:99:97:ec:07:49:61:55:
                    89:aa:c9:0f:9f:d7:fd:85:fb:73:e9:a7:96:34:36:
                    65:3e:8a:6c:fb:ef:5f:2b:aa:4f:99:26:18:b3:8b:
                    f6:2e:1e:48:75:2a:a8:76:46:30:17:c7:a1:98:8f:
                    11:c0:52:4d:9a:ba:4c:b4:1a:b9:d3:51:e5:f9:a5:
                    79:ad:d2:48:33:ab:0a:22:b5:d9:2e:e8:dc:07:53:
                    57:ec:95:0e:e1:38:fb:7b:d0:e5:a0:c6:f9:51:69:
                    bd:06:9c:54:60:aa:08:d0:4c:87:af:ae:f2:a9:2e:
                    79:b2:b9:e9:d0:3c:f4:41:28:34:55:fc:fc:84:7f:
                    74:7f:28:fe:05:94:5c:8c:67:14:5d:a3:46:0e:79:
                    98:27:6d:9d:cb:24:07:20:7f:c0:17:c1:ed:ac:fd:
                    84:13:34:4e:00:7b:18:cd:d3:e6:f8:3a:41:d4:2b:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:83:8E:9D:4C:CC:6F:D6:13:2B:30:8A:CF:1C:66:BB:97:12:4D:2B
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/55760A78736F11F0A16F9258C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:96:d4:88:78:db:37:40:53:ad:77:86:09:af:b2:92:fa:
         53:90:04:2f:d5:1f:1c:f0:e3:cc:79:a9:27:ad:17:08:71:5b:
         df:85:d3:bd:84:54:8f:0b:38:55:a1:f1:93:dd:c1:65:80:ed:
         dd:cb:8c:8f:e7:06:72:0e:ac:e4:96:64:8c:10:4e:b8:13:5c:
         d7:23:3a:59:c9:92:3e:07:e0:b9:55:80:ee:10:3d:c3:48:5a:
         52:c1:0c:6e:c0:da:9c:e6:82:7a:df:4d:44:df:4b:a6:67:e4:
         4f:fd:55:7d:b5:be:b2:08:38:05:5f:1a:a4:2c:e1:a4:5c:00:
         fd:ea:e6:7e:30:37:e0:16:5b:d7:0b:1a:7d:53:d2:1b:6a:de:
         75:20:59:1c:3f:02:8a:fc:2e:20:c5:9f:1b:f0:f6:33:7e:49:
         a0:9a:f8:c7:2b:6c:d3:17:a7:a2:8c:fd:ed:0b:fd:1b:90:eb:
         10:80:13:76:52:c2:c2:02:da:cf:45:b4:d5:f8:36:cf:ce:4d:
         64:38:29:bd:c7:40:bc:7a:ed:52:75:2a:8a:35:80:9a:ca:f3:
         ce:1e:5d:f0:80:de:4a:c6:f4:dc:ab:af:f8:cf:fc:b5:79:f3:
         76:2f:05:bf:21:40:f8:a3:59:3a:c9:35:db:79:f8:25:c9:4a:
         e6:85:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:54:59 2026 by rpki-client