Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa
File:                     5C65E16A6F5011EF9432D187C4F9AE02.roa (raw, json)
Hash identifier:          olOS34oy1LOh8wLcLS4I+EXyHgtjjmmIH4hSQQozCPw=
Subject key identifier:   AC:94:D6:03:C6:84:5B:F9:C8:E6:5C:C1:DF:8C:D3:42:5E:0B:B2:71
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2387
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:22 +0000
ROA not before:           Fri 02 Oct 2026 15:17:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140825
IP address blocks:        160.30.172.0/23 maxlen: 23
                          160.250.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9095 (0x2387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb02-c44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:3e:ff:ee:f9:f2:fd:28:cf:b9:6d:c3:b7:
                    27:7e:8d:0b:89:ee:db:15:31:08:a6:0a:ce:f2:c2:
                    36:b0:2a:18:b4:a0:f0:e7:43:3f:b5:c1:4f:aa:0d:
                    71:fd:93:fa:f1:80:5b:2f:a7:4f:a6:c3:db:2d:de:
                    40:fa:22:da:e1:6a:ec:6a:6e:d6:f2:6a:2d:8c:23:
                    b8:aa:77:00:be:c8:5f:2d:ae:e7:fb:4e:fe:91:23:
                    e7:96:8e:b5:a1:2d:ad:bb:d5:6e:cb:8c:86:76:7d:
                    3d:ac:5d:b5:a0:02:03:1c:bb:83:ba:0c:58:52:65:
                    49:58:46:87:f2:4a:c0:95:5f:56:c6:d1:63:f5:a9:
                    c8:66:57:06:c4:66:ca:9b:80:65:d7:19:3b:21:b8:
                    5e:b7:d2:0d:3e:e8:47:f9:74:b3:7a:93:fd:a8:5c:
                    83:82:ee:49:25:43:fa:40:4f:26:5e:15:de:38:b1:
                    ac:fd:9a:21:8b:4a:f7:d4:62:23:83:b4:1e:5e:53:
                    48:73:ed:f0:a3:5f:53:74:3c:e0:b0:96:fc:0d:de:
                    cc:0f:d9:a4:48:4e:10:39:85:9f:07:35:e1:21:64:
                    41:80:82:c7:e8:ae:1a:2f:b4:59:0c:11:0a:c5:9b:
                    f4:89:bd:ea:16:cd:ae:04:99:c2:ac:d6:a8:12:f3:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:94:D6:03:C6:84:5B:F9:C8:E6:5C:C1:DF:8C:D3:42:5E:0B:B2:71
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.172.0/23
                  160.250.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:47:aa:13:26:86:02:c1:dc:e7:d5:e7:7d:58:40:00:79:d6:
         b0:da:80:e7:26:9b:9b:14:b4:af:e8:c6:c0:23:63:ec:6e:87:
         6a:22:77:c5:6c:14:a8:33:1b:55:85:01:a9:4b:41:11:91:5f:
         0f:8a:52:47:25:37:d8:f5:84:73:38:d1:8d:ef:45:ba:6b:49:
         44:5f:4a:80:76:df:44:74:9a:fd:f0:e8:82:d6:f0:fe:07:65:
         45:14:b4:0b:7a:2f:08:db:2f:21:54:23:c0:64:d7:42:1e:ba:
         ba:a5:fa:af:b3:7e:cb:e2:a3:8f:76:0c:0e:05:38:f1:dd:f4:
         09:61:d5:38:00:15:d1:a7:ea:82:49:e5:e9:0a:46:78:98:ca:
         25:85:a5:4f:b0:c8:7d:d0:c4:32:08:a3:77:e1:17:75:8e:1f:
         8a:79:d4:13:ea:ee:d4:8e:a9:20:7c:ea:66:23:49:5a:43:90:
         e3:17:83:c5:d7:57:57:2f:a3:d2:cd:af:b7:bc:7b:c4:c3:e6:
         c4:b0:93:1f:37:10:61:6b:c0:b8:13:47:a2:65:d6:b6:d5:6e:
         0b:fb:38:59:c2:88:bb:0a:b2:8d:c4:d8:3a:81:79:1a:e1:c0:
         fc:c7:ee:4f:65:b0:b0:e6:94:2d:89:b8:f1:8f:6e:83:67:78:
         82:b3:62:ce
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICI4cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUxNzIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2IwMi1jNDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwEw+/+758v0oz7ltw7cnfo0Lie7bFTEIpgrO8sI2sCoYtKDw50M/tcFPqg1x
/ZP68YBbL6dPpsPbLd5A+iLa4Wrsam7W8motjCO4qncAvshfLa7n+07+kSPnlo61
oS2tu9Vuy4yGdn09rF21oAIDHLuDugxYUmVJWEaH8krAlV9WxtFj9anIZlcGxGbK
m4Bl1xk7Ibhet9INPuhH+XSzepP9qFyDgu5JJUP6QE8mXhXeOLGs/Zohi0r31GIj
g7QeXlNIc+3wo19TdDzgsJb8Dd7MD9mkSE4QOYWfBzXhIWRBgILH6K4aL7RZDBEK
xZv0ib3qFs2uBJnCrNaoEvOEmwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKyU1gPG
hFv5yOZcwd+M00JeC7JxMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUM2NUUxNkE2
RjUwMTFFRjk0MzJEMTg3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBoB6sAwQBoPpAMA0GCSqGSIb3DQEBCwUAA4IBAQCnR6oTJoYCwdzn
1ed9WEAAedaw2oDnJpubFLSv6MbAI2PsbodqInfFbBSoMxtVhQGpS0ERkV8PilJH
JTfY9YRzONGN70W6a0lEX0qAdt9EdJr98OiC1vD+B2VFFLQLei8I2y8hVCPAZNdC
Hrq6pfqvs37L4qOPdgwOBTjx3fQJYdU4ABXRp+qCSeXpCkZ4mMolhaVPsMh90MQy
CKN34Rd1jh+KedQT6u7UjqkgfOpmI0laQ5DjF4PF11dXL6PSza+3vHvEw+bEsJMf
NxBha8C4E0eiZda21W4L+zhZwoi7CrKNxNg6gXka4cD8x+5PZbCw5pQtibjxj26D
Z3iCs2LO
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:14:42 2026 by rpki-client