Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/733DF7D6E76111EFA6202269C4F9AE02.roa
File:                     733DF7D6E76111EFA6202269C4F9AE02.roa (raw, json)
Hash identifier:          hCXufMZGKT8LIaeVQi+N/BfFJde/j3dSRV4cnFYVKiw=
Subject key identifier:   90:84:CF:4C:A1:56:37:39:A3:86:5F:60:8B:30:8A:8C:FD:AC:78:00
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23DC
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/733DF7D6E76111EFA6202269C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:20:22 +0000
ROA not before:           Fri 02 Oct 2026 15:20:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153535
IP address blocks:        161.248.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9180 (0x23dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:20:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbb6-64de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:49:a2:57:61:15:40:3e:36:f1:92:26:b7:77:
                    7b:89:26:f7:59:31:11:d4:30:36:c1:a7:4a:ed:5c:
                    be:f0:f7:f5:16:14:1c:1e:36:4d:81:a3:85:53:d9:
                    95:7f:c1:15:ee:ff:64:48:c8:51:01:a6:69:6a:e9:
                    3a:d3:c2:89:d4:a3:89:fa:18:fe:57:13:5d:48:e0:
                    b9:be:df:8a:f8:8a:0f:ce:32:e6:5b:55:a3:20:89:
                    8b:af:de:d5:ea:33:00:5e:60:e3:09:af:aa:7e:0c:
                    1c:93:eb:d5:9a:07:0b:13:bf:ef:5c:f0:87:00:5a:
                    ff:73:5e:0b:a4:71:9b:e5:5d:14:ca:45:c7:23:ba:
                    4b:74:d8:55:1e:24:5f:ec:1e:49:48:08:99:8f:5a:
                    12:46:1c:1a:2d:3c:6a:fa:62:80:db:7f:d3:d7:99:
                    f8:73:9f:3b:18:54:04:9a:0e:e9:0f:25:5e:5b:5e:
                    ba:71:2c:79:b8:10:98:f4:e7:38:39:e0:e7:5b:66:
                    de:0e:f6:b5:94:79:31:fb:de:51:24:0b:7c:26:9e:
                    df:21:d0:9a:63:42:6c:42:17:85:7e:3c:c6:d8:83:
                    e4:89:44:ce:f4:5f:c8:e9:bc:e7:7c:4a:b4:f5:a9:
                    94:c4:2a:d7:14:62:27:4f:df:2e:2a:09:7c:47:91:
                    e2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:84:CF:4C:A1:56:37:39:A3:86:5F:60:8B:30:8A:8C:FD:AC:78:00
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/733DF7D6E76111EFA6202269C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:8a:db:f9:60:59:e5:a7:a3:77:e1:34:3b:37:bb:96:64:28:
         5c:de:1b:66:3f:c9:7a:a9:68:b2:cc:26:65:75:28:f2:cf:77:
         c1:03:e2:b9:3a:5d:91:32:98:23:2f:05:fe:a2:4f:66:95:70:
         47:46:54:13:ec:9e:6f:af:2a:1a:52:77:81:de:a6:a0:85:dc:
         e7:6b:b7:11:fb:63:c1:fd:b3:6a:87:cd:51:fb:8d:71:c7:39:
         21:ea:d9:92:3a:4f:e9:3d:9d:b0:6f:40:fa:0c:42:d3:f9:7a:
         d7:3a:7f:2a:e6:39:36:5a:42:69:ec:76:2b:9c:3f:40:1b:43:
         c7:fc:00:e6:9f:12:c0:9a:0e:79:a9:9b:98:1c:7f:1e:c9:5c:
         56:71:82:88:95:4d:05:34:67:b1:63:e6:91:50:b5:8d:83:bd:
         ed:27:c0:29:f2:9d:b2:e9:22:d2:ec:b1:d9:f7:4c:16:d1:b5:
         a0:44:44:fe:3a:06:69:32:83:f8:61:01:4d:b0:04:2f:18:bf:
         c5:d2:a8:b2:a5:f3:08:1a:ed:81:5f:63:5c:37:8d:f4:64:04:
         5f:ec:1c:8c:21:85:ac:b4:bb:80:72:10:5e:92:15:77:93:fe:
         ef:55:94:b6:ad:8a:0f:b0:cc:c9:a7:dd:50:0e:ed:f6:8e:16:
         3c:e1:f2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:44:39 2026 by rpki-client