Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
File:                     7390E6C4B69011EEA6557474C4F9AE02.roa (raw, json)
Hash identifier:          EeQvXUBAfw0nFeJFf88Y8MoGleppFywgxMD/AfRvZLU=
Subject key identifier:   03:85:9D:22:80:9D:3C:A3:00:7B:9F:DA:0A:D3:6A:78:FE:C5:C4:C3
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23F8
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:21:21 +0000
ROA not before:           Fri 02 Oct 2026 15:21:21 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     63737
IP address blocks:        144.79.12.0/23 maxlen: 24
                          157.10.48.0/23 maxlen: 23
                          157.10.50.0/23 maxlen: 23
                          157.66.156.0/23 maxlen: 23
                          157.66.158.0/23 maxlen: 23
                          160.25.76.0/23 maxlen: 23
                          160.25.168.0/23 maxlen: 24
                          160.25.234.0/23 maxlen: 23
                          160.30.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9208 (0x23f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:21:21 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbf1-86a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:bb:58:12:94:ff:35:6c:37:c6:8d:e2:e9:
                    78:03:56:ba:5f:10:bf:41:9f:07:b8:04:25:51:93:
                    22:ae:27:28:74:f2:3a:ca:19:41:98:fa:08:19:b4:
                    1f:e7:3c:d4:ea:17:67:82:4c:f1:ff:f4:ae:b9:f6:
                    59:8e:c4:fd:04:af:68:dd:3c:75:47:a9:24:2d:cf:
                    85:f5:1e:97:30:6a:ba:74:7a:71:bf:da:2a:60:67:
                    b3:ba:c5:a7:0d:3e:19:b1:fd:9b:01:72:21:fd:b0:
                    17:37:50:01:a7:cd:32:a3:14:e3:8f:a3:23:7e:37:
                    28:c1:ed:b0:70:8a:39:b7:47:b4:8f:38:c6:d3:c4:
                    76:d8:48:55:81:91:ee:69:0d:ab:ca:40:53:54:08:
                    c7:de:49:f5:50:c6:ba:71:76:15:73:be:87:5b:b9:
                    38:38:41:c9:f3:10:fe:f1:e7:a1:27:20:dc:cd:67:
                    21:8e:05:3a:95:87:04:87:3c:8e:cf:8e:b7:de:ed:
                    63:60:38:e2:06:13:81:28:1a:2f:7e:f5:1c:0d:5f:
                    7f:91:d2:d8:75:8c:5e:a3:e0:59:11:d4:d3:5e:15:
                    b5:69:e9:7c:e3:8e:68:34:15:6c:90:22:29:16:03:
                    58:9f:d3:c4:25:9a:aa:09:46:39:a2:a5:22:8a:2b:
                    86:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:85:9D:22:80:9D:3C:A3:00:7B:9F:DA:0A:D3:6A:78:FE:C5:C4:C3
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.12.0/23
                  157.10.48.0/22
                  157.66.156.0/22
                  160.25.76.0/23
                  160.25.168.0/23
                  160.25.234.0/23
                  160.30.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:4b:f9:81:c3:26:77:65:d1:79:a6:69:46:c4:99:c2:24:
         1f:99:e7:93:47:33:c5:56:b6:57:b0:0f:84:c9:a2:6c:b0:22:
         72:1c:aa:51:d0:4e:d2:1b:74:29:b4:9a:fe:ea:60:d2:5f:15:
         5d:59:ac:46:5e:45:3f:1d:af:29:e2:52:24:98:15:88:cb:54:
         a9:ca:5d:45:42:f5:02:93:3f:ae:b4:35:c9:99:cd:d5:8f:66:
         ef:fb:f3:6b:7c:61:c5:04:04:6f:73:7b:c8:6f:2d:c7:8e:8a:
         13:74:b1:9f:55:4f:5b:4b:3b:87:52:d1:ac:92:a8:3b:99:f8:
         6e:13:68:7f:41:49:c0:b5:c9:d6:dd:c6:37:56:46:90:b5:23:
         62:dd:c9:9c:fd:fd:ee:53:07:00:23:36:69:6e:82:80:52:76:
         94:71:11:bc:3c:0d:39:64:03:0b:13:ba:9d:63:78:d7:fb:5e:
         41:1d:3f:72:1b:08:90:9e:cb:c6:6c:ca:71:e9:29:f2:82:a9:
         9c:86:a5:63:c3:a1:9d:ad:2a:60:0f:21:1c:31:ed:8c:9a:ee:
         f5:ab:8c:b1:a9:f8:ad:d8:be:99:25:d6:ac:5b:75:96:58:7f:
         d9:48:ce:1c:ab:ea:09:9e:b2:58:d9:9f:30:cb:74:ad:8d:af:
         5c:db:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:22:38 2026 by rpki-client