Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/778A199E822811EFAD8E443CC4F9AE02.roa
File:                     778A199E822811EFAD8E443CC4F9AE02.roa (raw, json)
Hash identifier:          1wcruRvvr3Vy2UrDL8O7IONT4nBbgDvAg6LxnFMJHIQ=
Subject key identifier:   D2:D2:DA:38:B5:C0:96:FD:18:28:65:38:E6:E7:F2:52:D5:B0:E3:73
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2147
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/778A199E822811EFAD8E443CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:16 +0000
ROA not before:           Thu 28 Aug 2025 14:51:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152994
IP address blocks:        160.187.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8519 (0x2147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61ba8-0d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a3:20:13:ca:5b:ee:e2:c2:14:7f:2a:b5:12:
                    3c:1a:49:b3:4b:a6:00:e7:ef:f3:8a:db:8c:39:43:
                    38:6f:d1:ff:1b:70:31:95:6c:f3:01:6e:46:5e:1c:
                    4d:bf:a7:cd:80:08:01:9e:23:94:ff:b4:4b:6f:08:
                    2d:11:1f:0d:35:5c:00:5f:36:03:5f:08:eb:10:bc:
                    af:c2:22:9b:0d:ef:bf:07:e4:56:7b:7c:b8:a9:31:
                    1a:87:0f:e0:7d:34:6c:69:4c:49:1c:4e:db:19:8a:
                    ca:40:95:d7:6a:63:19:60:e4:0c:bc:aa:de:80:41:
                    22:a7:8b:84:94:82:8b:6b:3c:5e:82:e2:d4:a9:f9:
                    fa:d3:73:26:0f:c4:e2:41:3d:d7:34:46:5f:33:6a:
                    08:6b:61:98:5c:7f:25:d3:d2:be:53:95:29:7e:9e:
                    2e:3a:2c:b6:3e:f6:c5:ce:d7:c9:4f:08:72:0f:ff:
                    ac:b2:3a:11:de:c4:a9:c3:72:46:78:46:63:42:9d:
                    f3:1f:ae:6d:d8:82:61:74:25:3d:fb:42:d7:e2:e2:
                    d6:6e:aa:59:60:f3:a6:89:22:cc:80:26:58:89:21:
                    1d:c8:ba:29:3f:bf:b3:16:23:51:38:f6:36:c5:8d:
                    2f:5b:21:af:7c:a0:00:07:17:68:8c:f0:69:2d:e1:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:DA:38:B5:C0:96:FD:18:28:65:38:E6:E7:F2:52:D5:B0:E3:73
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/778A199E822811EFAD8E443CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:80:20:e9:a6:74:a7:8f:8e:6d:48:07:73:e0:fb:59:eb:c0:
         e5:ff:7b:d7:29:e1:74:e5:b0:1d:03:cc:6c:6a:49:f7:2e:1c:
         29:59:5e:7e:d3:49:17:b0:f3:36:f8:79:e9:4a:8f:0c:42:95:
         72:45:a2:f9:70:28:e9:7d:d8:50:0e:77:48:13:25:c4:b8:b1:
         70:6c:ca:c7:52:8b:85:7f:11:36:4a:01:8c:a6:c1:7d:8d:0f:
         11:41:aa:89:be:46:c1:dc:ec:07:ed:7d:89:7c:9c:ca:f4:d8:
         ae:d7:8f:aa:99:32:88:02:18:f4:04:69:15:82:12:dd:55:5e:
         97:62:11:67:5b:38:f5:1a:43:86:d9:20:43:9f:cb:1a:05:06:
         ef:ca:ff:95:07:0c:c2:ca:13:bf:4a:fb:c2:a5:4e:d6:fd:88:
         81:c8:c3:5f:bd:8b:f2:9a:ed:76:0e:c4:92:c4:b8:c9:b8:bc:
         0d:a5:69:25:13:66:a3:aa:d3:20:15:50:3c:bf:11:0e:3c:dd:
         e3:05:8e:d7:29:c9:b8:0d:79:bd:9d:16:65:29:7a:33:d0:d5:
         80:ec:fe:87:91:76:e1:4e:96:12:f0:7a:a2:9d:50:ec:8a:a4:
         72:12:32:f0:63:a4:36:64:40:59:f1:16:db:59:85:76:fd:83:
         42:56:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:58:15 2026 by rpki-client