Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/796FB7725BA511EF8123E687C4F9AE02.roa
File:                     796FB7725BA511EF8123E687C4F9AE02.roa (raw, json)
Hash identifier:          te+d3ZlF/nHCKziDcfFuNEjud3BqMteCU+DiPfChDRo=
Subject key identifier:   54:ED:8C:51:A5:7E:16:79:25:0E:EB:29:CE:A2:9A:24:20:AC:DE:A9
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       208D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/796FB7725BA511EF8123E687C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:05:50 +0000
ROA not before:           Thu 28 Aug 2025 14:50:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149078
IP address blocks:        160.30.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8333 (0x208d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:50:55 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a609be-d4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:bf:6b:69:b9:88:7a:47:36:db:ac:c8:f2:
                    2b:40:ef:52:48:f9:9f:ad:95:c1:a5:48:96:73:b6:
                    ce:fe:6d:fa:ca:e4:73:a8:0c:16:92:06:85:af:bc:
                    d4:7f:7f:02:cb:73:b3:4f:7a:b4:25:7f:3d:ca:16:
                    52:5e:fd:f9:b1:e1:21:c5:3c:04:8a:88:a9:3d:69:
                    5c:a9:b7:aa:88:3b:b2:cc:98:88:fc:1f:24:81:e9:
                    98:2a:b7:1b:81:3c:7d:1b:2e:8e:7a:4f:7e:5c:5f:
                    25:57:a8:6d:a3:d1:1a:5b:e7:d7:b3:1f:ae:4d:fe:
                    42:9e:ea:58:46:25:2c:d6:ba:3f:38:4f:bd:cd:ee:
                    8a:5d:be:b6:d0:18:ab:9b:0e:b3:c2:0a:b1:3d:51:
                    12:6d:80:ea:78:35:f4:a7:11:da:9c:a1:3e:2a:34:
                    48:cc:18:ef:4d:b5:cb:b9:ff:bc:ff:e7:3e:fd:c6:
                    38:0c:b5:a9:d7:30:94:e0:92:a1:a6:93:69:e6:f4:
                    77:4e:e2:75:7f:08:b8:c4:1c:02:b5:73:8c:94:4f:
                    de:08:49:83:22:c4:6d:8f:95:2d:7d:82:53:f8:ea:
                    3c:a9:b7:a4:e7:38:e4:7c:a3:3a:b5:11:b0:f9:a1:
                    3b:b1:3f:28:75:f5:8e:6e:fc:f5:50:0c:3c:71:28:
                    8a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:ED:8C:51:A5:7E:16:79:25:0E:EB:29:CE:A2:9A:24:20:AC:DE:A9
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/796FB7725BA511EF8123E687C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:dc:70:2d:7c:c5:98:22:83:15:2f:bd:d8:26:d8:d7:bb:66:
         c3:d0:28:bc:ae:c4:d3:fd:0a:26:ca:1f:45:97:05:40:f6:f0:
         64:51:7f:43:16:83:bb:d0:3d:38:fe:44:b6:ab:e1:36:92:e3:
         97:37:da:26:ad:2d:0c:99:90:6e:c5:01:08:b5:67:b4:06:ba:
         3b:3a:ef:9d:d0:e7:01:29:0a:d6:c9:61:1d:d4:59:e7:1e:37:
         50:f7:a5:3f:95:3a:23:94:8f:29:b4:0e:2f:11:53:0b:e7:26:
         07:7a:3f:3b:26:8e:87:83:36:13:b5:c9:f8:6f:9f:0d:98:5d:
         bc:39:db:cd:60:75:61:0b:36:32:a0:09:69:d4:19:d3:36:42:
         fc:8b:b5:d6:b8:b2:97:3e:b8:a0:ff:b4:11:3c:c6:c8:1c:8b:
         2f:ad:07:57:5a:27:21:bc:ed:c7:e2:74:5d:c7:29:20:1a:6e:
         d4:aa:75:63:0c:12:9d:2c:2f:a7:09:cd:9c:cd:7b:56:98:7d:
         17:b8:d6:cf:bb:06:cf:e8:29:0c:f1:c1:3c:df:54:1b:ec:53:
         2e:49:46:5e:c5:b1:93:f5:6a:3b:7c:c9:4e:17:e1:ca:6c:d2:
         e8:a3:18:e2:a4:67:f1:2b:a1:53:e6:80:20:33:f7:b2:ff:c4:
         85:9d:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:58 2026 by rpki-client