Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/796FB7725BA511EF8123E687C4F9AE02.roa
File:                     796FB7725BA511EF8123E687C4F9AE02.roa (raw, json)
Hash identifier:          1ZCfIeDWiCLvUKf/k4+KdNAhTXhBh2k/qiThCjMtYOs=
Subject key identifier:   98:7D:D3:99:FD:C4:7A:96:5B:BA:E7:7A:E7:33:7E:F8:7C:3C:55:10
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       238A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/796FB7725BA511EF8123E687C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:28 +0000
ROA not before:           Fri 02 Oct 2026 15:17:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149078
IP address blocks:        160.30.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9098 (0x238a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb08-28f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ee:0d:02:95:d8:d6:e3:08:43:eb:71:ec:c3:
                    5b:37:cd:09:f8:68:67:2e:96:5f:49:8c:c1:0d:03:
                    7b:6e:a1:2a:3c:1a:da:94:8d:11:14:10:43:7c:7f:
                    00:e1:88:d9:ab:21:9b:8e:02:8f:59:31:93:b5:dd:
                    dc:43:c6:72:b8:e0:cc:ea:53:74:6c:13:8f:f2:33:
                    d7:dd:b9:e2:4d:17:a2:e8:55:6e:dc:38:04:36:ed:
                    c4:37:e5:e9:39:36:b2:c8:f2:39:1c:35:00:bf:a8:
                    27:83:ff:3b:e9:bf:b3:03:35:06:83:73:f3:53:c4:
                    fa:de:cb:1b:03:57:fd:7a:ee:b4:bf:48:25:de:d8:
                    0c:dd:ed:a7:92:25:89:1c:0d:a7:ed:63:54:3f:18:
                    25:f2:8e:2d:79:ca:26:ff:2f:a6:27:e6:23:04:64:
                    20:99:04:da:20:8c:11:f9:ac:0e:0d:b8:3c:e5:9a:
                    9b:c2:f2:63:dc:88:70:50:94:3d:0c:bc:0e:64:8e:
                    49:fa:4a:15:53:17:82:25:08:4c:52:4e:e2:da:9a:
                    a3:23:06:55:a2:d7:e2:2f:e3:69:2a:28:0a:87:32:
                    77:3c:e9:f8:81:52:a0:d9:d1:13:fb:27:c4:1a:39:
                    6c:30:9d:96:92:d6:24:5e:d9:b2:2b:bc:f9:bc:8b:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7D:D3:99:FD:C4:7A:96:5B:BA:E7:7A:E7:33:7E:F8:7C:3C:55:10
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/796FB7725BA511EF8123E687C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:ea:3f:25:e6:1e:5b:19:63:8a:e1:3d:6d:25:bf:da:46:55:
         46:f4:a0:16:8c:10:79:b3:ba:0d:96:c6:27:ef:71:9b:0b:d7:
         1b:8b:e1:f9:c3:56:14:c0:1a:db:15:50:06:2c:97:96:f3:9e:
         63:87:26:db:de:1e:c4:55:ec:b2:a4:c5:ed:32:cd:66:28:3d:
         de:85:03:b3:e9:cd:72:1b:03:87:10:ff:de:60:62:2a:51:50:
         a1:9c:07:f8:aa:ed:d9:ab:48:76:a9:4d:fe:5a:19:96:b8:7a:
         c9:73:c8:7b:c8:9e:56:b0:91:0c:64:d8:ef:30:39:4c:93:ea:
         c7:91:24:eb:f6:4c:0f:01:01:c3:d0:e7:35:fd:b7:19:2a:39:
         0d:90:9c:88:eb:1f:68:50:7b:7b:7f:01:99:aa:44:31:3d:02:
         ae:8c:64:bf:a3:01:fc:f0:b7:c6:9c:7c:8c:5d:a8:e6:d9:f3:
         ea:27:0c:dd:2f:36:2b:fc:64:36:b7:24:ab:82:5d:49:d6:6d:
         34:78:cf:ff:52:52:fc:aa:ca:87:cb:e9:8b:e8:f7:d6:7e:94:
         8f:92:43:38:dc:d9:31:40:c5:08:4f:c0:09:0e:7b:49:30:ec:
         91:52:8a:43:e9:91:a6:38:70:ad:42:dd:17:45:f9:a2:bc:4f:
         87:42:15:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:55 2026 by rpki-client