Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa
File:                     8855006E717911EFBEA3FD86C4F9AE02.roa (raw, json)
Hash identifier:          tA84WJjutvtHfbSygQ/b2Z4UfMDkpixYLrdNXtNSq/Q=
Subject key identifier:   8C:D0:72:46:86:87:30:9D:6E:75:8F:92:47:15:8A:3F:10:C8:CC:75
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       214C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:21 +0000
ROA not before:           Thu 28 Aug 2025 14:51:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152982
IP address blocks:        160.30.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8524 (0x214c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61bad-a9cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a2:40:62:11:a2:e9:6b:d5:81:be:87:f7:5f:
                    6b:74:27:ce:a7:7c:38:b2:f3:46:d4:89:42:49:14:
                    ac:45:8a:2b:f5:23:5e:18:ce:b3:5c:d5:ed:8d:59:
                    81:b9:2a:ca:8d:f5:e2:41:74:06:13:48:36:1a:b1:
                    08:26:45:30:09:80:8a:29:20:a3:cd:9d:be:41:6f:
                    9b:94:e1:ee:e9:06:81:a7:3a:85:d0:3b:16:40:9f:
                    ae:08:a3:7b:dd:43:6f:90:b6:44:f1:06:c1:27:7d:
                    9a:44:a0:fd:c3:d0:f3:6f:bc:e9:6d:0e:57:ab:83:
                    76:b2:d0:81:49:20:dd:5e:59:66:2c:3b:af:fc:03:
                    bd:d2:2c:73:0a:27:3a:8e:fb:7b:25:ed:fa:e6:74:
                    b8:ea:12:85:c8:f8:56:4c:d7:e7:3c:3b:0e:cc:ef:
                    38:e6:61:bd:fe:18:8f:ba:3c:37:48:a3:18:2a:10:
                    f5:92:63:bf:67:7b:a1:91:c8:50:c0:3d:4e:b7:c0:
                    57:d3:8d:e0:e8:91:52:2a:4e:c4:6e:cd:90:66:86:
                    31:86:44:44:41:08:22:0e:c0:d3:28:df:df:b2:54:
                    13:d8:df:74:13:ed:15:ee:b3:30:5f:dc:f1:ea:8d:
                    ca:28:8a:d4:5f:b5:9b:84:69:68:4f:67:f3:b5:ab:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D0:72:46:86:87:30:9D:6E:75:8F:92:47:15:8A:3F:10:C8:CC:75
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/8855006E717911EFBEA3FD86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:62:fd:45:d7:fa:30:16:6a:f9:8f:84:e3:76:d3:29:8f:
         5e:a6:d2:d7:1e:4b:2b:46:28:dd:ab:b9:d0:74:b6:8e:e8:3a:
         fb:4a:60:9c:1a:bc:d0:a6:8b:7e:b2:ba:4a:3d:b1:02:10:70:
         51:56:3e:eb:af:59:6b:30:ed:ce:d0:50:39:51:f2:74:18:f2:
         e1:9a:df:a3:20:16:60:0a:5d:c0:82:23:ec:f5:a3:42:0e:82:
         c5:cc:e3:09:ed:38:66:4f:a3:1f:32:a9:a8:da:6c:cf:e3:fc:
         3e:65:e5:bd:57:fd:72:1d:51:c2:b4:c1:2d:cc:91:69:b3:53:
         ca:28:26:c5:d7:6f:31:c5:c0:bd:38:2c:b9:1b:00:4d:be:d6:
         f1:bc:a9:6e:1a:f6:52:51:63:90:6c:89:5b:e4:f7:5d:db:ef:
         1b:28:e4:d7:d1:59:7b:3f:75:b2:1b:45:a7:df:50:fe:a1:b3:
         2c:1c:12:df:17:73:45:9a:91:9c:ab:cf:09:16:1e:9b:8b:75:
         5b:28:0a:80:8f:c7:d4:cd:58:3f:e1:cc:64:d7:17:5e:51:36:
         f6:78:e0:4e:5f:a2:f3:58:0a:68:3d:a7:c3:6d:d7:32:18:8b:
         c8:5b:39:c0:d5:26:26:f8:af:32:7d:fb:46:04:ad:aa:d7:91:
         df:b9:46:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:57 2026 by rpki-client