Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa
File:                     901608029DA211EF97708810C4F9AE02.roa (raw, json)
Hash identifier:          1MT+p5WdJP6Kmu7dBHImlFzbMmKJhOcNftGYhz4PpGU=
Subject key identifier:   FA:15:23:57:3F:07:C5:91:82:91:1F:16:53:75:6C:9A:EC:40:33:84
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23CC
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:19:48 +0000
ROA not before:           Fri 02 Oct 2026 15:19:48 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153032
IP address blocks:        160.191.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9164 (0x23cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:19:48 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb94-82fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:c1:3a:00:12:06:fa:4a:b4:43:a9:9b:8f:
                    a5:34:68:d7:dc:f9:f8:dd:ba:c0:6c:24:45:aa:80:
                    72:2f:43:f6:d0:77:24:ca:16:56:6c:39:74:89:f1:
                    4d:ae:da:a6:8b:71:3c:61:7a:4d:16:19:3b:13:93:
                    4c:03:02:dc:8a:02:b5:b2:93:f3:c6:4c:88:d3:c8:
                    d0:af:ec:70:d4:a4:39:ae:7a:66:f3:19:5f:34:de:
                    d3:68:61:99:78:1c:da:d5:67:5a:f3:33:6c:f6:79:
                    4d:f1:5c:38:0c:ed:f3:c2:c5:df:f5:6b:99:f1:b7:
                    42:23:78:81:34:a1:67:83:90:8a:15:c9:da:e2:30:
                    ab:ad:54:99:43:a0:6a:28:14:95:91:b6:40:5e:93:
                    c3:94:ba:af:c9:54:74:12:4f:5d:07:88:7c:12:56:
                    19:a6:58:83:6d:4c:f0:f8:bc:87:61:3f:b3:ee:c0:
                    85:70:61:59:ce:22:f6:1a:d1:f5:dc:8f:f0:bf:44:
                    55:dd:2e:ed:ed:fc:f7:c0:34:9f:e9:ce:f0:b9:ad:
                    60:52:42:3b:fa:57:f2:0a:32:ed:a6:9a:7d:88:00:
                    f3:65:4d:bc:4e:f5:2e:58:bd:37:c5:ba:61:5a:81:
                    68:e8:fa:20:b9:ab:3d:a2:f8:ca:62:fb:d4:4c:84:
                    ea:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:15:23:57:3F:07:C5:91:82:91:1F:16:53:75:6C:9A:EC:40:33:84
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:c6:a2:49:ad:94:06:6a:97:f5:16:d0:53:e3:1e:0b:46:de:
         0b:a4:5b:54:4f:92:a7:ab:e6:e3:3c:26:df:5a:31:22:d6:a1:
         73:b5:b4:31:3f:53:62:92:3a:5d:32:c6:e3:bd:9d:a6:c4:30:
         2a:53:d5:9e:78:a6:e0:e3:66:39:ac:24:0c:f1:b6:fe:9e:ee:
         f7:14:f6:e7:70:13:48:fd:f9:8e:5e:4d:80:5f:42:91:fe:75:
         91:0b:06:c4:9a:cf:bd:4e:15:56:5e:1c:29:e7:76:51:50:fc:
         ed:42:ea:02:0d:ef:85:7c:32:42:18:06:14:1e:80:07:a6:b7:
         39:b2:47:e7:9f:f7:bd:f2:d1:0b:99:af:06:f5:2e:3a:6d:b6:
         cb:09:56:63:42:40:68:fc:6b:1f:2c:4d:15:d2:84:c8:e2:a3:
         0a:ad:00:a5:11:89:e6:69:4b:ae:d8:8a:09:64:ac:0c:27:f3:
         b3:37:cc:ed:76:1f:5b:9a:0a:14:5d:52:7d:eb:03:20:51:3c:
         37:ac:0c:01:d7:b3:e7:8e:36:2c:3d:3d:5a:85:f2:ff:b6:47:
         16:0f:3c:1f:3a:ba:4e:09:18:29:e3:0c:9a:67:cd:3d:79:2c:
         97:65:04:73:8c:b5:50:3a:62:e5:c8:ac:ae:d1:1e:6b:c4:44:
         39:5c:cc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:47:56 2026 by rpki-client