Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
File:                     981C74DC8A0611EFBA8EF824C4F9AE02.roa (raw, json)
Hash identifier:          u3YPIxSdWA79B+9afYCLQmDu9YqJgMw34oFx8i7Erbg=
Subject key identifier:   15:A8:98:C4:40:39:3D:0B:36:9C:DA:E7:F0:E1:70:26:89:1A:56:9E
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2144
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:14 +0000
ROA not before:           Thu 28 Aug 2025 14:51:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153004
IP address blocks:        160.187.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8516 (0x2144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61ba6-047f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:b4:f3:8c:72:0b:9e:df:ce:b7:13:e7:8c:
                    f3:e0:6f:44:6f:e4:be:b2:fb:55:8c:6e:c1:03:cd:
                    df:52:17:a9:d9:23:bd:b7:0a:48:be:23:a8:c1:60:
                    28:2d:ef:4c:ed:62:26:1d:11:ef:b7:e1:d8:a5:33:
                    d6:34:5d:8c:45:e3:37:06:7c:ca:ae:5d:cd:f4:5b:
                    97:e8:4f:e9:7d:be:39:94:b1:75:8c:b9:d3:6b:f5:
                    f0:66:57:1e:54:a0:97:fe:b0:41:42:db:40:7a:9a:
                    be:47:4c:75:d3:85:04:ce:65:85:b5:b5:61:b0:01:
                    83:f4:f0:dc:a2:db:6d:0c:04:37:06:5c:8c:2f:1d:
                    e5:ad:df:31:90:27:ba:5f:61:bc:db:d0:82:d5:22:
                    a4:75:57:ba:5d:8c:d3:c1:4d:e3:42:2b:5f:81:8e:
                    49:5b:95:a2:e1:9e:57:0d:4c:ec:2c:2e:7c:9f:b8:
                    6f:d1:c6:ff:eb:d9:eb:6f:20:65:9b:3b:11:f2:cf:
                    ad:ec:51:20:d7:5b:1c:47:a2:e6:33:6c:09:63:5f:
                    22:41:28:5d:6b:6d:26:ba:f5:55:e6:91:d8:83:f3:
                    71:53:20:10:3e:42:ca:3d:da:53:ca:94:dd:bd:b1:
                    bf:55:19:99:0b:5e:3e:3d:e2:a8:29:13:3d:6f:0d:
                    81:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A8:98:C4:40:39:3D:0B:36:9C:DA:E7:F0:E1:70:26:89:1A:56:9E
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/981C74DC8A0611EFBA8EF824C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:a2:29:ab:09:14:e5:fa:23:ee:fb:92:42:20:b1:15:2f:95:
         9b:9b:80:47:ed:7a:a1:39:e1:7c:46:9a:5e:50:e9:5f:22:f4:
         e6:d4:be:13:7b:19:c8:e5:7b:1d:df:a1:20:3d:b5:27:d5:16:
         fe:7b:a8:39:46:5c:45:31:d3:29:82:92:ce:76:e9:98:53:ce:
         74:d2:56:d0:b4:cc:db:c2:7d:a5:cd:61:b0:30:4c:1c:9d:80:
         9f:25:2c:4d:e5:62:47:9a:3d:3f:00:91:89:fc:11:5c:75:e3:
         4d:75:6e:c5:e7:b7:d1:2a:1f:50:70:f9:4d:2e:2f:8d:31:df:
         7d:6b:06:a3:52:86:5b:e2:55:01:b3:50:6f:d6:a7:35:b0:02:
         e3:59:33:d5:5d:04:66:eb:83:f3:c5:40:36:e5:5d:7e:54:8c:
         98:9d:9c:e3:67:dd:2d:30:6f:04:41:f6:6f:fc:99:79:1a:46:
         5a:3a:8f:23:e9:24:b5:8f:71:da:f9:9c:33:14:d3:67:60:3b:
         d0:01:2c:73:37:5f:39:a0:12:bc:d5:e9:62:fe:96:1a:40:eb:
         11:14:70:0d:c3:24:82:2d:01:bc:f6:d4:e6:3d:76:58:4b:e7:
         6b:ff:f5:b2:4f:df:01:5e:57:d3:7c:91:8e:67:a3:ce:2e:c7:
         85:f2:9a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:22 2026 by rpki-client