Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B898A2A768A11F18379E3C263A30FBC.roa
File:                     9B898A2A768A11F18379E3C263A30FBC.roa (raw, json)
Hash identifier:          xw+A/PJIxgrA9zH5hVBeNFikm1OSHI/ABsx+3vy+Glg=
Subject key identifier:   AD:93:72:BC:0A:4B:58:42:2F:DF:3F:33:58:15:B6:A1:16:E1:5A:9B
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2311
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B898A2A768A11F18379E3C263A30FBC.roa
Signing time:             Fri 03 Jul 2026 02:55:11 +0000
ROA not before:           Fri 03 Jul 2026 02:55:11 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151858
IP address blocks:        157.10.52.0/23 maxlen: 23
                          157.20.82.0/23 maxlen: 23
                          160.25.166.0/23 maxlen: 23
                          160.187.146.0/23 maxlen: 23
                          160.191.86.0/23 maxlen: 23
                          160.191.88.0/23 maxlen: 23
                          160.250.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8977 (0x2311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Jul  3 02:55:11 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a47248f-5887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:b4:ce:69:1c:bc:ec:19:cb:c8:ee:0f:05:
                    5e:c8:52:2d:52:16:bf:e3:10:07:f7:71:3d:29:9f:
                    fa:63:39:e5:34:cc:3d:e6:19:96:37:4b:86:d9:23:
                    ac:1e:62:72:97:11:cc:1a:8a:33:90:df:a6:b9:74:
                    51:18:f4:eb:2b:61:42:c5:b3:a8:6a:4b:7e:45:bb:
                    34:12:d0:35:73:8d:87:f4:02:81:6b:3d:4b:cd:a9:
                    ee:b5:fd:ad:bf:76:92:e1:4a:dd:eb:70:d6:e2:50:
                    8e:05:4b:7f:db:53:b2:29:72:73:ed:ee:97:aa:61:
                    26:e4:1c:ab:de:50:64:5c:46:17:60:ac:f2:b0:c4:
                    1a:8c:d6:b3:fd:d6:51:89:0e:2d:eb:d9:45:bd:ba:
                    7d:bc:bc:26:89:61:1a:11:23:39:3a:83:5f:13:aa:
                    97:74:53:f3:d0:a4:59:d5:06:7e:11:65:94:c9:0b:
                    68:19:71:03:bc:e9:a9:78:cc:93:09:f7:dc:93:84:
                    3b:f3:d4:a1:38:1e:d0:4a:3f:3b:5e:63:ec:e7:6e:
                    c3:f8:78:c6:2a:5f:6c:af:e3:0b:39:38:64:1d:b2:
                    7f:e2:7f:7d:ce:0a:e6:a4:8e:59:ce:d9:d2:01:b4:
                    2d:ac:06:06:d4:10:48:27:0c:f5:62:01:1e:4a:2c:
                    49:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:93:72:BC:0A:4B:58:42:2F:DF:3F:33:58:15:B6:A1:16:E1:5A:9B
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B898A2A768A11F18379E3C263A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.52.0/23
                  157.20.82.0/23
                  160.25.166.0/23
                  160.187.146.0/23
                  160.191.86.0-160.191.89.255
                  160.250.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:8c:8b:68:51:20:6a:e7:93:22:98:8c:a2:a9:39:3e:74:56:
         b6:12:50:e3:a4:2a:ec:57:87:b2:f9:e3:47:cd:ae:82:45:b4:
         36:1b:fb:b7:94:9c:c5:ec:8f:e6:0f:33:3d:df:84:a1:8f:13:
         be:b1:5a:f2:f6:07:3a:f5:83:ce:8b:b5:89:7e:a5:f0:35:15:
         1c:2d:3e:8e:28:f5:78:66:e6:9b:5f:33:81:dd:1f:f6:25:37:
         23:2d:87:ff:8b:e7:b5:25:ac:fb:3f:a5:87:cc:32:f6:cb:71:
         b5:a9:fb:c1:db:c8:54:a0:e9:82:fc:8c:25:39:b1:c6:2f:4b:
         11:21:ae:90:c8:69:8f:d1:9b:66:3e:dc:3b:d3:5d:d6:26:d7:
         0a:17:9d:5c:e3:c9:2f:55:9a:da:2e:19:37:ed:2a:af:6a:37:
         76:be:de:26:45:fb:21:d7:46:56:ea:b4:ef:30:d4:49:cd:d5:
         1a:c1:ba:ff:7a:61:bb:2c:b6:24:ef:7f:54:dd:70:32:87:6d:
         82:0e:71:b6:1b:57:1e:04:66:89:74:7c:b7:32:0b:60:f5:bf:
         1a:df:51:70:4a:8d:54:6e:cf:a3:73:d7:01:98:f6:05:0a:53:
         02:63:4c:f6:9e:19:6d:5e:23:5c:a5:3f:e3:8f:33:bd:f9:37:
         ce:4a:98:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:09:10 2026 by rpki-client