Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A64921C6DB2E11EF9695A34BC4F9AE02.roa
File:                     A64921C6DB2E11EF9695A34BC4F9AE02.roa (raw, json)
Hash identifier:          pKdmku1mYnqPA3GdnKBgeHNOgSqJtiOJAYSPQFjgVhY=
Subject key identifier:   EA:A4:F6:BB:4E:52:07:61:3A:7B:BD:28:F0:71:C0:D8:D0:67:3C:EA
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23DD
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A64921C6DB2E11EF9695A34BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:20:24 +0000
ROA not before:           Fri 02 Oct 2026 15:20:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153539
IP address blocks:        161.248.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:33:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9181 (0x23dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:20:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbb8-9b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:64:dc:d4:8f:65:cb:19:df:39:9a:28:0e:
                    a6:26:6f:84:3c:b0:44:f5:33:82:41:6d:d2:28:c1:
                    59:b4:9b:aa:2b:bc:5f:bf:dc:bd:1b:81:34:ad:ee:
                    92:91:c3:3c:cf:d7:98:66:97:a5:d6:44:f7:13:3a:
                    6c:76:1b:62:e6:11:f0:e4:a2:b1:74:b3:f3:7a:bc:
                    6f:15:3d:9c:e5:10:32:61:1c:c5:77:db:e8:5d:35:
                    10:5b:e6:45:c3:62:2f:b8:f3:5f:7c:18:c7:b3:32:
                    19:41:62:4c:39:93:8b:89:3e:89:3b:3e:0f:4a:17:
                    40:fd:d5:f4:02:03:db:92:df:84:f6:79:e4:e3:dd:
                    72:42:d6:86:d8:d0:3f:b1:e3:b5:12:6e:2c:cb:f4:
                    20:8b:b4:74:3b:07:8a:bc:2a:a1:0c:58:ab:92:04:
                    2c:be:69:26:95:d8:27:fd:84:44:6f:e3:a4:d6:5d:
                    be:1f:14:63:28:eb:bc:73:e2:3e:71:18:a0:60:49:
                    9d:e3:67:7e:4d:ab:ed:4a:5a:3e:f2:6e:e8:3e:1c:
                    1e:60:2a:cd:62:b5:56:bb:1e:c6:bf:bb:ec:0e:c1:
                    24:13:98:b0:0b:d1:89:ec:cb:f1:ff:57:1b:26:32:
                    c2:c4:02:e2:6d:5d:48:01:68:ae:05:3b:d2:f4:3d:
                    38:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A4:F6:BB:4E:52:07:61:3A:7B:BD:28:F0:71:C0:D8:D0:67:3C:EA
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A64921C6DB2E11EF9695A34BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:dc:83:f0:5e:52:69:4e:e7:33:95:d3:d5:6b:4d:3d:5e:05:
         ff:7e:d6:51:cf:df:04:15:c1:f2:f9:75:4a:dc:0e:dd:e2:87:
         f5:f8:e9:fd:40:0b:30:ac:62:5b:2a:7e:f4:32:c0:b5:b5:f0:
         ef:c8:38:bf:09:b5:55:21:bf:be:63:24:87:12:cc:55:cc:0e:
         79:8b:c7:f4:9d:3c:cf:9f:54:39:b7:7f:cc:61:8d:e3:54:0c:
         c0:30:e4:ce:a5:a3:8a:ca:7f:64:2d:e4:6f:83:72:25:93:4c:
         d7:36:b6:23:aa:00:f6:59:d0:12:6e:3d:93:6f:9c:74:59:f4:
         6f:52:4a:56:29:fe:e6:a3:55:6e:33:a9:4a:e7:f7:ff:55:59:
         9f:a6:43:69:08:3b:90:3f:a7:8b:fc:00:72:e5:dc:67:c6:fb:
         43:5c:6c:4d:41:b1:9d:7b:73:43:e9:68:20:d6:86:f2:91:59:
         64:19:14:3b:45:8f:04:ca:cd:7f:0f:01:26:c5:ec:b0:e6:13:
         ec:8d:27:90:13:80:99:dd:bb:9e:d0:c1:80:62:99:41:2b:93:
         b0:6e:da:9e:5f:bd:82:39:f2:5f:c0:22:d7:7e:f1:63:5f:75:
         4d:ca:c4:7c:4a:67:d4:2f:e2:a8:5c:2b:b9:44:fe:64:3f:6e:
         f4:3e:5a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:15 2026 by rpki-client