Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A64921C6DB2E11EF9695A34BC4F9AE02.roa
File:                     A64921C6DB2E11EF9695A34BC4F9AE02.roa (raw, json)
Hash identifier:          IMpNqi95I/owfE+Ywj1za6BbVYXYw7wVxx8H088SRns=
Subject key identifier:   D6:CF:92:ED:24:CF:66:AF:7D:FB:53:E6:FF:6D:67:AE:09:37:E0:09
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2131
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A64921C6DB2E11EF9695A34BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:21:54 +0000
ROA not before:           Thu 28 Aug 2025 14:51:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153539
IP address blocks:        161.248.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8497 (0x2131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:56 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b92-9a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:d1:a9:0e:54:9a:35:55:4f:88:ea:d2:02:
                    14:74:28:0f:8c:9a:42:30:48:54:3e:2f:d3:4d:7c:
                    c8:28:89:c7:2e:5b:9b:07:0e:16:d7:f9:69:82:73:
                    c3:e6:60:31:a9:36:0e:2c:2e:f2:4b:53:00:b3:dc:
                    19:bc:c9:30:40:01:7e:80:f6:83:bd:94:49:ff:1f:
                    2d:ac:18:9f:19:d5:4b:b8:ed:fb:8c:39:8f:12:a6:
                    74:a0:da:5f:e7:b9:d5:60:8d:da:c4:2e:49:b1:23:
                    e6:35:0b:5b:04:b2:14:c1:af:d2:ec:85:3f:e8:91:
                    5c:65:a5:a6:29:f8:42:be:dd:33:01:01:05:1d:d8:
                    8e:7c:7f:29:62:22:df:be:72:c8:fc:16:c7:20:5d:
                    dc:0c:2e:af:84:ca:94:af:a1:71:7e:3d:d2:5b:0a:
                    29:7b:18:0f:94:97:f1:97:03:4f:e4:6c:b9:57:be:
                    47:af:48:b0:88:8e:31:de:06:c9:80:5b:d8:49:cf:
                    ce:99:97:6a:4a:74:84:c1:a1:2e:0f:27:68:1a:9a:
                    16:f2:2e:95:58:3d:73:aa:9c:4b:08:b4:67:75:3f:
                    31:6d:07:ee:09:3d:0e:f2:e1:5a:48:f5:40:39:d2:
                    e8:91:a1:af:34:d7:64:a3:f4:5f:58:bb:b2:4e:82:
                    4f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CF:92:ED:24:CF:66:AF:7D:FB:53:E6:FF:6D:67:AE:09:37:E0:09
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/A64921C6DB2E11EF9695A34BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:c0:49:34:e0:94:83:97:77:2d:93:f1:8a:47:b5:38:61:0f:
         e5:fd:d6:68:e5:8e:52:a0:00:fe:5f:c3:bc:6f:cf:b0:e1:60:
         24:f4:28:59:0a:d0:84:65:a5:c7:e7:6e:64:df:88:6a:d9:c4:
         b8:fa:71:c7:27:ae:33:c6:49:79:07:15:42:09:15:de:f7:67:
         09:a4:af:43:3e:21:01:df:d9:5f:84:17:da:51:7f:34:d4:fa:
         0b:79:84:a3:c6:f0:29:38:46:12:27:85:ef:25:ed:9a:c2:cc:
         94:6e:3c:e6:e8:5e:2a:7e:62:03:a5:4f:a8:db:16:11:d1:b4:
         d3:35:e1:c6:06:b0:6c:f0:30:b8:69:08:b8:2c:19:69:74:13:
         3a:39:7d:52:a2:9d:df:67:92:7e:b8:b7:4f:fa:2f:a9:4a:2f:
         5c:20:0a:d7:31:fa:6d:06:3e:f1:ec:68:d5:2f:f4:47:cf:dc:
         06:cd:1a:5b:2b:8a:53:37:4c:2c:b2:7d:8a:46:8b:93:81:30:
         12:af:1b:94:76:96:b3:55:c5:c7:5c:d2:54:f3:e1:2f:32:a7:
         00:9b:0c:fc:42:91:82:61:d7:ff:2b:12:e6:77:40:bf:c7:f0:
         ae:a4:9a:0b:e1:e7:2f:10:06:51:bf:33:80:e9:5d:a9:28:32:
         14:66:42:54
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICITEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWI5Mi05YTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk4TRqQ5UmjVVT4jq0gIUdCgPjJpCMEhUPi/TTXzIKInHLlubBw4W1/lpgnPD
5mAxqTYOLC7yS1MAs9wZvMkwQAF+gPaDvZRJ/x8trBifGdVLuO37jDmPEqZ0oNpf
57nVYI3axC5JsSPmNQtbBLIUwa/S7IU/6JFcZaWmKfhCvt0zAQEFHdiOfH8pYiLf
vnLI/BbHIF3cDC6vhMqUr6Fxfj3SWwopexgPlJfxlwNP5Gy5V75Hr0iwiI4x3gbJ
gFvYSc/OmZdqSnSEwaEuDydoGpoW8i6VWD1zqpxLCLRndT8xbQfuCT0O8uFaSPVA
OdLokaGvNNdko/RfWLuyToJP3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNbPku0k
z2avfftT5v9tZ64JN+AJMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQTY0OTIxQzZE
QjJFMTFFRjk2OTVBMzRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofi0MA0GCSqGSIb3DQEBCwUAA4IBAQA1wEk04JSDl3ctk/GKR7U4
YQ/l/dZo5Y5SoAD+X8O8b8+w4WAk9ChZCtCEZaXH525k34hq2cS4+nHHJ64zxkl5
BxVCCRXe92cJpK9DPiEB39lfhBfaUX801PoLeYSjxvApOEYSJ4XvJe2awsyUbjzm
6F4qfmIDpU+o2xYR0bTTNeHGBrBs8DC4aQi4LBlpdBM6OX1Sop3fZ5J+uLdP+i+p
Si9cIArXMfptBj7x7GjVL/RHz9wGzRpbK4pTN0wssn2KRouTgTASrxuUdpazVcXH
XNJU8+EvMqcAmwz8QpGCYdf/KxLmd0C/x/CupJoL4ecvEAZRvzOA6V2pKDIUZkJU
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:58:15 2026 by rpki-client