Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
File:                     B8DEDE725E0911EFA6193958C4F9AE02.roa (raw, json)
Hash identifier:          3V1zZnzIanfOlMP/1Y1GOAWn8CX/Iku7VJrhTEshukA=
Subject key identifier:   92:33:5E:01:C3:2D:8F:0A:38:61:21:A4:D5:DE:CE:95:DF:20:5B:04
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2380
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:08 +0000
ROA not before:           Fri 02 Oct 2026 15:17:08 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     135967
IP address blocks:        160.30.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9088 (0x2380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:08 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcaf4-c2a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e5:ca:4d:f6:fa:9f:02:96:f4:49:ec:22:2a:
                    da:b9:a3:bd:c5:89:7c:e7:84:53:2e:40:e3:f6:c7:
                    54:76:23:a7:b8:84:e1:27:2f:1c:dc:6a:6a:0a:e7:
                    46:2a:22:3c:f5:b0:98:8b:5b:70:8d:a4:e2:17:5a:
                    d2:71:65:a3:f1:68:56:06:32:43:7e:6f:8c:8f:f4:
                    f7:4f:c2:04:1c:ce:24:0b:44:14:17:14:8a:26:0d:
                    26:fe:c1:e5:42:d0:1c:09:35:5c:ad:cc:31:bc:85:
                    cf:71:ed:03:f9:c7:b0:23:6b:05:3c:6a:c5:79:e3:
                    63:73:02:1e:77:ee:c5:63:0c:ac:d5:ec:83:cb:70:
                    a8:9b:74:0d:58:6b:e2:c6:3a:db:e4:6a:a5:46:18:
                    ab:0a:19:33:23:38:c1:83:f1:a4:1a:28:28:35:ee:
                    27:63:55:ab:e5:0b:54:65:97:09:b6:f9:06:64:2c:
                    3c:e2:54:12:de:fd:91:15:50:f4:62:46:1c:2a:93:
                    81:32:0e:3f:e1:11:27:cc:e8:60:52:2d:d0:9b:6f:
                    6e:6b:cd:ae:1e:e4:68:9b:53:16:72:64:62:39:41:
                    9b:f2:bf:c7:b9:6f:de:2d:6b:eb:e5:4d:f7:ec:de:
                    1b:c8:2d:dc:e2:b4:36:30:73:a9:e0:cb:75:15:19:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:33:5E:01:C3:2D:8F:0A:38:61:21:A4:D5:DE:CE:95:DF:20:5B:04
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:5e:90:c0:71:1a:b1:44:67:c7:9c:c3:5e:19:29:9f:3e:cf:
         8d:8e:ff:61:3f:fb:06:b5:15:0c:68:da:34:c7:a0:bb:36:a4:
         5d:01:80:c9:d0:bf:68:39:aa:1b:f6:5c:17:1b:69:2b:83:c2:
         26:42:a1:97:ef:a7:17:24:6e:95:ab:08:56:5b:72:70:3a:18:
         67:17:98:db:97:21:24:76:8a:bd:7c:bd:55:3f:5c:8d:87:44:
         f1:4d:8f:c3:12:dc:15:7d:77:6b:a9:02:cc:43:f1:42:d6:27:
         a9:c1:4a:84:e1:03:90:f3:5a:59:81:97:85:f3:4e:4f:0a:3d:
         1e:1f:9f:f7:13:40:79:a6:b5:e6:b4:30:29:4e:d0:1a:d6:a9:
         7d:1a:ca:8f:79:84:f1:b7:e2:40:8e:ec:13:c2:aa:f8:3c:7d:
         ff:07:ff:f0:aa:ba:cf:8d:17:ca:b9:f4:69:ac:39:57:1f:e3:
         fb:81:ce:b2:9f:f8:54:4f:f4:ee:12:c3:00:2a:52:ad:7b:a8:
         78:22:04:ce:e3:0a:87:4e:94:58:ac:4e:24:5a:77:77:77:8b:
         81:dd:d0:e5:85:01:45:09:a5:87:3e:fa:77:d5:77:f9:77:91:
         9d:99:02:19:e4:9e:0f:fc:f3:ed:82:f0:f4:5c:4c:52:8c:4a:
         6e:6a:fb:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:57 2026 by rpki-client