Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa
File:                     BFD94B4C6D5611F0925A6B7BC4F9AE02.roa (raw, json)
Hash identifier:          JmuRfccfZ+AmHM2S+kC/ntX78GH+WVKgBdh34Dx2b+c=
Subject key identifier:   C9:26:44:32:17:BE:4F:19:32:30:E9:4D:41:F2:01:0C:64:DE:7E:0A
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2383
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:14 +0000
ROA not before:           Fri 02 Oct 2026 15:17:14 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     140810
IP address blocks:        160.250.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9091 (0x2383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:14 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcafa-0b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:f5:15:0f:62:16:4a:51:c1:d7:62:de:c3:
                    c3:0b:33:f6:ff:f4:53:64:58:a9:42:ad:8d:d5:2c:
                    f1:b1:21:76:c6:ef:85:04:d2:92:fe:5f:ff:11:3d:
                    4f:0a:c6:0b:fa:38:4b:90:e8:9f:a8:7d:7a:2f:e4:
                    7c:2c:d0:5c:82:f3:74:1d:28:91:71:a9:0c:76:21:
                    46:66:bb:15:d2:93:76:2e:69:d7:81:43:a7:34:8f:
                    9a:05:8f:72:01:b9:91:bd:96:4d:2a:96:78:00:25:
                    93:3d:81:a3:0f:77:8a:32:36:34:7a:8b:68:f8:5f:
                    79:eb:ee:a7:89:99:49:b5:d0:0e:b9:9f:05:c9:29:
                    4a:cb:84:1a:a9:aa:11:9d:0d:68:3a:87:2d:75:a8:
                    20:c3:95:9e:c1:ad:1e:a5:a4:e7:be:20:4b:d6:a7:
                    d0:c5:99:b6:43:00:a9:4f:76:cd:a3:65:88:0e:42:
                    9e:fa:82:90:e4:fa:27:d5:1d:45:22:28:22:48:71:
                    95:65:03:ef:d1:e7:10:82:27:4f:a5:38:6e:43:87:
                    a7:5f:72:e3:df:85:44:e4:2e:f3:bf:05:f6:d7:fd:
                    9b:d3:8b:79:b7:2e:01:64:8c:8c:f4:9a:13:b1:f5:
                    37:79:76:9d:04:a6:a4:c4:68:b2:dc:1e:38:73:fc:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:26:44:32:17:BE:4F:19:32:30:E9:4D:41:F2:01:0C:64:DE:7E:0A
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:3d:83:2c:1c:61:b3:13:21:28:5a:7a:6e:bd:01:36:7a:00:
         c3:94:e5:7a:94:5b:ab:fe:89:65:a8:97:67:02:a3:1a:e9:78:
         bf:e3:3e:94:45:ff:5a:b1:8a:4e:56:72:fa:f9:81:d3:ca:45:
         46:1d:63:1b:d4:30:20:82:b6:25:81:9b:dd:2a:48:02:1c:ca:
         de:3f:d3:e3:af:74:26:39:13:71:1d:1b:02:4a:12:b4:d0:9c:
         0e:4f:a1:a3:a8:79:f8:e6:f3:cf:5c:6e:81:76:db:8a:d2:5e:
         64:2a:2c:eb:4c:22:bb:78:dc:fc:c4:bd:c8:52:94:d8:fb:53:
         02:2f:5e:45:af:8e:da:3f:f3:93:53:b9:cb:70:7b:9c:73:13:
         f3:72:8a:f4:9a:e2:0e:8b:36:5f:0f:ba:69:61:1a:da:37:6d:
         96:24:e1:d2:91:22:a6:24:d4:c2:f6:8a:f3:d9:96:0c:f0:70:
         cc:8d:4d:25:96:ab:82:3a:c4:53:d8:6d:4c:e4:b2:45:49:20:
         18:a2:55:5a:a9:33:f7:fa:af:95:f6:02:00:ef:a8:34:9a:04:
         84:0c:ae:36:2c:34:3a:f7:45:15:25:74:7f:ce:6f:56:26:60:
         60:65:59:c8:98:82:be:13:28:94:de:46:34:b9:ed:82:2e:bb:
         2b:58:a6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:36 2026 by rpki-client