Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C45F1E56717D11EF8C8DD726C4F9AE02.roa
File:                     C45F1E56717D11EF8C8DD726C4F9AE02.roa (raw, json)
Hash identifier:          b0aAjGQ37JYG7jGj7J5j4vKrJQDQZoE3c1fXXycVXFA=
Subject key identifier:   49:A9:48:60:7A:77:DC:36:6A:81:12:BB:74:F7:80:84:75:B1:24:38
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       214D
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C45F1E56717D11EF8C8DD726C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:22 +0000
ROA not before:           Thu 28 Aug 2025 14:51:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152981
IP address blocks:        160.30.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8525 (0x214d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61bae-5484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:c2:05:e5:0b:0a:90:12:4b:a3:52:4d:e3:
                    d7:6c:40:bc:06:8c:14:cc:0b:2c:46:19:6a:40:e4:
                    f0:5b:12:a6:c7:c8:6d:0f:fe:84:13:9a:f0:65:db:
                    c0:75:9e:8b:63:39:78:6b:7d:27:7a:a5:11:4d:29:
                    4c:ae:b0:32:cc:26:42:53:df:0e:53:5c:ce:b4:d2:
                    6b:f6:bc:0d:80:43:00:04:8d:dd:f1:d3:6f:5f:04:
                    19:6d:fd:53:51:9a:01:49:0d:63:bd:1a:8c:11:ae:
                    61:28:a5:8a:38:bb:52:35:16:1f:30:d8:11:04:34:
                    b5:3c:19:e8:b9:b5:92:40:92:c1:dd:ca:da:74:d6:
                    20:2d:6c:99:8f:a0:25:2b:da:1a:9a:2a:90:69:47:
                    95:1c:3f:1e:ae:c9:74:78:6e:67:db:9f:e3:ef:5f:
                    18:ed:1b:e9:da:92:7a:7a:78:0c:9b:b9:61:62:2b:
                    09:17:f1:42:cd:32:7d:7d:17:09:27:f4:7c:6a:52:
                    b4:01:eb:fd:f1:fc:be:be:8a:5d:67:04:30:c9:9f:
                    fb:a6:ab:80:c5:3e:45:77:05:ea:ab:16:56:1e:c3:
                    26:c5:96:7f:9d:25:e5:3f:01:42:4e:b5:e0:58:6a:
                    b2:bd:b9:1e:69:23:6f:cf:33:f2:92:47:3f:d9:00:
                    6a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A9:48:60:7A:77:DC:36:6A:81:12:BB:74:F7:80:84:75:B1:24:38
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C45F1E56717D11EF8C8DD726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:43:57:83:37:3b:f0:d6:cc:b6:3a:e4:3c:10:35:50:79:
         6e:62:57:24:fe:4e:c9:c1:f3:3e:a6:b3:60:b6:32:20:7c:d7:
         6e:02:9f:eb:9f:9a:0e:c6:9a:aa:ef:0b:af:c8:93:d0:00:d8:
         6a:48:56:05:ca:c0:e3:00:3d:2b:d8:6d:c6:82:ad:dd:44:55:
         6f:85:18:90:4e:6f:fa:dc:3a:de:c4:85:bf:3c:96:15:9b:1d:
         fa:73:ea:d5:6d:96:97:69:cc:9d:ce:ea:07:fa:5b:9a:be:f5:
         16:b9:fc:68:62:bf:91:0b:00:29:9f:d8:c8:83:4b:f5:a6:32:
         12:aa:f8:cd:b7:9b:a4:1e:55:44:a9:4d:5c:bc:84:c0:6b:89:
         21:38:0c:a1:31:0d:fe:73:59:0e:98:d2:07:53:ac:02:b4:31:
         b1:05:d1:3b:f0:92:32:37:3a:68:bc:c0:da:57:ab:19:cc:79:
         80:d8:9f:0c:05:28:34:99:7c:ca:0c:f5:89:02:2d:df:34:ea:
         31:26:04:38:79:ab:76:f2:5b:99:ce:34:c9:96:44:7c:0c:3e:
         54:50:b6:16:c5:13:cd:ef:d7:cd:46:21:27:93:76:83:db:05:
         25:e8:21:07:8c:e7:f5:f9:1d:87:48:2f:94:6e:e8:28:d2:48:
         2e:72:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:53:23 2026 by rpki-client