Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa
File:                     CE76D260A87511EF9905FE0AC4F9AE02.roa (raw, json)
Hash identifier:          JvsONcra4AVX078WlRb0p0xl+Kp/dcrBPRSYwPStyYo=
Subject key identifier:   D5:4D:7C:D2:D4:F6:F7:13:4F:E1:22:69:EA:94:0D:26:9D:0B:60:3F
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2393
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:49 +0000
ROA not before:           Fri 02 Oct 2026 15:17:49 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150820
IP address blocks:        157.15.38.0/23 maxlen: 23
                          157.20.62.0/23 maxlen: 23
                          157.66.252.0/23 maxlen: 23
                          160.22.172.0/23 maxlen: 23
                          160.22.174.0/23 maxlen: 23
                          160.30.190.0/23 maxlen: 23
                          160.187.120.0/23 maxlen: 23
                          160.191.176.0/23 maxlen: 23
                          160.191.240.0/23 maxlen: 23
                          160.250.46.0/23 maxlen: 23
                          161.248.208.0/23 maxlen: 23
                          165.99.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9107 (0x2393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:49 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb1d-c8a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ed:2f:7d:83:b2:ca:10:3b:42:2c:01:5b:16:
                    a8:15:fd:71:78:d9:63:e0:06:a5:ff:62:c5:c7:4a:
                    54:03:10:03:75:fd:cb:69:e6:96:72:19:67:60:19:
                    a7:31:c9:df:14:32:83:0e:56:c6:5e:a9:7d:a8:52:
                    f6:44:98:e7:bb:27:fe:36:b0:59:27:2c:cc:dc:a1:
                    fb:41:e8:3d:23:62:b3:60:b6:54:b2:b2:3e:15:b8:
                    41:10:c7:a9:a2:13:57:3f:ed:5f:8a:91:07:65:a3:
                    21:f5:41:f2:c9:05:6a:70:41:86:95:88:73:65:fa:
                    21:9b:8a:29:cf:ba:77:b4:66:c5:06:22:1b:0f:8f:
                    49:e0:ff:d7:b8:44:79:36:3c:08:d4:c3:26:0a:fe:
                    04:6e:2d:c8:cf:ff:c1:96:4b:5b:3f:87:5b:09:e1:
                    cb:0d:89:bd:a3:23:8a:be:3a:61:94:80:40:e3:fb:
                    ee:6e:b9:ed:c3:98:69:41:af:94:58:f6:cf:5b:ac:
                    91:b9:19:76:ca:d6:c6:37:ce:ee:f1:3b:82:08:1b:
                    bd:b2:c8:7d:b8:b8:fc:e4:8f:74:6f:c1:d1:7d:68:
                    51:59:d0:2e:05:30:e9:6b:5c:a7:4d:99:17:d5:b2:
                    0b:40:ca:81:5d:05:eb:95:76:e7:3e:70:e6:75:72:
                    3b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4D:7C:D2:D4:F6:F7:13:4F:E1:22:69:EA:94:0D:26:9D:0B:60:3F
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.15.38.0/23
                  157.20.62.0/23
                  157.66.252.0/23
                  160.22.172.0/22
                  160.30.190.0/23
                  160.187.120.0/23
                  160.191.176.0/23
                  160.191.240.0/23
                  160.250.46.0/23
                  161.248.208.0/23
                  165.99.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:0f:e0:fc:e2:6e:64:88:76:f4:ca:01:00:7c:d0:f2:b8:96:
         19:71:f8:89:7d:5a:27:17:d5:ab:5a:6c:f5:a2:e2:1a:86:da:
         d1:56:95:7e:d3:6b:cd:73:5c:8b:fc:c5:06:0e:32:d1:4c:e0:
         0c:8e:30:d1:c4:46:31:c5:b2:ca:f7:b7:de:00:ee:7f:7c:b2:
         e4:51:08:30:e7:41:af:dc:b4:11:23:10:a9:a6:ad:bb:79:92:
         46:55:f9:c7:52:3f:9b:58:73:9e:01:cf:b8:85:c6:92:f9:19:
         90:6a:75:22:6f:26:65:5b:a1:7b:d6:0a:91:c5:08:71:5b:78:
         b7:e1:37:1f:f1:4a:67:e3:27:7f:37:24:e9:c4:49:24:1f:91:
         0f:e2:c6:0e:b5:48:1a:a7:eb:47:13:12:8d:f6:6e:08:d4:5c:
         7f:f7:db:3a:2e:e8:37:e1:8b:c4:ad:41:da:09:38:f3:88:1a:
         0f:b9:d7:b5:26:67:c9:5a:90:e7:ed:dc:91:2a:af:44:6b:88:
         67:a3:f2:30:6a:f5:13:04:0c:a5:81:09:2c:8b:92:12:d1:9a:
         63:91:ad:4f:4c:cd:87:a6:b6:98:a6:cb:87:2d:02:d0:c5:eb:
         df:97:b7:09:2b:9f:c7:8a:80:86:4c:10:7b:1d:da:cf:b6:59:
         73:16:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:49:18 2026 by rpki-client