Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF0FC83290AC11F1B5E6B4713511F970.roa
File:                     CF0FC83290AC11F1B5E6B4713511F970.roa (raw, json)
Hash identifier:          sIvm+F5vrVu+VYtmI71uFJeyKBjZuR3hSIVc4ReRMRc=
Subject key identifier:   87:1F:88:82:4F:F5:87:1E:70:06:14:A5:01:16:96:82:5E:33:3D:CF
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       23F0
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF0FC83290AC11F1B5E6B4713511F970.roa
Signing time:             Fri 02 Oct 2026 15:21:05 +0000
ROA not before:           Fri 02 Oct 2026 15:21:05 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154781
IP address blocks:        160.236.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9200 (0x23f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:21:05 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcbe0-5832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:56:49:ec:20:d9:e1:d7:07:c4:02:05:54:
                    ee:ba:c9:ad:b4:0f:ee:ea:cc:d6:6d:b8:2a:31:bf:
                    eb:a0:d3:52:c7:16:9b:c1:13:88:cf:ea:3b:f9:74:
                    f9:ea:1a:74:a1:8d:bf:45:9f:79:e2:1d:4c:69:6f:
                    8c:e6:fb:31:61:5e:86:92:ae:fd:4f:97:cb:59:ef:
                    d3:f6:a9:52:5a:f9:2e:30:70:35:18:f0:2f:8f:7a:
                    7d:f0:db:f4:66:ae:64:6e:7a:d0:32:66:0e:27:a5:
                    26:57:e5:91:00:33:eb:4b:80:47:75:6e:8c:00:e9:
                    a8:90:74:4f:28:2e:52:06:bc:17:72:4e:5e:e6:e0:
                    d0:15:e4:a0:de:d3:8a:e2:64:5c:d0:3a:04:31:6c:
                    8d:a6:70:28:a4:d4:d8:ac:aa:50:36:d7:f5:c5:1e:
                    6d:63:a2:cf:7d:1a:c9:bb:14:a2:10:9a:2d:ac:41:
                    1c:1e:b8:98:07:82:d4:59:44:d1:f6:fa:f8:cc:d9:
                    1d:56:28:08:a2:0f:a8:48:ea:01:6a:64:ca:32:fa:
                    de:9a:58:ff:70:d9:45:e2:cc:e7:84:76:2e:c6:9f:
                    03:0c:2e:b3:eb:f9:64:4c:c0:d4:73:56:91:8d:58:
                    c6:aa:4b:dd:64:79:f9:9a:ed:07:55:ee:ac:c4:7b:
                    57:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:88:82:4F:F5:87:1E:70:06:14:A5:01:16:96:82:5E:33:3D:CF
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF0FC83290AC11F1B5E6B4713511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:57:0f:c7:93:13:5e:70:9a:0a:ce:54:2c:40:3e:74:c4:9a:
         eb:fb:b6:f8:8b:1d:ec:22:5c:a7:18:18:5b:a8:53:c4:15:08:
         c5:fe:55:d9:c0:a9:94:e8:19:5f:85:f7:58:a7:08:b5:3d:df:
         da:5d:9c:1b:9f:de:6b:69:57:a6:26:b8:a8:2e:5c:d5:00:34:
         00:34:b4:0b:bd:36:3c:cd:5f:ed:3a:f2:fc:f8:2a:f6:9e:b1:
         4d:e6:6d:d2:ca:a5:33:92:2b:5d:69:2a:ab:95:b6:ee:9e:7f:
         ab:40:ca:5f:af:47:ca:75:48:1f:01:be:ab:06:0c:df:96:30:
         c7:40:32:51:e9:2f:ac:be:0c:f2:0d:72:75:2e:6e:69:a6:85:
         29:7e:ce:31:75:44:cb:5c:49:e7:43:48:c6:d1:db:cf:37:13:
         4e:be:2d:45:71:12:b2:aa:e4:48:2a:ad:ee:f2:68:80:82:87:
         dd:fe:8d:0f:36:81:8d:eb:61:2b:d9:dd:b9:03:65:ef:b1:43:
         68:99:b6:30:a0:63:83:5c:1c:6d:11:d7:2a:7e:d5:ad:a8:d3:
         36:90:ba:48:2d:31:1f:25:83:9e:d1:c1:37:15:30:f5:9b:c1:
         5f:42:7b:1f:ea:c0:f9:91:6d:cd:af:aa:e9:c0:0d:d1:59:ff:
         54:b2:16:b5
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICI/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjYxMDAyMTUyMTA1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2JlMC01ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFlWSewg2eHXB8QCBVTuusmttA/u6szWbbgqMb/roNNSxxabwROIz+o7+XT5
6hp0oY2/RZ954h1MaW+M5vsxYV6Gkq79T5fLWe/T9qlSWvkuMHA1GPAvj3p98Nv0
Zq5kbnrQMmYOJ6UmV+WRADPrS4BHdW6MAOmokHRPKC5SBrwXck5e5uDQFeSg3tOK
4mRc0DoEMWyNpnAopNTYrKpQNtf1xR5tY6LPfRrJuxSiEJotrEEcHriYB4LUWUTR
9vr4zNkdVigIog+oSOoBamTKMvremlj/cNlF4sznhHYuxp8DDC6z6/lkTMDUc1aR
jVjGqkvdZHn5mu0HVe6sxHtXRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIcfiIJP
9YcecAYUpQEWloJeMz3PMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0YwRkM4MzI5
MEFDMTFGMUI1RTZCNDcxMzUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoOyMMA0GCSqGSIb3DQEBCwUAA4IBAQApVw/HkxNecJoKzlQsQD50
xJrr+7b4ix3sIlynGBhbqFPEFQjF/lXZwKmU6BlfhfdYpwi1Pd/aXZwbn95raVem
JrioLlzVADQANLQLvTY8zV/tOvL8+Cr2nrFN5m3SyqUzkitdaSqrlbbunn+rQMpf
r0fKdUgfAb6rBgzfljDHQDJR6S+svgzyDXJ1Lm5ppoUpfs4xdUTLXEnnQ0jG0dvP
NxNOvi1FcRKyquRIKq3u8miAgofd/o0PNoGN62Er2d25A2XvsUNombYwoGODXBxt
EdcqftWtqNM2kLpILTEfJYOe0cE3FTD1m8FfQnsf6sD5kW3Nr6rpwA3RWf9Usha1
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:37 2026 by rpki-client