Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa
File:                     CF94F4D82B1F11F0A19F8C33C4F9AE02.roa (raw, json)
Hash identifier:          lC0xnwjOW4hbLdkO7yjZsUX/jb06HR71v0IlrUH6rO0=
Subject key identifier:   0E:9C:77:59:A0:FA:66:2F:5F:40:A0:75:15:D0:5B:3A:15:A5:90:10
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       238C
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:17:33 +0000
ROA not before:           Fri 02 Oct 2026 15:17:33 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149107
IP address blocks:        157.66.24.0/23 maxlen: 23
                          157.66.26.0/23 maxlen: 23
                          160.30.18.0/23 maxlen: 23
                          160.191.164.0/23 maxlen: 23
                          160.250.182.0/23 maxlen: 23
                          160.250.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9100 (0x238c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Oct  2 15:17:33 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcb0d-9b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6f:cf:b9:cd:26:b4:4f:4b:7c:0c:30:fb:c5:
                    7c:81:bc:3a:d6:90:95:a8:b5:84:56:55:f9:d9:54:
                    b7:4a:93:c9:54:97:9e:4e:2d:a6:89:80:dd:47:4f:
                    be:56:27:11:0e:1c:8e:c2:b5:4f:e8:19:be:95:38:
                    fb:f8:47:53:89:bb:71:d4:29:ff:e6:90:58:1a:c3:
                    c7:3f:50:8b:16:92:56:c6:7c:71:6c:94:26:0f:24:
                    2c:67:b3:b1:70:40:8e:37:b7:b5:35:07:96:5f:bc:
                    2e:1d:33:0f:cd:fe:65:46:ff:d2:b2:15:97:da:01:
                    fd:5a:00:98:44:90:05:e5:c9:7a:a1:7e:e2:7e:fc:
                    41:ca:70:c7:90:43:15:a2:ad:f6:3b:24:9c:64:c3:
                    7d:8b:f6:7f:48:6a:99:da:63:36:23:52:c1:31:3f:
                    7e:41:e4:28:ee:e6:60:d4:d1:41:e5:d9:ee:05:04:
                    28:d1:37:3b:09:2b:b8:3e:09:db:06:4a:26:09:22:
                    e9:64:40:a5:f1:46:7b:1c:d7:92:6c:33:ae:ad:ce:
                    04:88:2c:04:4c:34:d6:41:c4:d8:ec:6f:b3:53:04:
                    74:e6:cf:9c:e8:a2:71:19:55:cf:22:35:de:36:36:
                    d3:23:55:ad:a8:82:b6:07:81:f8:91:2e:91:15:7b:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:77:59:A0:FA:66:2F:5F:40:A0:75:15:D0:5B:3A:15:A5:90:10
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.24.0/22
                  160.30.18.0/23
                  160.191.164.0/23
                  160.250.182.0-160.250.185.255

    Signature Algorithm: sha256WithRSAEncryption
         0e:55:d6:29:a6:69:c2:4d:38:cb:81:c2:5c:78:55:3f:a2:03:
         b7:f5:fd:57:6a:90:1c:5c:e0:83:07:9d:96:87:dd:7f:b4:20:
         f0:e4:d9:0c:5f:11:47:7e:2e:e9:b6:63:6d:b3:9c:d1:56:e3:
         8d:d6:f1:2c:d9:c2:45:27:16:6b:36:05:6c:83:55:0b:8a:6a:
         78:49:46:e6:3d:0b:63:c9:dc:5f:75:46:d9:fd:5a:11:bb:2d:
         7a:84:c5:15:32:0e:f1:4e:52:05:a4:2c:05:82:be:f2:c9:c0:
         00:26:55:ab:4c:c5:e5:d6:26:a4:b0:d3:c5:18:8c:9a:41:4f:
         f5:2c:30:5f:82:fc:67:47:da:65:7e:a5:ea:44:ff:b8:0c:80:
         77:36:18:ca:15:fb:72:6e:eb:ae:b2:1b:91:53:b4:3f:96:7c:
         51:7b:a1:2f:3a:62:51:f2:16:3e:08:be:70:28:53:b0:78:07:
         fa:81:03:60:77:8c:50:53:33:37:e1:bf:25:64:9b:05:87:2d:
         3d:47:b0:73:f6:5c:2e:38:1b:5f:d4:7d:82:84:13:53:b2:3b:
         e8:62:cf:6b:f2:67:6b:c1:e1:ca:91:c8:f9:68:2c:b0:05:f0:
         51:1c:5e:fd:1e:02:27:9a:9f:6e:19:54:b6:42:22:a3:94:c4:
         47:94:7c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:53:05 2026 by rpki-client