Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F511EA3AF77111F0A2BF2041476F56BC.roa
File:                     F511EA3AF77111F0A2BF2041476F56BC.roa (raw, json)
Hash identifier:          C5+XnHuDty88q481YQ5HeKsA0tzUYgAJNYIf7S5kRUw=
Subject key identifier:   F4:7F:87:DB:89:35:69:AC:51:D2:95:6B:89:33:BD:5F:86:D8:B5:FE
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       2117
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F511EA3AF77111F0A2BF2041476F56BC.roa
Signing time:             Mon 02 Mar 2026 23:21:29 +0000
ROA not before:           Thu 22 Jan 2026 09:08:46 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153501
IP address blocks:        161.248.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8471 (0x2117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Jan 22 09:08:46 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b78-d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:d2:71:64:9b:94:ef:d2:a0:69:b6:64:44:
                    33:5e:a3:c1:c4:d1:0e:cb:1d:42:b0:22:96:07:99:
                    9d:15:fa:e2:9c:3b:c7:bb:a9:0a:99:e7:e3:70:c5:
                    fc:ec:b4:d6:d9:7f:c7:38:a2:d6:6a:94:57:91:0e:
                    3d:49:7a:c7:91:b3:b1:7a:95:82:dd:7b:b3:fb:3b:
                    92:b8:33:9d:f3:c7:60:50:6d:bc:8c:b0:6d:1b:f9:
                    13:5d:2e:60:93:de:89:6f:12:91:71:f8:3e:5f:1d:
                    48:97:f7:28:e9:5c:eb:a2:ba:74:65:9d:af:8f:81:
                    25:e8:34:30:34:1b:cc:36:cc:89:6b:17:38:8e:14:
                    2a:43:f4:6d:06:15:6d:45:22:aa:b5:55:27:b2:6f:
                    47:b7:7b:cf:fe:ec:06:45:47:79:50:69:c8:dd:cb:
                    b8:9f:23:43:ff:b3:54:c8:b5:28:17:f8:cc:5c:d3:
                    e2:e2:73:a9:1a:e4:2f:58:1e:a3:4d:e3:e1:6a:a4:
                    d5:02:2f:fb:6d:2c:3d:21:e7:57:b5:95:64:45:6e:
                    69:50:81:65:ac:91:b5:b6:8b:ea:aa:cd:e5:b9:9f:
                    a8:c9:3a:2c:7d:71:a1:31:8f:8d:2f:46:c5:28:0e:
                    8c:6e:4d:20:ac:fe:c1:86:04:ee:b0:e8:e9:ab:a3:
                    39:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7F:87:DB:89:35:69:AC:51:D2:95:6B:89:33:BD:5F:86:D8:B5:FE
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F511EA3AF77111F0A2BF2041476F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:d9:80:d8:52:40:ae:84:5a:8c:58:44:b0:49:f3:eb:e5:1b:
         59:d0:d3:28:ec:5e:bc:cd:5b:eb:c1:07:e9:b5:e2:8b:81:de:
         20:74:ae:ae:b0:5b:23:4c:f5:6e:98:4e:64:ca:05:e6:9f:50:
         d2:09:14:97:16:7b:be:25:d1:38:e4:56:41:92:3d:b8:70:e2:
         31:aa:6e:48:58:10:25:18:32:af:91:c7:cd:a0:36:15:c4:3c:
         aa:9b:9d:47:e7:61:e1:be:05:5a:1f:11:7a:ca:ac:17:2f:64:
         89:64:d9:eb:77:ae:4f:93:57:24:00:23:c2:96:73:bf:d4:4c:
         f9:be:ad:d2:c1:73:a4:9b:86:d6:03:88:df:e6:53:c6:b3:7e:
         8f:06:1c:a6:45:86:34:a2:27:0f:55:c9:eb:c7:2e:51:09:58:
         5f:45:34:6e:44:47:92:4e:06:de:07:0a:98:87:6e:2c:78:e3:
         1b:dc:8a:fe:7f:ce:3b:b1:29:c7:bc:26:e8:62:db:8a:b9:02:
         77:c1:a7:06:99:32:4c:fb:08:42:e9:96:9e:91:09:4d:58:7f:
         ff:c8:b1:a0:17:cf:a1:a3:91:83:98:47:af:c5:f6:39:68:e4:
         e9:b1:91:71:c4:c8:89:f5:8f:2f:3c:13:02:45:c8:d7:d7:38:
         f7:1e:1b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:55 2026 by rpki-client