Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/F24EEED208C011F19DFF611F213D8C67.roa
File:                     F24EEED208C011F19DFF611F213D8C67.roa (raw, json)
Hash identifier:          t0GzTImHkT8vCoN1czTbfQHL3uux2ST1I9om9FaS/RE=
Subject key identifier:   8A:92:C7:9B:EE:E4:52:33:F3:40:06:1E:EC:F2:C9:C2:57:3D:51:10
Certificate issuer:       /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
Certificate serial:       3900
Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/F24EEED208C011F19DFF611F213D8C67.roa
Signing time:             Fri 02 Oct 2026 15:38:30 +0000
ROA not before:           Fri 02 Oct 2026 15:38:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154491
IP address blocks:        151.158.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14592 (0x3900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD
        Validity
            Not Before: Oct  2 15:38:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcff5-5042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:60:d0:65:14:6b:d8:50:64:ad:7f:2f:3d:61:
                    10:09:d0:cf:fe:61:67:6a:7e:1b:43:52:eb:bd:d7:
                    0d:8c:10:cf:a9:3f:c4:2b:ea:ff:e9:49:11:f6:a1:
                    ca:90:e4:07:22:74:b1:30:72:88:5e:31:71:e9:87:
                    1a:99:e7:cc:eb:1a:1e:4c:c3:d8:7e:19:22:25:d0:
                    bb:29:eb:d1:74:bd:51:6b:79:94:8b:83:2a:af:d5:
                    98:b6:57:4e:6f:32:3e:3f:7f:3f:73:f0:35:e2:1b:
                    83:ca:a9:9b:36:a7:a5:56:68:57:4a:a1:24:34:d2:
                    ae:94:7b:fd:e9:93:ba:d1:f6:c6:6c:26:15:fb:2e:
                    01:d1:97:9d:80:8e:58:f6:82:0c:ec:07:28:a6:01:
                    9c:b8:f2:ed:2f:46:a7:36:b2:f6:77:4f:cb:87:65:
                    65:58:cb:a5:c9:ea:ad:91:85:61:86:25:11:c6:6a:
                    f1:fc:5c:42:6e:46:f1:27:13:98:da:60:73:40:17:
                    4f:56:90:18:9a:1e:18:9f:7c:58:32:e2:69:a3:bc:
                    d4:4e:a8:87:a7:6b:df:cd:01:c0:26:4b:4c:8c:f6:
                    6b:ba:a9:f6:98:99:26:c9:4d:12:60:73:11:2c:6e:
                    2d:1b:cc:1c:57:b2:d4:9f:7a:aa:cb:76:bb:d3:44:
                    48:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:92:C7:9B:EE:E4:52:33:F3:40:06:1E:EC:F2:C9:C2:57:3D:51:10
            X509v3 Authority Key Identifier:
                keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/F24EEED208C011F19DFF611F213D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:46:63:e5:bd:d0:cd:8a:9b:f6:ce:00:52:47:4a:4f:4b:9e:
         24:9f:a8:da:c5:67:ab:68:8f:26:f7:71:35:23:9a:6c:52:20:
         4a:8d:83:57:49:d7:d2:ee:8b:bc:52:52:ec:78:80:bf:1f:69:
         c7:91:f9:1e:56:2e:0d:30:8d:fa:7d:5e:c9:e0:5e:d3:0c:e4:
         7e:53:5f:50:4e:bf:ee:2d:05:9d:fe:29:c2:2d:05:92:f7:be:
         90:8f:94:85:8a:e8:91:cc:db:28:f7:17:3c:7a:37:27:fd:d3:
         3f:ca:14:06:d1:97:9e:18:5e:6e:f6:ec:bb:10:1e:e4:d0:51:
         e8:12:30:33:b0:ef:4a:10:86:18:2e:fb:29:bc:f3:3b:de:e7:
         13:65:72:44:28:bf:78:e2:dd:50:9a:ca:ca:e4:d5:44:4f:85:
         6c:76:00:aa:d9:37:f9:41:b6:24:f3:db:d0:f1:5c:50:57:4a:
         64:b9:ff:ab:e2:32:c4:ff:e5:ac:47:46:1f:44:a5:ed:54:40:
         90:27:73:b6:4a:98:42:dd:c1:40:fe:aa:d4:fc:ef:76:0f:8a:
         36:06:4e:a9:87:f1:4e:84:e7:1b:8f:f0:60:ff:dc:af:34:7a:
         92:1a:69:e8:bd:3d:ba:c6:5e:b3:da:7e:51:f3:39:db:f6:0a:
         66:37:6e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:57:12 2026 by rpki-client