Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/BC271E52B31911F183412A046611F970.roa
File:                     BC271E52B31911F183412A046611F970.roa (raw, json)
Hash identifier:          vbiJolfMPvVJDBUNL2V3IBTDoWz3FM/eSssSUTrnDrA=
Subject key identifier:   A6:B6:31:E3:41:47:6F:1D:E5:36:6A:06:35:2A:AA:59:9A:55:B9:8D
Certificate issuer:       /CN=A91B4E1D/serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
Certificate serial:       03
Authority key identifier: 11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/BC271E52B31911F183412A046611F970.roa
Signing time:             Fri 18 Sep 2026 04:30:54 +0000
ROA not before:           Fri 18 Sep 2026 04:30:54 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154796
IP address blocks:        160.236.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 09:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E1D, serialNumber=11B127714AC5408C84F0D76538C95E8275DAD85A
        Validity
            Not Before: Sep 18 04:30:54 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aacbe7e-1b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ab:85:9e:6f:86:fa:e3:3c:37:00:95:6d:5f:
                    f7:dd:54:53:b9:23:09:62:17:60:09:13:9d:cb:5b:
                    fb:6a:24:96:56:96:95:2a:18:17:95:f7:0a:6f:f2:
                    14:63:0c:58:b9:09:44:04:68:31:6f:98:db:20:44:
                    9e:56:8f:84:9c:2c:ae:8d:9d:77:07:41:f0:56:08:
                    66:ed:5f:3a:aa:75:d4:c9:2d:c7:8a:95:fa:6c:12:
                    f0:5c:5c:c3:d4:e7:c9:b7:9e:0c:21:51:09:1f:e7:
                    fc:12:58:ef:3f:f1:fd:69:77:96:f5:f0:99:26:1e:
                    6b:ac:d7:5b:46:4b:0a:a9:c0:d0:97:81:f7:6b:07:
                    6d:e5:6c:80:17:85:a3:70:d6:63:28:e4:b3:3f:7a:
                    11:6e:26:b5:0e:b4:74:67:03:0b:4a:e5:a0:74:01:
                    90:58:5d:c3:90:07:dc:1c:24:57:65:a0:04:4d:c5:
                    8a:bf:9f:23:61:7c:6e:68:9a:97:f4:d6:9e:1b:73:
                    c6:eb:4d:db:90:45:79:28:e1:78:05:b8:0c:de:c0:
                    00:a8:52:bf:5c:85:64:08:ca:7c:25:0b:f8:38:4b:
                    7f:33:04:f8:1f:f0:0a:02:ad:b8:3a:8e:c6:43:c7:
                    d5:36:80:18:65:e5:5e:f5:d4:e1:d7:d2:8d:99:cc:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B6:31:E3:41:47:6F:1D:E5:36:6A:06:35:2A:AA:59:9A:55:B9:8D
            X509v3 Authority Key Identifier:
                keyid:11:B1:27:71:4A:C5:40:8C:84:F0:D7:65:38:C9:5E:82:75:DA:D8:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/EbEncUrFQIyE8NdlOMlegnXa2Fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EbEncUrFQIyE8NdlOMlegnXa2Fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/73B91FCCB21E11F187A6F6EF5811F970/BC271E52B31911F183412A046611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:24:36:43:43:41:e2:dc:90:6f:a0:89:58:d8:cc:a5:6a:
         b0:11:5c:60:60:61:16:73:4d:3b:c9:9c:0d:63:8c:e0:de:20:
         f3:93:5f:2c:55:7f:4b:75:16:5b:43:70:9a:17:96:e9:a0:af:
         b1:ba:a5:b2:a0:b6:5a:65:7e:4a:26:f3:c5:5e:6a:02:a5:04:
         df:4e:77:1a:b4:fb:92:96:93:3b:eb:4f:74:9b:28:eb:65:44:
         9d:a5:37:b3:d2:8a:42:59:5b:f3:00:70:00:f2:84:37:c6:3c:
         6c:d9:af:b2:ae:9f:d6:f6:b7:50:a4:c8:98:95:19:60:4b:2e:
         c0:4d:3e:e4:1c:c3:4e:81:0b:c8:cd:9e:19:f6:80:37:23:93:
         71:50:6c:bb:f8:53:be:de:dd:dd:7e:3e:ff:9e:58:ff:ac:f4:
         58:2a:0d:38:9f:5c:17:ba:65:53:26:64:bc:54:17:b5:68:75:
         ec:26:9a:5c:fc:24:bc:a1:25:19:34:e9:e4:1e:2f:b5:f9:65:
         51:2f:d8:f0:82:01:e0:f3:fd:49:05:ec:65:cb:44:29:ec:ff:
         44:50:97:52:a5:77:58:8e:92:e1:64:14:ad:c9:da:cf:5f:a7:
         d2:ec:39:b7:70:05:7f:30:b4:1e:88:e0:85:55:16:df:71:6d:
         cd:84:af:c9
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
NEUxRDExMC8GA1UEBRMoMTFCMTI3NzE0QUM1NDA4Qzg0RjBENzY1MzhDOTVFODI3
NURBRDg1QTAeFw0yNjA5MTgwNDMwNTRaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYWNiZTdlLTFiMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC5q4Web4b64zw3AJVtX/fdVFO5IwliF2AJE53LW/tqJJZWlpUqGBeV9wpv8hRj
DFi5CUQEaDFvmNsgRJ5Wj4ScLK6NnXcHQfBWCGbtXzqqddTJLceKlfpsEvBcXMPU
58m3ngwhUQkf5/wSWO8/8f1pd5b18JkmHmus11tGSwqpwNCXgfdrB23lbIAXhaNw
1mMo5LM/ehFuJrUOtHRnAwtK5aB0AZBYXcOQB9wcJFdloARNxYq/nyNhfG5ompf0
1p4bc8brTduQRXko4XgFuAzewACoUr9chWQIynwlC/g4S38zBPgf8AoCrbg6jsZD
x9U2gBhl5V711OHX0o2ZzFFHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUprYx40FH
bx3lNmoGNSqqWZpVuY0wHwYDVR0jBBgwFoAUEbEncUrFQIyE8NdlOMlegnXa2Fow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI0RTFELzczQjkxRkNDQjIx
RTExRjE4N0E2RjZFRjU4MTFGOTcwL0ViRW5jVXJGUUl5RThOZGxPTWxlZ25YYTJG
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRWJFbmNVckZRSXlFOE5kbE9NbGVnblhhMkZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NEUxRC83M0I5MUZDQ0IyMUUxMUYxODdBNkY2RUY1ODExRjk3MC9CQzI3MUU1MkIz
MTkxMUYxODM0MTJBMDQ2NjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGg7N4wDQYJKoZIhvcNAQELBQADggEBAG9gJDZDQ0Hi3JBvoIlY2Myl
arARXGBgYRZzTTvJnA1jjODeIPOTXyxVf0t1FltDcJoXlumgr7G6pbKgtlplfkom
88VeagKlBN9Odxq0+5KWkzvrT3SbKOtlRJ2lN7PSikJZW/MAcADyhDfGPGzZr7Ku
n9b2t1CkyJiVGWBLLsBNPuQcw06BC8jNnhn2gDcjk3FQbLv4U77e3d1+Pv+eWP+s
9FgqDTifXBe6ZVMmZLxUF7Vodewmmlz8JLyhJRk06eQeL7X5ZVEv2PCCAeDz/UkF
7GXLRCns/0RQl1Kld1iOkuFkFK3J2s9fp9LsObdwBX8wtB6I4IVVFt9xbc2Er8k=
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:14:12 2026 by rpki-client