Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
File:                     0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (raw, json)
Hash identifier:          WL5wwqxLhRgewDHLkgYPwe0c66r5P72bNJeDN1iMqa4=
Subject key identifier:   AA:C6:53:2D:8F:6D:E5:D4:83:86:36:45:C4:BE:74:85:14:E9:F6:6B
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       011A
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:05:22 +0000
ROA not before:           Fri 05 Dec 2025 03:44:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139904
IP address blocks:        160.191.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Dec  5 03:44:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58b12-a45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:f4:69:a7:4c:12:de:21:70:f5:ed:74:05:
                    dd:77:58:58:40:e7:e1:45:ab:08:1a:c9:ce:02:1b:
                    9a:7c:60:63:6b:c1:f0:ee:47:55:dc:dd:07:e4:ba:
                    a8:4e:4d:a4:0e:ea:1f:35:75:f6:6b:8a:61:7c:49:
                    1d:6c:dd:b5:68:74:e1:c9:42:40:e4:45:53:75:75:
                    9d:b2:28:0e:dc:10:9c:59:2f:a7:b0:2a:36:f2:56:
                    6e:f7:ac:2f:86:e3:f7:52:90:55:d5:73:eb:2c:8c:
                    84:5d:d0:cd:bb:50:0a:54:35:2b:43:5a:ca:8d:14:
                    64:3f:23:6c:0c:db:f7:29:bb:66:b9:98:fb:a1:77:
                    b3:f8:9c:0d:75:77:cc:95:e0:60:60:fd:6b:db:a4:
                    8c:fd:22:a0:16:b3:d4:c9:48:1d:be:08:35:a8:11:
                    87:e7:71:22:27:b4:a8:f1:0f:bc:3d:38:14:2d:92:
                    39:58:c0:b8:d3:39:37:b0:62:a1:39:e5:8c:be:70:
                    f4:62:5a:3a:18:dc:25:cb:24:d1:99:3f:41:ce:0b:
                    1a:b4:8b:14:0a:b3:c0:25:d0:db:ff:30:2c:a0:7c:
                    ea:93:cf:6d:ef:82:94:be:70:93:f8:92:51:54:60:
                    82:58:ee:b6:86:f7:8e:8f:e0:cf:31:28:18:69:52:
                    b2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C6:53:2D:8F:6D:E5:D4:83:86:36:45:C4:BE:74:85:14:E9:F6:6B
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/0A6CBB6E54CD11F0A3E48084C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:18:72:a9:e4:ee:17:97:cb:a3:c0:aa:ed:fb:45:47:1b:f6:
         54:78:6b:81:83:76:0b:e7:58:40:fd:1a:72:d0:f6:b3:2c:36:
         23:d3:ab:cf:87:61:29:56:21:5f:a8:56:97:73:09:10:b6:b6:
         e5:ce:3a:e9:c8:0e:06:08:f3:23:a5:0c:4b:d6:86:aa:8b:18:
         e9:41:b5:8d:99:50:6b:8a:44:8d:fc:93:9d:37:ce:4f:51:ac:
         79:f9:d9:54:1e:33:28:d8:06:30:cd:42:f4:bd:41:7b:b1:d1:
         44:d5:05:d6:49:8b:01:86:19:6c:84:46:2e:2c:1e:ff:ca:19:
         a2:e5:85:96:19:99:32:ab:7a:5d:3d:4a:29:58:11:66:0d:53:
         c5:a6:4b:c5:0b:b7:ed:cc:79:97:cc:3b:f5:8d:47:b9:7a:c2:
         1f:7a:93:1e:8c:f8:b2:7a:00:3f:61:f8:1b:26:f3:99:bc:46:
         d4:62:14:17:d9:ad:d7:a4:b3:08:a7:58:99:99:25:35:db:dc:
         96:26:6e:8c:74:f5:c0:a1:eb:e5:d9:0e:e9:71:05:ad:e7:b3:
         72:5a:28:a6:a4:2b:cb:2c:2d:47:95:e1:1f:bc:4e:93:b5:c8:
         37:12:e6:48:1f:74:ae:06:0a:61:d7:9b:97:3a:3a:91:0d:2a:
         46:a6:58:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:50:12 2026 by rpki-client