Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/6541C736955011F182DDD8986311F970.roa
File:                     6541C736955011F182DDD8986311F970.roa (raw, json)
Hash identifier:          VmYiwJkdtivR6HXc5cYeknzo53XRP+VA+7pqAoe/M2U=
Subject key identifier:   20:C7:E8:96:ED:D3:A6:B3:65:F5:68:BB:0B:98:C1:E9:55:E9:44:D5
Certificate issuer:       /CN=A91CD277/serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
Certificate serial:       04
Authority key identifier: BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/6541C736955011F182DDD8986311F970.roa
Signing time:             Tue 11 Aug 2026 06:46:36 +0000
ROA not before:           Tue 11 Aug 2026 06:46:36 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     56301
IP address blocks:        160.236.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD277, serialNumber=BC29E5E4DB13FC53C02282B0C32F586E1C9466F1
        Validity
            Not Before: Aug 11 06:46:36 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7ac54b-f555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4a:bb:6c:1b:38:57:ae:d9:8d:b6:8b:9f:15:
                    a0:36:eb:e2:f2:0e:b9:25:89:32:04:fa:1a:a4:c6:
                    16:02:55:01:82:8d:c2:4d:df:5f:9b:eb:d1:fd:3f:
                    41:0f:55:d5:84:97:b9:13:dd:7b:a0:11:e6:cd:ac:
                    b7:25:5b:6c:28:30:74:1a:80:a9:69:03:2d:e8:cb:
                    ae:78:8b:d7:64:ac:10:97:c4:06:40:7f:d7:cc:51:
                    66:94:b8:81:57:99:cb:78:22:f4:e6:c9:ea:15:48:
                    ef:ae:08:49:28:5f:54:7f:f3:5a:26:16:75:3a:6a:
                    df:f0:80:f5:a3:73:37:0c:7a:90:58:31:44:6d:62:
                    a3:5f:d6:c1:7b:4c:f9:cc:4d:b1:7e:e3:57:40:f2:
                    75:ae:f5:92:8e:93:57:74:31:25:24:23:58:f2:45:
                    7e:dc:16:30:1f:d2:c3:ab:d2:02:77:eb:e1:98:bd:
                    ad:b2:bb:d4:14:2b:70:b0:0b:cf:d6:90:3c:b0:a1:
                    1c:f6:89:5f:7b:6e:9c:6b:ad:07:13:a6:90:ed:34:
                    64:6e:e2:6f:3c:ea:21:5f:7b:e5:76:74:fd:e3:c1:
                    cb:d1:63:67:2f:81:d8:3c:7e:5a:58:18:4a:a6:85:
                    84:b0:c5:28:f5:54:ea:e4:d7:da:41:52:96:45:77:
                    8a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C7:E8:96:ED:D3:A6:B3:65:F5:68:BB:0B:98:C1:E9:55:E9:44:D5
            X509v3 Authority Key Identifier:
                keyid:BC:29:E5:E4:DB:13:FC:53:C0:22:82:B0:C3:2F:58:6E:1C:94:66:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/vCnl5NsT_FPAIoKwwy9YbhyUZvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vCnl5NsT_FPAIoKwwy9YbhyUZvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD277/681667C2954711F1A338F0636011F970/6541C736955011F182DDD8986311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:87:cf:9b:39:da:75:ec:e0:0c:ae:27:71:e9:80:8a:fd:df:
         30:b4:97:0b:fb:ac:36:9e:7e:c0:bf:b0:19:6a:1c:e6:14:df:
         56:a5:01:f2:21:30:86:8a:a2:2d:b5:a4:c5:a3:98:49:3d:cc:
         76:57:bb:4b:31:b8:a1:48:81:32:b9:50:79:f0:cd:ea:28:fa:
         60:32:11:e6:82:08:21:77:39:a1:90:6f:ea:8c:18:00:c4:31:
         d9:c6:95:e7:3d:66:f0:3d:b3:41:e3:f8:e0:8d:e9:b6:32:2e:
         2a:13:79:53:d7:ec:2f:5c:39:5d:73:6a:c1:03:c3:db:ac:cd:
         1c:ab:62:3c:7b:99:47:36:9e:2d:2b:b6:79:9b:f9:1f:39:82:
         01:44:13:a3:f7:6c:42:8b:44:ec:73:14:62:e6:49:aa:61:38:
         e8:86:9a:29:f8:bf:f0:c0:d2:4d:ec:e3:68:5c:ce:18:00:98:
         32:8c:44:b0:07:58:05:20:0f:37:c0:ae:e3:63:b6:36:97:ac:
         c3:1c:9b:e7:ed:4f:bd:27:d4:d2:85:0e:af:8a:ee:23:42:03:
         ec:b0:b2:cf:13:fe:3b:80:d3:98:68:23:a2:a0:d8:fd:ad:c8:
         3e:b6:05:f2:61:5a:03:df:36:56:8d:6f:06:87:9d:48:5d:d4:
         2e:25:41:3c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 15:10:56 2026 by rpki-client