Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
File:                     FF233C70E62111EFACA87766C4F9AE02.roa (raw, json)
Hash identifier:          l81QgUkAG3jb2K1eCkfJ4vvLxu4iwZrMMfKmrpOvZAc=
Subject key identifier:   BD:B4:D7:32:04:32:B7:14:3C:03:05:5B:FC:82:8D:C0:11:59:B9:BE
Certificate issuer:       /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
Certificate serial:       01DE
Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa
Signing time:             Sat 01 Aug 2026 05:54:32 +0000
ROA not before:           Sat 01 Aug 2026 05:54:31 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     214189
IP address blocks:        160.22.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl
                          rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 04:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32
        Validity
            Not Before: Aug  1 05:54:31 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a6d8a17-44d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b3:f3:19:bd:29:c4:33:8e:b6:46:7b:9d:1d:
                    e0:0a:3c:21:1b:7f:60:b4:56:46:6f:81:66:e2:1a:
                    86:b7:ef:26:85:a5:3e:7d:50:5e:c8:2b:d8:fe:02:
                    a9:50:24:da:b2:5e:1e:b2:09:b0:50:d7:e9:e3:b4:
                    09:c9:38:26:6e:08:f5:75:80:11:d6:20:35:9e:1b:
                    1e:0e:87:e3:1e:b4:cb:95:75:08:95:0d:88:fc:9b:
                    c7:02:fd:d0:29:18:a0:81:88:79:66:d4:61:3d:c4:
                    26:fb:3d:e2:82:4f:45:73:8d:44:e5:23:ac:68:de:
                    49:f0:3d:85:27:71:5b:b7:14:2e:12:35:4d:7f:10:
                    e0:1e:7c:c2:f9:7d:9b:fc:a1:c4:cd:79:d8:69:de:
                    64:9d:03:44:88:bb:5b:f6:6d:af:89:cb:88:c2:7a:
                    d2:aa:7a:e8:ea:50:72:c4:dd:75:19:86:3c:7e:da:
                    bc:a3:b5:0a:00:09:4a:a3:71:30:07:5a:df:81:f2:
                    da:ba:e3:1e:c0:0b:47:de:0b:1b:a6:0e:37:66:a2:
                    6d:f9:05:2a:bd:b6:84:c3:ed:90:08:1f:2a:b5:ef:
                    03:da:01:35:24:cb:5f:5f:6e:d8:8a:09:fa:87:34:
                    45:b0:59:01:39:92:6a:44:3c:c6:e7:60:b3:59:0c:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B4:D7:32:04:32:B7:14:3C:03:05:5B:FC:82:8D:C0:11:59:B9:BE
            X509v3 Authority Key Identifier:
                keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:a2:86:df:01:f1:87:9e:6f:4b:ef:de:1e:69:c5:ad:f7:31:
         26:f4:8e:c5:2f:b2:81:f0:6c:18:16:df:e8:98:07:9d:65:1d:
         8a:5e:13:33:f7:a0:18:fe:43:f4:91:0d:65:c1:01:01:60:58:
         d9:0f:6a:ac:6e:47:44:ca:c1:48:ee:1f:b0:7c:97:21:4b:69:
         23:d6:94:9b:a9:a0:e4:86:ab:3d:fc:8c:85:c4:57:e2:c3:92:
         9c:79:dd:be:d8:0f:a3:23:4d:fd:fc:8e:82:fb:7a:ad:5d:c0:
         64:c9:57:2c:db:b6:2e:20:84:41:01:3f:39:56:27:4d:87:a8:
         2b:30:25:2e:e6:81:c2:b0:e1:15:59:3b:93:fc:5d:3e:24:c8:
         98:78:f7:5f:03:6e:e1:ab:34:a4:46:18:07:44:11:d3:c6:ad:
         80:d2:bf:5c:fe:96:fc:12:eb:d2:cb:55:a2:91:d1:c4:cf:1a:
         74:cf:28:8f:e0:be:67:b3:45:8c:12:7c:e0:56:f5:b6:9c:9a:
         b2:15:21:82:d9:6b:36:a8:32:48:c4:d3:1e:b3:14:fa:7d:fe:
         87:93:22:47:53:e3:49:c1:87:2c:e3:d2:d6:5a:1e:3e:47:05:
         25:23:cc:e7:82:cb:72:40:45:76:ee:4e:53:b2:41:dc:80:e5:
         c7:b8:f4:10
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4
NTNEOUREMzIwHhcNMjYwODAxMDU1NDMxWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkOGExNy00NGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbPzGb0pxDOOtkZ7nR3gCjwhG39gtFZGb4Fm4hqGt+8mhaU+fVBeyCvY/gKp
UCTasl4esgmwUNfp47QJyTgmbgj1dYAR1iA1nhseDofjHrTLlXUIlQ2I/JvHAv3Q
KRiggYh5ZtRhPcQm+z3igk9Fc41E5SOsaN5J8D2FJ3FbtxQuEjVNfxDgHnzC+X2b
/KHEzXnYad5knQNEiLtb9m2vicuIwnrSqnro6lByxN11GYY8ftq8o7UKAAlKo3Ew
B1rfgfLauuMewAtH3gsbpg43ZqJt+QUqvbaEw+2QCB8qte8D2gE1JMtfX27Yign6
hzRFsFkBOZJqRDzG52CzWQw4NwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL201zIE
MrcUPAMFW/yCjcARWbm+MB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5
NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz
VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0VBRTAvQUVGNjM3NjAxOTY4MTFFRjhGRjdCRTZGQzRGOUFFMDIvRkYyMzNDNzBF
NjIxMTFFRkFDQTg3NzY2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBabMA0GCSqGSIb3DQEBCwUAA4IBAQCqoobfAfGHnm9L794eacWt
9zEm9I7FL7KB8GwYFt/omAedZR2KXhMz96AY/kP0kQ1lwQEBYFjZD2qsbkdEysFI
7h+wfJchS2kj1pSbqaDkhqs9/IyFxFfiw5Kced2+2A+jI039/I6C+3qtXcBkyVcs
27YuIIRBAT85VidNh6grMCUu5oHCsOEVWTuT/F0+JMiYePdfA27hqzSkRhgHRBHT
xq2A0r9c/pb8EuvSy1WikdHEzxp0zyiP4L5ns0WMEnzgVvW2nJqyFSGC2Ws2qDJI
xNMesxT6ff6HkyJHU+NJwYcs49LWWh4+RwUlI8zngstyQEV27k5TskHcgOXHuPQQ
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:31 2026 by rpki-client