Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/E12300F27DE711F1A1F9DA6963A30FBC.roa
File:                     E12300F27DE711F1A1F9DA6963A30FBC.roa (raw, json)
Hash identifier:          HWu++fZJ7qJBpUlP+w3MOqBUVps1PM4BfBzFANQKNlI=
Subject key identifier:   15:49:33:D4:9B:FA:CA:EA:D0:5C:A7:F9:46:87:C7:AB:EE:3A:8D:D3
Certificate issuer:       /CN=A91E554A/serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
Certificate serial:       0168
Authority key identifier: 12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/E12300F27DE711F1A1F9DA6963A30FBC.roa
Signing time:             Wed 05 Aug 2026 20:44:37 +0000
ROA not before:           Wed 05 Aug 2026 20:44:37 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153377
IP address blocks:        160.191.80.0/24 maxlen: 24
                          160.191.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl
                          rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 05:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E554A, serialNumber=121AF144D903E3F8897DF0FED2071A164775ED4F
        Validity
            Not Before: Aug  5 20:44:37 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a73a0b5-6525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:50:23:e0:cf:5c:99:36:d8:9a:6b:d1:94:
                    33:c6:d9:6a:84:f6:a8:bb:e5:f5:0a:1c:b2:d9:b9:
                    36:bb:a3:73:40:4e:d0:40:78:a5:04:29:4e:73:55:
                    0b:da:5d:9a:fe:c0:09:1d:30:43:24:51:0b:34:96:
                    8d:1e:07:49:16:66:72:06:a7:61:e8:a9:7b:5d:1f:
                    cb:f4:37:45:ce:28:67:38:47:cd:b5:83:ee:a6:f0:
                    05:76:e5:ad:14:f7:f5:8f:bc:ed:e7:7c:78:f5:cc:
                    b8:b3:a0:09:f8:28:db:be:79:77:19:5b:bb:6a:4e:
                    5c:ec:53:dc:f3:31:44:20:f3:66:ad:eb:62:85:d7:
                    b9:63:41:43:a3:b9:a0:b2:52:24:cf:64:d4:45:cf:
                    31:e6:75:d8:71:d2:4d:90:50:6c:cb:de:1b:75:b0:
                    8e:05:1a:2c:f6:a4:41:40:cd:91:1c:2d:c1:fb:c3:
                    d8:74:c2:71:43:26:d2:9b:82:14:75:a1:d6:ca:01:
                    fb:54:cd:a6:17:da:75:b3:4c:d2:5f:34:34:59:2c:
                    a0:bf:25:cf:b1:82:a2:88:33:c4:c1:42:ca:13:ed:
                    17:c1:93:57:6f:3c:d2:b5:58:8e:f2:e8:ed:c6:ce:
                    f8:85:0e:67:88:7f:ec:23:a1:84:51:42:df:6e:c1:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:33:D4:9B:FA:CA:EA:D0:5C:A7:F9:46:87:C7:AB:EE:3A:8D:D3
            X509v3 Authority Key Identifier:
                keyid:12:1A:F1:44:D9:03:E3:F8:89:7D:F0:FE:D2:07:1A:16:47:75:ED:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/EhrxRNkD4_iJffD-0gcaFkd17U8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EhrxRNkD4_iJffD-0gcaFkd17U8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E554A/795E73D091F711EFADE11266C4F9AE02/E12300F27DE711F1A1F9DA6963A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:81:c4:22:ee:0c:f1:23:2b:df:15:b6:91:b7:4e:2a:ec:b3:
         22:d8:09:0c:ba:0f:3f:60:8f:01:b2:b0:80:eb:be:2a:4f:fa:
         92:f9:89:35:fe:33:de:57:6b:df:90:8f:9f:82:6a:89:37:e0:
         31:ea:90:b4:74:5f:0a:ed:5a:7f:39:96:8c:64:a8:25:75:b5:
         ee:8d:57:e9:83:fa:95:18:86:3a:03:a4:87:d0:29:d3:1b:48:
         6d:80:d8:46:e5:41:88:ff:9c:9a:10:d5:c8:74:b2:ac:39:44:
         81:9b:37:d7:28:ef:57:1d:af:a4:1f:f9:ba:b7:a1:46:36:48:
         15:64:6b:22:60:5e:56:42:d0:5e:4a:87:12:7b:c6:05:67:f3:
         8f:aa:f5:11:da:01:69:42:4c:83:aa:13:40:6c:ce:d8:a2:dd:
         61:d1:57:c7:0f:05:f6:e1:ef:bd:90:41:80:96:ec:5d:ab:ff:
         91:1a:e0:28:85:0e:b4:67:86:5e:82:25:cc:24:58:e7:62:e3:
         52:3a:2a:0b:07:29:99:54:99:8e:00:f2:4e:bd:16:0f:bd:4c:
         6d:31:7e:8a:10:b8:ab:2e:19:00:d6:ab:0c:41:24:c2:12:38:
         1b:70:1a:92:3f:30:ae:ca:0f:21:40:19:cc:15:42:fb:63:a1:
         bb:f3:c4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:07:18 2026 by rpki-client