Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/8D26DADCB6C411EF99C3B758C4F9AE02.roa
File:                     8D26DADCB6C411EF99C3B758C4F9AE02.roa (raw, json)
Hash identifier:          svfCZY/4ijPFg+GD8JzFGuMZM/fHEdmUD+EacNaNCNg=
Subject key identifier:   83:48:8A:42:E5:81:E3:AC:E3:F5:FA:F7:0A:42:F6:05:83:09:FD:30
Certificate issuer:       /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
Certificate serial:       EF
Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/8D26DADCB6C411EF99C3B758C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:03:23 +0000
ROA not before:           Fri 17 Oct 2025 09:43:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134193
IP address blocks:        160.187.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3
        Validity
            Not Before: Oct 17 09:43:11 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a598ab-85e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:1e:2b:a9:e7:df:3d:1d:98:73:0a:50:04:
                    93:f5:4d:e7:3e:81:e8:b1:dc:3e:fa:fc:02:c4:8d:
                    4b:13:b2:31:3e:4c:34:bc:3f:59:06:d6:57:6c:98:
                    e1:9b:d3:60:93:38:c2:34:86:27:dc:e6:40:6f:36:
                    80:26:b7:94:89:02:68:c0:dc:ea:05:1f:16:a4:e3:
                    2c:6c:34:0f:f7:9f:b0:bc:60:19:46:bf:c9:99:51:
                    95:93:61:45:55:ea:c1:7a:8e:24:87:88:73:bf:94:
                    b1:05:c0:2f:02:50:da:1d:35:79:dd:55:ba:3e:95:
                    6d:de:a7:78:53:f2:0b:5e:32:05:31:fb:af:9a:92:
                    48:2e:d2:b6:14:bb:54:42:7c:08:24:5f:f2:87:fd:
                    0a:0c:c4:0e:b5:2e:68:dd:b3:56:e3:c9:3d:54:14:
                    63:1b:b8:40:26:b0:b9:f5:1d:0a:b9:d7:c3:1a:5a:
                    6a:a5:ec:f3:c1:5b:2c:de:25:2e:a3:09:a5:97:a0:
                    d9:a2:c1:66:c1:b0:0c:e4:4c:19:14:24:e7:e0:8d:
                    35:0b:35:4d:f7:ae:ed:21:73:82:a0:d9:84:5d:e5:
                    4a:ff:c3:dd:50:62:60:4a:e6:2a:58:5b:1c:76:fe:
                    82:f0:94:1d:b8:8b:96:85:be:3a:b6:18:2f:ea:44:
                    e6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:48:8A:42:E5:81:E3:AC:E3:F5:FA:F7:0A:42:F6:05:83:09:FD:30
            X509v3 Authority Key Identifier:
                keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/8D26DADCB6C411EF99C3B758C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:5a:ce:f7:28:87:50:5b:72:c8:d4:2e:9b:e3:81:2d:c1:bb:
         03:ef:9e:3a:2c:bc:bb:42:06:65:ae:59:eb:6a:a1:32:ce:c9:
         96:00:91:88:39:ce:44:eb:e7:ea:9a:8d:76:fc:f0:b3:ad:d9:
         b2:86:39:aa:66:4b:26:88:e1:7a:d5:fb:e5:5d:4a:39:2d:d8:
         d2:f5:3a:b4:dc:0a:46:1b:b9:0c:aa:3b:e0:9b:a8:db:12:c4:
         a3:ac:8b:6a:6d:47:3a:7a:49:f3:e3:59:2b:01:c4:52:2a:ad:
         e5:ef:e5:9a:46:b1:4a:62:73:cb:aa:71:e1:2e:5f:7e:c9:0a:
         38:cf:74:33:5b:ab:b0:98:b5:64:89:de:67:cc:ed:e3:f3:b9:
         0a:58:a5:a4:cd:3d:24:d3:b0:c1:9c:05:da:06:1f:94:37:89:
         d1:2c:65:dc:c0:fb:b6:38:b2:8a:83:89:5e:bf:96:bc:6d:da:
         13:fc:cd:d5:44:52:75:75:04:10:f6:c5:55:fa:f7:74:a4:61:
         f3:77:89:9d:47:3b:73:7d:5d:c1:4c:60:54:2a:cc:4e:78:13:
         ef:c9:21:40:12:fa:cd:64:9a:a2:15:21:e8:d4:7b:02:29:35:
         10:4c:5b:9d:73:87:3d:89:20:db:67:55:57:49:50:98:11:39:
         59:07:c5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 09:58:06 2026 by rpki-client