Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED89F/E433AB9E8CCD11F1A4C184313F11F970/84917F268CCE11F1B819196F3F11F970.roa
File:                     84917F268CCE11F1B819196F3F11F970.roa (raw, json)
Hash identifier:          ugA431x/tN5kEJycrbu30mjoNZeoUfi/AwHWuoqrw7Q=
Subject key identifier:   11:9A:A7:45:63:4E:60:F1:E3:2B:4B:52:90:7A:A4:0E:8F:95:4B:D9
Certificate issuer:       /CN=A91ED89F/serialNumber=1102CA1ADA05B7A733A45C5D29A146C0CCD7B9BA
Certificate serial:       02
Authority key identifier: 11:02:CA:1A:DA:05:B7:A7:33:A4:5C:5D:29:A1:46:C0:CC:D7:B9:BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQLKGtoFt6czpFxdKaFGwMzXubo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED89F/E433AB9E8CCD11F1A4C184313F11F970/84917F268CCE11F1B819196F3F11F970.roa
Signing time:             Fri 31 Jul 2026 10:56:44 +0000
ROA not before:           Fri 31 Jul 2026 10:56:44 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154784
IP address blocks:        160.236.32.0/24 maxlen: 24
                          160.236.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED89F/E433AB9E8CCD11F1A4C184313F11F970/EQLKGtoFt6czpFxdKaFGwMzXubo.crl
                          rsync://rpki.apnic.net/member_repository/A91ED89F/E433AB9E8CCD11F1A4C184313F11F970/EQLKGtoFt6czpFxdKaFGwMzXubo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQLKGtoFt6czpFxdKaFGwMzXubo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 09:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED89F, serialNumber=1102CA1ADA05B7A733A45C5D29A146C0CCD7B9BA
        Validity
            Not Before: Jul 31 10:56:44 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c7f6c-249d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:4c:af:c4:58:4d:e4:fb:50:ea:f6:b6:68:
                    49:a6:19:38:b3:7e:44:a7:93:69:24:1a:26:af:23:
                    64:b3:19:60:48:8f:af:34:83:33:df:a9:66:91:7c:
                    81:24:1c:6b:14:ba:b7:3a:cf:a1:2d:b5:69:74:7f:
                    0c:b0:31:64:93:e7:22:9e:5a:aa:c4:98:7c:a7:f8:
                    21:8a:76:06:90:16:93:6b:bb:24:a4:f2:f0:5f:63:
                    1f:9b:fa:22:66:54:ec:63:7e:eb:73:de:fc:ab:b9:
                    3a:05:03:c6:96:c4:80:e8:65:aa:dc:a1:a3:e1:97:
                    44:2e:ed:58:b9:77:db:76:9e:e4:98:d2:b1:96:bd:
                    e3:ba:4a:e8:1f:2a:77:38:0f:93:fc:39:4b:f7:71:
                    e9:ba:1c:d2:72:7a:93:81:59:a6:77:61:e2:4b:e5:
                    7b:30:40:31:7d:28:1d:5d:ec:af:a8:43:82:6c:59:
                    c7:47:56:6e:59:95:6f:9c:27:b8:23:31:52:79:fe:
                    27:c3:49:e5:ff:9b:24:33:d1:45:9e:bc:af:d6:ed:
                    07:54:58:e2:f9:be:ee:ef:61:21:cd:93:52:d2:90:
                    b7:7a:6a:99:40:e1:13:db:9b:66:c0:5b:d0:98:50:
                    ba:2e:fa:a6:f9:df:b6:a2:56:02:79:9a:40:2b:ef:
                    de:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9A:A7:45:63:4E:60:F1:E3:2B:4B:52:90:7A:A4:0E:8F:95:4B:D9
            X509v3 Authority Key Identifier:
                keyid:11:02:CA:1A:DA:05:B7:A7:33:A4:5C:5D:29:A1:46:C0:CC:D7:B9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED89F/E433AB9E8CCD11F1A4C184313F11F970/EQLKGtoFt6czpFxdKaFGwMzXubo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EQLKGtoFt6czpFxdKaFGwMzXubo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED89F/E433AB9E8CCD11F1A4C184313F11F970/84917F268CCE11F1B819196F3F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:3f:34:05:10:92:1e:63:a1:9f:3e:e7:02:99:ae:39:d5:
         66:54:44:01:32:ba:29:46:84:b0:a3:92:43:ff:72:5c:c8:d6:
         19:d0:a5:3f:ba:55:97:8d:fe:75:69:b1:96:e4:35:70:73:af:
         a8:60:c6:a5:28:a9:72:65:ff:bf:8f:3b:d3:f9:be:cd:7f:15:
         1b:ee:c9:c0:69:61:b4:d8:c2:d0:aa:87:d3:3c:06:61:d3:5e:
         30:06:1c:d7:61:6e:25:ff:d0:ed:18:b5:1f:11:f7:94:af:c6:
         38:2c:7c:69:f6:3d:54:f4:c3:10:98:d6:53:b6:3d:f9:af:b5:
         cb:1e:67:8f:ca:71:e1:c9:34:07:a8:64:03:3b:47:bf:4d:d5:
         bc:45:da:e0:c7:82:94:64:c0:a1:0a:76:ed:08:43:8f:8d:24:
         7f:5c:fc:61:a0:05:82:8d:9d:95:13:35:cd:95:09:e2:a2:b0:
         31:0d:2e:1f:03:0a:8f:8c:2d:48:6e:6c:2d:11:be:cb:ab:9a:
         82:14:72:8b:89:24:38:99:b9:b5:60:b5:66:de:c2:7c:58:a4:
         85:17:55:07:6b:4c:93:e2:d3:33:c4:fa:38:5d:97:7a:7f:82:
         d8:1b:95:66:15:a6:fa:b7:1d:6f:9e:a9:12:66:2f:e4:0e:a7:
         5b:76:6e:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:26 2026 by rpki-client