Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/5D1D397A8DAB11F189A852AF4511F970.roa
File:                     5D1D397A8DAB11F189A852AF4511F970.roa (raw, json)
Hash identifier:          8SHLMBij6okm9+8J31gc2FeJFmgTdVNdbizMOipyo0M=
Subject key identifier:   7B:CD:5F:32:B8:00:00:30:E8:55:25:56:57:5D:3A:58:15:7C:A5:EE
Certificate issuer:       /CN=A91FF21A/serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178
Certificate serial:       18
Authority key identifier: 31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/5D1D397A8DAB11F189A852AF4511F970.roa
Signing time:             Sat 01 Aug 2026 13:17:37 +0000
ROA not before:           Sat 01 Aug 2026 13:17:37 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153596
IP address blocks:        160.236.188.0/24 maxlen: 24
                          160.236.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl
                          rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 08:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF21A, serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178
        Validity
            Not Before: Aug  1 13:17:37 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a6df1f1-1b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7c:88:cf:1c:9c:1b:c9:f0:6a:8a:f2:23:c6:
                    53:a7:0e:f7:1e:16:2c:20:f1:53:e9:ba:4c:3e:fd:
                    1a:d1:16:fe:71:c3:89:e8:08:e9:1c:ba:1d:27:48:
                    0e:9a:94:2a:7a:07:3e:c9:08:5d:f2:ae:ef:0d:4f:
                    62:cf:fe:e8:12:f3:d2:bf:80:74:4e:9c:27:df:85:
                    92:e2:6c:bd:a8:bf:bf:d7:1c:a1:36:5c:bb:94:59:
                    9e:f4:03:0f:92:34:df:da:a9:b9:3a:14:4e:d3:c8:
                    e5:ae:2c:06:05:c6:1b:25:b9:b4:a2:1e:fe:76:3b:
                    fa:02:da:3a:4d:83:53:c2:ea:d7:49:23:a3:5f:aa:
                    94:49:2c:b3:3b:ba:86:aa:4c:02:c5:13:1b:75:d2:
                    20:5e:a1:13:0f:c5:24:df:ab:de:b0:23:08:16:ac:
                    40:b0:eb:aa:c9:c1:34:67:79:cc:72:4f:20:4e:9f:
                    40:2a:46:ff:68:c1:da:8e:b6:0c:d8:1a:35:6a:d6:
                    da:64:66:83:59:10:70:31:88:7c:3a:6f:ff:a2:f4:
                    91:dc:4a:da:98:00:71:52:5e:67:0f:70:8f:b7:08:
                    84:a9:13:1f:4f:b6:24:45:ff:54:7c:2e:eb:9e:fe:
                    3c:e8:96:21:99:d0:5c:d9:41:1e:fa:fb:4c:36:77:
                    b3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:5F:32:B8:00:00:30:E8:55:25:56:57:5D:3A:58:15:7C:A5:EE
            X509v3 Authority Key Identifier:
                keyid:31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/5D1D397A8DAB11F189A852AF4511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:0d:8b:8d:47:b4:4e:46:1e:d2:98:d0:f2:42:34:fb:f4:7b:
         fc:ca:ac:01:12:45:a9:12:cd:b4:3f:31:68:45:d8:05:3d:9a:
         89:d4:22:c2:e8:34:a9:82:d0:6c:6e:c0:2a:30:ed:81:31:db:
         ab:36:14:c3:c9:de:74:0d:2d:9d:cc:47:db:23:50:a0:15:92:
         cf:d0:4f:68:58:1c:35:ef:5b:56:94:70:a5:b0:bf:31:95:98:
         ac:00:6e:4e:2f:46:a7:f4:3b:d5:c0:b4:72:1a:10:c6:1f:a3:
         6b:3f:62:75:1b:f0:a4:80:03:81:a1:50:fc:68:a7:e5:5d:ec:
         58:75:ce:68:04:0f:e5:e2:ce:0a:84:cb:02:46:c2:5c:56:46:
         46:71:46:7c:cd:6e:06:f5:84:c7:ad:94:e9:f6:16:05:06:c1:
         4b:d9:e8:71:e9:8a:41:58:b3:38:39:36:9c:80:93:0c:36:a5:
         49:82:df:d0:13:f9:ef:56:05:44:fd:5c:38:1f:42:54:6d:b3:
         de:38:1a:09:17:b9:3e:6d:56:f0:62:01:44:41:7b:2f:be:c8:
         76:ea:cb:08:cb:61:60:58:aa:61:30:c2:b7:1c:b0:be:20:41:
         be:1b:19:0a:ba:c2:4b:5b:47:84:62:5f:f7:82:ad:25:8a:ea:
         2d:8c:5a:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:35 2026 by rpki-client