Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
File:                     A55B56FC812311F1A313CCFA74A30FBC.roa (raw, json)
Hash identifier:          CgCaAsuhKr/vo6vaRhDPC36Dwd42AzMK9hLer8QqUaQ=
Subject key identifier:   AD:9C:86:26:28:42:DF:0D:BB:61:F3:B2:15:0C:96:91:95:78:0A:BE
Certificate issuer:       /CN=A912A45D/serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C
Certificate serial:       28
Authority key identifier: 5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa
Signing time:             Fri 21 Aug 2026 17:00:19 +0000
ROA not before:           Fri 21 Aug 2026 17:00:19 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154755
IP address blocks:        160.236.86.0/23 maxlen: 23
                          160.236.86.0/24 maxlen: 24
                          160.236.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl
                          rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 10:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A45D, serialNumber=5FC161AC0AC19D8892A6E42676FB0FA9D4CEDB2C
        Validity
            Not Before: Aug 21 17:00:19 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a888423-1f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7f:09:cc:79:06:bf:0a:ec:d2:06:d9:08:b9:
                    1d:cb:9d:9a:70:eb:d4:5b:4c:66:16:a6:62:45:4e:
                    30:b5:84:ce:ae:14:be:4b:b0:d0:44:66:90:96:62:
                    4e:24:33:b2:f7:a6:e0:6c:e9:20:73:e6:3b:92:6c:
                    06:e2:79:cf:ea:55:72:6a:32:ef:1a:04:bb:09:47:
                    fc:32:ae:20:21:02:d2:29:a4:97:57:a5:c7:f2:62:
                    b8:3e:ee:92:ff:20:5e:d0:63:9d:6a:ef:5c:13:5b:
                    e3:1d:79:c7:9c:3b:28:b9:dc:98:f2:e2:84:c6:6a:
                    9a:9b:a2:b1:27:9b:47:36:bc:85:85:84:bf:c3:3b:
                    a4:a7:45:af:4a:3c:dd:49:fe:52:cc:73:ca:a3:25:
                    9c:9c:59:79:04:bf:71:8f:47:89:28:54:8f:0e:fb:
                    e7:79:c6:4e:eb:0b:66:8b:c3:ba:5f:27:63:bd:76:
                    15:26:ce:ce:ee:1f:2e:f2:18:75:ef:0e:cd:c3:be:
                    19:88:00:5e:79:59:91:7d:88:b4:ef:d8:28:45:4a:
                    47:e2:85:04:98:ec:2e:da:ff:93:7c:0b:74:2d:46:
                    70:cb:7c:db:d7:06:77:e2:ce:32:f2:f0:67:ec:55:
                    a0:b1:49:86:ad:cc:f2:74:7a:6b:7b:11:ff:2a:d0:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9C:86:26:28:42:DF:0D:BB:61:F3:B2:15:0C:96:91:95:78:0A:BE
            X509v3 Authority Key Identifier:
                keyid:5F:C1:61:AC:0A:C1:9D:88:92:A6:E4:26:76:FB:0F:A9:D4:CE:DB:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/X8FhrArBnYiSpuQmdvsPqdTO2yw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X8FhrArBnYiSpuQmdvsPqdTO2yw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A45D/76528B067B9B11F19124C34171A30FBC/A55B56FC812311F1A313CCFA74A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:5f:53:b5:da:a3:67:a2:b8:a0:a0:e5:23:1c:24:f7:34:27:
         12:2a:62:0a:02:c4:b9:f5:4c:14:9a:5e:98:1b:05:17:c2:3d:
         55:bf:f5:69:03:36:e8:fa:2c:d3:90:79:16:8f:65:0e:80:46:
         1f:b7:30:7b:4f:bf:b7:8f:09:6d:2a:e9:49:43:db:87:45:c1:
         aa:21:f6:30:07:8b:2e:c8:98:52:b4:ee:82:01:66:8a:f9:cd:
         3e:9e:42:97:06:a2:cd:3c:18:7e:d3:5e:5b:13:1c:f1:a7:da:
         13:63:9b:07:cb:d6:6b:65:52:8a:65:5e:20:36:1e:55:2d:04:
         ff:bb:ae:5d:d5:f4:6f:a4:f0:4b:a8:d3:89:cc:d4:ab:46:16:
         33:18:84:38:16:e2:65:4c:4d:e6:ef:dd:5e:ad:84:67:fd:4b:
         94:a9:da:bd:2b:1a:4c:73:7f:c8:dd:7b:a6:ff:d9:67:be:80:
         0a:14:b2:f6:7d:65:bc:7d:c5:24:4d:31:93:f9:25:7c:67:d4:
         33:26:58:d5:30:a8:3a:02:4d:79:8b:b3:96:c4:24:15:9a:55:
         4e:2d:44:e6:fe:5c:f2:50:df:55:cf:19:f6:d1:5e:62:2d:d8:
         4d:9b:b5:e5:fa:9f:a7:a5:69:43:66:2a:87:36:e1:b5:ed:c0:
         f9:47:b2:ca
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
QTQ1RDExMC8GA1UEBRMoNUZDMTYxQUMwQUMxOUQ4ODkyQTZFNDI2NzZGQjBGQTlE
NENFREIyQzAeFw0yNjA4MjExNzAwMTlaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhODg4NDIzLTFmMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDsfwnMeQa/CuzSBtkIuR3LnZpw69RbTGYWpmJFTjC1hM6uFL5LsNBEZpCWYk4k
M7L3puBs6SBz5juSbAbiec/qVXJqMu8aBLsJR/wyriAhAtIppJdXpcfyYrg+7pL/
IF7QY51q71wTW+MdececOyi53Jjy4oTGapqborEnm0c2vIWFhL/DO6SnRa9KPN1J
/lLMc8qjJZycWXkEv3GPR4koVI8O++d5xk7rC2aLw7pfJ2O9dhUmzs7uHy7yGHXv
Ds3DvhmIAF55WZF9iLTv2ChFSkfihQSY7C7a/5N8C3QtRnDLfNvXBnfizjLy8Gfs
VaCxSYatzPJ0emt7Ef8q0Hb7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUrZyGJihC
3w27YfOyFQyWkZV4Cr4wHwYDVR0jBBgwFoAUX8FhrArBnYiSpuQmdvsPqdTO2yww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJBNDVELzc2NTI4QjA2N0I5
QjExRjE5MTI0QzM0MTcxQTMwRkJDL1g4RmhyQXJCbllpU3B1UW1kdnNQcWRUTzJ5
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvWDhGaHJBckJuWWlTcHVRbWR2c1BxZFRPMnl3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTQ1RC83NjUyOEIwNjdCOUIxMUYxOTEyNEMzNDE3MUEzMEZCQy9BNTVCNTZGQzgx
MjMxMUYxQTMxM0NDRkE3NEEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGg7FYwDQYJKoZIhvcNAQELBQADggEBACBfU7Xao2eiuKCg5SMcJPc0
JxIqYgoCxLn1TBSaXpgbBRfCPVW/9WkDNuj6LNOQeRaPZQ6ARh+3MHtPv7ePCW0q
6UlD24dFwaoh9jAHiy7ImFK07oIBZor5zT6eQpcGos08GH7TXlsTHPGn2hNjmwfL
1mtlUoplXiA2HlUtBP+7rl3V9G+k8Euo04nM1KtGFjMYhDgW4mVMTebv3V6thGf9
S5Sp2r0rGkxzf8jde6b/2We+gAoUsvZ9Zbx9xSRNMZP5JXxn1DMmWNUwqDoCTXmL
s5bEJBWaVU4tROb+XPJQ31XPGfbRXmIt2E2bteX6n6elaUNmKoc24bXtwPlHsso=
-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:49 2026 by rpki-client