Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/186DFCCABA8211F198D0A4F93811F970.roa
File:                     186DFCCABA8211F198D0A4F93811F970.roa (raw, json)
Hash identifier:          4ZIixXdvG3KYmU6SNe16q5BU1y1T2x6Uxw8VNDU+Jig=
Subject key identifier:   90:41:2C:0F:02:23:1F:9D:B6:4E:1C:DD:41:88:A2:CF:6A:B1:C3:90
Certificate issuer:       /CN=A9170D3E/serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
Certificate serial:       0168
Authority key identifier: 60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/186DFCCABA8211F198D0A4F93811F970.roa
Signing time:             Sun 27 Sep 2026 14:45:34 +0000
ROA not before:           Sun 27 Sep 2026 14:45:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        160.191.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl
                          rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 08 Oct 2026 06:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170D3E, serialNumber=606EB2958254AC98B6336EAA41AC80B2DCB19C6E
        Validity
            Not Before: Sep 27 14:45:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ab92c0e-14af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:3d:a6:e3:13:96:6f:d5:df:22:11:c3:d8:
                    3d:b6:c1:b4:7b:81:46:c0:20:85:8c:13:96:75:f2:
                    58:9f:52:77:9b:44:3f:17:14:5d:73:de:cc:0a:21:
                    5f:af:e4:89:a0:45:db:4d:ee:05:38:9a:23:86:2a:
                    ae:10:d2:aa:6f:ee:01:14:ab:6e:d7:0a:96:8f:67:
                    89:30:9e:04:b9:75:23:51:19:81:f1:c2:83:e0:e8:
                    29:59:f6:d0:88:73:65:17:98:06:5a:c2:c4:8b:69:
                    2c:b8:4c:d0:15:41:6e:52:74:85:3f:c4:00:9c:21:
                    d5:26:82:0f:c0:86:2b:ab:b2:91:f3:0c:0c:44:be:
                    54:00:a7:da:94:e3:3b:53:86:b1:f5:c4:a5:c4:09:
                    90:85:8d:fe:77:32:18:eb:d8:e8:6e:e1:89:8f:d5:
                    ce:59:1c:67:b7:09:41:04:9a:9e:9d:32:9c:28:f7:
                    d6:d5:89:95:65:a6:53:6b:26:d7:0f:57:02:dc:cb:
                    d0:89:e2:8f:3f:9c:39:69:40:7b:56:44:1e:4e:47:
                    f1:12:3c:82:93:66:e5:98:8d:6c:0e:87:ac:83:8e:
                    18:1e:1d:78:2d:69:e6:75:98:cb:d2:e6:68:f3:21:
                    ed:00:26:9a:9d:22:9c:8f:76:a7:9a:b6:53:46:65:
                    6d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:41:2C:0F:02:23:1F:9D:B6:4E:1C:DD:41:88:A2:CF:6A:B1:C3:90
            X509v3 Authority Key Identifier:
                keyid:60:6E:B2:95:82:54:AC:98:B6:33:6E:AA:41:AC:80:B2:DC:B1:9C:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/YG6ylYJUrJi2M26qQayAstyxnG4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YG6ylYJUrJi2M26qQayAstyxnG4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/B5DFC8C09FD711EF9E38A837C4F9AE02/186DFCCABA8211F198D0A4F93811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:a8:a0:c7:3e:d2:fa:e0:2e:7b:db:94:68:3c:f5:8f:a8:b6:
         29:f2:c8:f9:be:f0:d3:2b:1d:a1:5e:cd:af:f0:0c:ea:84:33:
         cc:54:5f:ed:e9:97:02:68:c1:1f:8e:e5:29:6c:86:bb:82:0d:
         85:85:5b:d2:27:0b:c4:4f:cf:a9:a7:48:5e:c5:a4:3a:e4:82:
         dd:2a:db:a9:6c:d6:9b:ed:36:32:ce:eb:3f:81:5d:8c:38:6b:
         e6:86:d6:1d:1f:af:88:73:7a:3c:fc:59:57:d3:c4:b3:da:25:
         72:5a:7d:5d:f4:e2:eb:4f:06:4d:40:58:1f:88:d9:10:cd:39:
         4a:06:56:e0:bc:8e:b3:3f:86:e8:e2:9a:21:2e:f1:fa:aa:8e:
         b9:50:b8:6f:36:61:12:07:70:8d:6e:53:f1:33:a4:94:1d:82:
         7e:1e:45:1c:9a:71:83:a9:42:79:f9:87:d1:94:eb:1f:32:e9:
         d2:2c:97:63:69:ac:3a:a3:88:55:8f:bd:3d:ac:04:e9:d6:16:
         f8:75:2d:59:79:30:8b:76:63:46:fe:92:09:be:62:4f:a9:45:
         42:6b:77:7c:1e:97:8f:18:a7:18:0a:7d:b8:d4:3a:2c:7d:ac:
         ec:a2:9f:a1:9c:86:25:80:68:35:54:5a:17:be:ab:2b:e0:60:
         28:89:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 11:18:07 2026 by rpki-client