Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
File:                     00926CA2D41F11F092947183C4F9AE02.roa (raw, json)
Hash identifier:          3FsjY4W+7e6UjIfuM4I6PgXH3/hgMZDSIiOMlANI138=
Subject key identifier:   88:94:A9:7A:7F:3C:10:89:CD:21:93:D9:A0:79:4E:EF:F7:41:14:9B
Certificate issuer:       /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
Certificate serial:       017E
Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa
Signing time:             Thu 24 Sep 2026 10:40:59 +0000
ROA not before:           Thu 24 Sep 2026 10:40:59 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        160.191.148.0/23 maxlen: 23
                          160.191.148.0/24 maxlen: 24
                          160.191.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl
                          rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF
        Validity
            Not Before: Sep 24 10:40:59 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ab4fe3b-5bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:c9:09:f1:ca:f8:4f:73:4f:91:11:f9:dd:
                    fc:09:3a:01:03:5f:36:09:ce:89:ae:6a:88:f4:c1:
                    80:fe:11:c6:35:d3:fe:24:96:48:f9:43:d8:c2:0c:
                    78:90:12:c6:cc:b1:f5:80:fb:33:b1:36:6a:74:3e:
                    05:8f:f2:0d:68:5a:88:61:c8:4a:e8:bc:78:28:6c:
                    bf:b1:ce:9b:3c:25:56:cb:d0:dc:a4:3f:86:5c:ea:
                    4c:00:ae:5a:cb:94:14:32:43:48:15:76:f0:06:7e:
                    91:81:d5:9e:b4:a3:bd:25:dd:47:e6:65:56:0c:b1:
                    dc:d8:e7:9a:1b:96:4a:2d:b7:6f:b8:a9:e3:3a:be:
                    a7:76:1d:37:8f:c8:a1:42:19:db:5d:51:98:23:9d:
                    cd:66:55:d7:d2:94:36:bd:31:a7:cd:89:27:f8:21:
                    5c:00:b1:a7:31:36:50:6a:df:4a:1c:3a:ea:85:f5:
                    3f:59:41:12:24:29:17:a9:1e:db:41:c2:00:28:b7:
                    2a:83:de:c4:3f:52:b5:8e:3e:a2:fc:a5:75:b5:40:
                    71:45:71:95:da:8b:4b:4b:40:c2:aa:c4:90:fa:1f:
                    79:ea:f4:60:3a:7d:a9:d3:ae:fa:02:7f:73:f5:8e:
                    4e:17:87:b9:21:76:63:de:bc:46:3b:d9:1e:e1:06:
                    62:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:94:A9:7A:7F:3C:10:89:CD:21:93:D9:A0:79:4E:EF:F7:41:14:9B
            X509v3 Authority Key Identifier:
                keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/00926CA2D41F11F092947183C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:03:20:08:42:15:3b:a9:02:34:14:07:2f:6e:4f:c2:71:de:
         5e:2a:d9:53:da:c7:0b:b5:4a:5d:d5:df:9a:56:de:ec:48:1f:
         c2:69:54:e4:24:2d:09:3b:9a:a4:85:87:67:41:37:a5:e4:7a:
         ea:58:57:f6:54:8e:47:87:6a:55:17:86:49:09:c0:2b:3a:2a:
         1e:a5:cc:70:66:70:b0:c7:47:19:e1:1a:d1:f3:25:27:a5:62:
         09:24:e8:f6:86:20:14:8b:c8:80:c1:df:c0:31:18:ee:02:4e:
         c7:73:14:1b:4d:e2:05:1e:f5:de:10:00:c3:5f:4c:a7:7c:a5:
         36:07:45:db:87:5a:bd:3e:ff:df:7e:74:32:0c:ae:34:9d:23:
         a3:00:86:a4:8f:de:24:0e:e8:34:1d:08:26:b0:07:d6:88:91:
         8b:91:6b:d1:0f:72:f4:2d:52:39:7f:84:c6:bb:20:01:8d:63:
         c0:58:52:4d:3d:9c:63:69:32:53:76:38:03:ba:51:6f:f2:a6:
         0f:cd:ee:46:ec:d7:1c:48:48:eb:e6:0c:df:ae:c5:33:20:b2:
         fa:e2:3f:a7:d9:0c:ab:94:bc:7d:3b:f8:2c:bd:d4:18:44:45:
         be:fd:7c:af:7d:f8:60:e9:b5:d9:28:3a:bd:7f:53:f0:9c:62:
         6f:a7:ee:e3
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG
RDI0MTMxREYwHhcNMjYwOTI0MTA0MDU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWI0ZmUzYi01YmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnzHJCfHK+E9zT5ER+d38CToBA182Cc6JrmqI9MGA/hHGNdP+JJZI+UPYwgx4
kBLGzLH1gPszsTZqdD4Fj/INaFqIYchK6Lx4KGy/sc6bPCVWy9DcpD+GXOpMAK5a
y5QUMkNIFXbwBn6RgdWetKO9Jd1H5mVWDLHc2OeaG5ZKLbdvuKnjOr6ndh03j8ih
QhnbXVGYI53NZlXX0pQ2vTGnzYkn+CFcALGnMTZQat9KHDrqhfU/WUESJCkXqR7b
QcIAKLcqg97EP1K1jj6i/KV1tUBxRXGV2otLS0DCqsSQ+h956vRgOn2p0676An9z
9Y5OF4e5IXZj3rxGO9ke4QZizwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIiUqXp/
PBCJzSGT2aB5Tu/3QRSbMB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB
N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN
ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzBGMTEvRTE2Mzg5MTA5QTdDMTFFRjg0OTUwRDMzQzRGOUFFMDIvMDA5MjZDQTJE
NDFGMTFGMDkyOTQ3MTgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoL+UMA0GCSqGSIb3DQEBCwUAA4IBAQBvAyAIQhU7qQI0FAcvbk/C
cd5eKtlT2scLtUpd1d+aVt7sSB/CaVTkJC0JO5qkhYdnQTel5HrqWFf2VI5Hh2pV
F4ZJCcArOioepcxwZnCwx0cZ4RrR8yUnpWIJJOj2hiAUi8iAwd/AMRjuAk7HcxQb
TeIFHvXeEADDX0ynfKU2B0Xbh1q9Pv/ffnQyDK40nSOjAIakj94kDug0HQgmsAfW
iJGLkWvRD3L0LVI5f4TGuyABjWPAWFJNPZxjaTJTdjgDulFv8qYPze5G7NccSEjr
5gzfrsUzILL64j+n2QyrlLx9O/gsvdQYREW+/Xyvffhg6bXZKDq9f1PwnGJvp+7j
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:00:45 2026 by rpki-client