Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
File:                     F67388B8C8EE11F0B296D571C4F9AE02.roa (raw, json)
Hash identifier:          OClSWqz82WoSAPm5/jbmXMUXfN5PJ2BTJfPk4mm6oYA=
Subject key identifier:   4C:E9:5C:ED:7B:31:DD:05:43:43:84:38:6D:2C:27:38:0F:E3:F3:40
Certificate issuer:       /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
Certificate serial:       0187
Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa
Signing time:             Fri 03 Jul 2026 05:32:19 +0000
ROA not before:           Fri 03 Jul 2026 05:32:19 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     138997
IP address blocks:        160.22.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:53:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF
        Validity
            Not Before: Jul  3 05:32:19 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a474963-9980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:19:a5:ae:fe:fa:75:0a:2d:38:51:19:f2:bf:
                    c5:21:65:34:c4:c2:e2:ce:2c:1b:79:32:21:a6:63:
                    dc:19:8d:62:e4:c4:a0:16:24:c1:4c:aa:91:78:62:
                    f3:c5:c8:ff:26:3a:66:01:16:a7:59:f8:3b:bb:e8:
                    8d:2a:77:17:2c:9e:0c:f7:32:fe:c4:4c:89:04:90:
                    f7:8b:04:15:bf:b6:06:72:d2:54:ed:bc:bd:10:de:
                    e1:ba:b3:07:c4:d1:ac:8a:28:a5:84:d3:7f:71:ee:
                    81:9e:16:46:fa:38:08:fe:99:2f:4f:fc:ee:c2:ed:
                    92:df:f2:61:48:54:e1:76:4a:df:c6:27:05:48:27:
                    3e:ff:79:4a:03:f8:eb:ec:7a:15:44:c0:4c:64:c4:
                    7a:2a:0e:fd:7f:de:50:c2:7e:2b:ec:4a:85:45:b5:
                    8a:bb:52:54:02:83:70:28:e6:9d:15:3f:5f:9b:87:
                    b8:e4:4a:bc:4d:46:cd:02:79:a8:07:12:df:5a:63:
                    25:9d:86:aa:8a:9b:be:3e:2f:15:21:71:ce:d8:50:
                    c8:61:99:ef:d5:30:31:54:7e:06:65:30:c2:f5:ea:
                    4a:d6:54:e5:4b:18:7f:23:47:4b:79:9d:8a:11:73:
                    98:64:2c:4c:02:93:9d:3f:b6:04:e2:fd:36:49:90:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:5C:ED:7B:31:DD:05:43:43:84:38:6D:2C:27:38:0F:E3:F3:40
            X509v3 Authority Key Identifier:
                keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/F67388B8C8EE11F0B296D571C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:15:82:1d:39:7e:a6:c7:22:a5:5a:f4:9c:88:55:28:8f:a3:
         6a:a2:98:43:b8:1f:29:a8:09:2b:1b:34:dd:12:6c:71:ae:f3:
         24:b7:0f:ab:a1:3d:56:65:64:9b:55:a8:6c:03:98:db:e2:40:
         27:f7:25:f9:db:22:6f:d8:07:e9:1e:d0:91:1d:b2:3d:d0:f3:
         8c:2b:d4:42:33:9f:7e:51:d9:02:1d:a9:12:d3:26:4e:a1:8e:
         53:04:96:cc:4e:9a:a1:a9:1d:34:68:0a:e4:e9:49:62:28:c1:
         9c:6d:e7:94:51:a1:e4:fe:4c:ef:ea:38:35:0b:3e:a0:6c:ed:
         83:99:fd:52:00:b6:0e:4f:2b:59:3a:97:22:21:1d:ee:73:bb:
         95:f3:66:11:15:de:05:7c:da:00:9f:20:18:f3:28:0a:75:73:
         14:cf:9b:f7:aa:f9:a2:5b:1f:57:83:dc:c3:ee:00:93:fd:d1:
         63:04:08:c0:a6:82:d7:4b:c1:06:51:b9:46:e2:8f:a6:f8:7a:
         f9:cc:f4:fb:9b:84:60:49:d8:31:e3:0d:1d:49:17:2e:7b:74:
         32:5c:32:f8:56:49:a6:16:b9:cc:0a:4f:d1:c8:cf:58:08:bf:
         26:ef:c8:e1:83:8c:a7:d6:aa:b9:98:a2:dc:9b:eb:da:bc:04:
         b3:06:56:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:00:54 2026 by rpki-client