Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/D1E54D607FF211EFB2910061C4F9AE02.roa
File:                     D1E54D607FF211EFB2910061C4F9AE02.roa (raw, json)
Hash identifier:          k0MfXQM09KAtZHYPxXlQtu9+sMaAuxEF9GkZtc/4WuM=
Subject key identifier:   B4:89:BC:BF:9F:DC:5A:34:D5:C5:76:17:81:A9:6B:27:D4:7A:15:59
Certificate issuer:       /CN=A91A9CD5/serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
Certificate serial:       0183
Authority key identifier: D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/D1E54D607FF211EFB2910061C4F9AE02.roa
Signing time:             Thu 15 Oct 2026 05:55:10 +0000
ROA not before:           Thu 15 Oct 2026 05:55:10 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     10143
IP address blocks:        160.187.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl
                          rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9CD5, serialNumber=D241F571CD63979630DC1F16AD4899D5BED566E5
        Validity
            Not Before: Oct 15 05:55:10 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ad06abe-1cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:aa:8b:88:77:42:fd:83:0e:e2:5d:89:2e:95:
                    c3:6b:13:8b:7c:ae:48:3f:9d:e3:d3:5d:1a:49:58:
                    61:f4:93:93:00:83:a9:bf:c3:ac:dd:dc:2c:06:cf:
                    cc:21:83:9f:3b:e4:48:ee:0e:f9:b0:f4:93:98:8e:
                    94:75:98:d9:ae:41:0d:ec:b6:5e:3e:d8:bf:13:e8:
                    18:d8:f4:df:ba:20:7d:13:8a:8a:b5:ed:49:16:52:
                    d7:85:4d:ab:83:d2:dc:64:a4:92:34:3a:d9:9c:5a:
                    25:b7:9e:39:9f:f8:ea:a3:6d:5a:55:47:17:e0:54:
                    ad:05:c7:fe:56:f1:2d:46:b9:30:a7:0f:82:7d:4f:
                    83:75:b3:48:6d:84:2f:0c:f7:b1:20:d9:21:40:08:
                    9d:84:21:74:45:31:11:4a:3a:be:48:a1:84:bb:7e:
                    99:18:31:51:30:87:ca:22:bd:9b:41:6b:91:0b:ce:
                    1d:44:12:b0:e4:be:3d:81:5c:bc:3e:14:a9:0f:17:
                    2e:8b:3f:23:5a:4c:7a:d5:12:7b:ef:9b:6a:3d:7d:
                    4f:e0:fe:fa:8a:4d:39:e6:18:c5:ea:73:39:ec:9d:
                    20:8f:d5:d0:cb:d2:c8:01:d5:ad:75:61:53:c0:c5:
                    c1:59:99:d5:ad:61:74:fe:2a:10:e2:cd:da:d5:58:
                    90:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:89:BC:BF:9F:DC:5A:34:D5:C5:76:17:81:A9:6B:27:D4:7A:15:59
            X509v3 Authority Key Identifier:
                keyid:D2:41:F5:71:CD:63:97:96:30:DC:1F:16:AD:48:99:D5:BE:D5:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0kH1cc1jl5Yw3B8WrUiZ1b7VZuU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CD5/71995F4E7FEF11EFA82DF639C4F9AE02/D1E54D607FF211EFB2910061C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:54:2e:6f:16:74:df:2e:32:4e:16:f8:e1:56:dc:58:2a:b3:
         6e:96:1a:e1:94:64:10:29:17:d1:76:23:5d:47:72:80:cc:59:
         63:f6:78:88:04:a4:5a:90:cc:b1:ac:2c:ae:24:a0:2d:fb:0d:
         b7:3e:23:41:3a:85:fa:5b:ad:a9:64:55:00:86:01:27:51:16:
         e6:74:37:a7:b7:66:ae:c8:60:af:0c:bd:51:0b:1a:b9:e7:f0:
         e2:31:f9:da:a7:c9:cb:b7:53:bc:f3:e7:66:ee:c9:ce:51:4a:
         92:97:b9:4d:1d:ed:b9:47:57:f3:cf:2d:0e:f4:2f:a1:50:9a:
         bf:91:30:6e:99:f9:2f:44:53:2f:a8:cb:0b:d3:2d:2b:04:0e:
         61:df:61:40:d2:f0:f0:6c:bf:db:5f:03:ce:ea:73:36:89:81:
         4a:f5:b1:bd:8d:b8:7c:0f:f9:f8:8d:08:e8:cf:17:cd:4f:74:
         09:01:c1:57:e1:0c:f3:0a:ec:0b:5b:62:43:0c:29:28:5b:8d:
         23:20:cd:18:75:cf:ff:d7:e0:8c:6c:e9:74:33:55:63:18:c3:
         57:6a:74:dd:2f:77:c9:f3:b9:8d:44:b5:63:1a:1d:4e:ae:6e:
         de:9f:5c:6a:a4:11:91:11:ef:11:7a:ad:1e:2e:8d:9e:3f:64:
         6f:13:12:97
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTlDRDUxMTAvBgNVBAUTKEQyNDFGNTcxQ0Q2Mzk3OTYzMERDMUYxNkFENDg5OUQ1
QkVENTY2RTUwHhcNMjYxMDE1MDU1NTEwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWQwNmFiZS0xY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjKqLiHdC/YMO4l2JLpXDaxOLfK5IP53j010aSVhh9JOTAIOpv8Os3dwsBs/M
IYOfO+RI7g75sPSTmI6UdZjZrkEN7LZePti/E+gY2PTfuiB9E4qKte1JFlLXhU2r
g9LcZKSSNDrZnFolt545n/jqo21aVUcX4FStBcf+VvEtRrkwpw+CfU+DdbNIbYQv
DPexINkhQAidhCF0RTERSjq+SKGEu36ZGDFRMIfKIr2bQWuRC84dRBKw5L49gVy8
PhSpDxcuiz8jWkx61RJ775tqPX1P4P76ik055hjF6nM57J0gj9XQy9LIAdWtdWFT
wMXBWZnVrWF0/ioQ4s3a1ViQCwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLSJvL+f
3Fo01cV2F4GpayfUehVZMB8GA1UdIwQYMBaAFNJB9XHNY5eWMNwfFq1ImdW+1Wbl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUNENS83MTk5NUY0RTdG
RUYxMUVGQTgyREY2MzlDNEY5QUUwMi8wa0gxY2Mxamw1WXczQjhXclVpWjFiN1Za
dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBrSDFjYzFqbDVZdzNCOFdyVWlaMWI3Vlp1VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTlDRDUvNzE5OTVGNEU3RkVGMTFFRkE4MkRGNjM5QzRGOUFFMDIvRDFFNTRENjA3
RkYyMTFFRkIyOTEwMDYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLtuMA0GCSqGSIb3DQEBCwUAA4IBAQAIVC5vFnTfLjJOFvjhVtxY
KrNulhrhlGQQKRfRdiNdR3KAzFlj9niIBKRakMyxrCyuJKAt+w23PiNBOoX6W62p
ZFUAhgEnURbmdDent2auyGCvDL1RCxq55/DiMfnap8nLt1O88+dm7snOUUqSl7lN
He25R1fzzy0O9C+hUJq/kTBumfkvRFMvqMsL0y0rBA5h32FA0vDwbL/bXwPO6nM2
iYFK9bG9jbh8D/n4jQjozxfNT3QJAcFX4QzzCuwLW2JDDCkoW40jIM0Ydc//1+CM
bOl0M1VjGMNXanTdL3fJ87mNRLVjGh1Orm7en1xqpBGREe8Req0eLo2eP2RvExKX
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:59:57 2026 by rpki-client