Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/992A7358004211F0AC90656CC4F9AE02.roa
File:                     992A7358004211F0AC90656CC4F9AE02.roa (raw, json)
Hash identifier:          p1iNzs7m8iHrfQ8AnJhFGKvDY9F4t1QWaHIUzSsJTWE=
Subject key identifier:   0B:D0:6A:EC:AB:D2:F5:06:FA:EF:D9:8C:F0:A4:39:12:DF:3C:9D:5B
Certificate issuer:       /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial:       C4
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/992A7358004211F0AC90656CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:52:44 +0000
ROA not before:           Wed 17 Dec 2025 06:25:06 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     138590
IP address blocks:        160.191.208.0/24 maxlen: 24
                          160.191.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
                          rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
        Validity
            Not Before: Dec 17 06:25:06 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a41a7c-4617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8d:c0:c0:bc:85:24:70:2d:c0:ae:a5:82:6e:
                    4b:cb:c0:11:0d:4b:df:af:46:de:c3:c8:17:fe:29:
                    c0:cd:51:31:ff:73:8d:ff:d8:be:2b:70:ed:9d:10:
                    db:a6:3b:40:f9:90:5e:c2:bb:e8:9d:f5:ae:ce:51:
                    34:16:90:2a:81:82:23:47:81:4e:44:7c:d1:d7:15:
                    43:bd:36:77:29:d1:7d:65:d3:ab:46:6f:ad:38:fe:
                    d6:b9:0e:bd:25:b3:60:05:50:d8:84:5f:09:0c:07:
                    59:2a:90:bf:96:b2:e3:5b:78:73:7e:c0:d9:a0:86:
                    d9:c2:fb:50:a0:4d:e4:29:80:ed:41:6e:c6:11:ce:
                    d8:7e:6b:61:3d:ae:10:76:eb:3b:b1:b7:8b:9c:97:
                    8a:4a:4e:63:77:12:ba:10:0b:67:23:61:82:8a:b9:
                    7a:bb:04:65:8f:fa:9b:22:92:d9:81:c6:ae:44:de:
                    06:0e:82:af:6a:02:59:86:be:f0:eb:e3:6b:89:f3:
                    de:5b:14:68:2f:5b:06:6c:9a:a8:f4:14:d1:45:ed:
                    c9:81:ef:24:f4:03:78:15:32:28:28:af:a4:c1:10:
                    0a:2e:1b:14:c5:67:90:df:28:f4:ed:8c:53:09:36:
                    01:4e:26:19:8c:f4:7d:f3:89:3d:14:c9:87:65:09:
                    71:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D0:6A:EC:AB:D2:F5:06:FA:EF:D9:8C:F0:A4:39:12:DF:3C:9D:5B
            X509v3 Authority Key Identifier:
                keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/992A7358004211F0AC90656CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:e1:3d:5a:fb:c0:35:a8:3e:4a:22:4e:d1:62:24:47:d4:fe:
         f5:99:bb:c8:b5:9b:f8:87:d5:80:6c:87:5e:e7:14:c8:9e:3a:
         aa:2d:52:d5:79:b7:f9:39:40:98:73:ac:30:70:a8:c2:42:38:
         85:a2:b6:6c:fd:81:c1:a9:0c:24:2d:47:f7:06:fd:f0:d2:b4:
         b4:85:2a:e9:a5:b6:03:69:2f:e6:4e:d1:d1:b4:fc:b4:18:c7:
         1f:7d:f8:ce:ac:11:01:d2:81:66:78:04:d0:cd:68:8d:54:24:
         34:bf:46:61:66:32:e3:92:d6:80:e5:82:28:14:ab:57:4d:ed:
         67:9a:0f:03:ca:c0:ec:46:d5:5e:9a:97:22:56:ae:2c:e2:c8:
         07:24:9e:98:c2:11:73:18:c9:cb:43:3a:f2:a6:29:2f:d0:b7:
         08:4e:7f:86:0d:fe:7f:67:92:32:6d:2e:fb:98:1b:b4:42:75:
         3f:74:a4:3c:29:96:f9:c5:c6:06:30:e0:b4:6d:30:75:6c:4e:
         52:f9:fe:7d:19:e8:ed:b8:ed:49:14:a2:96:80:42:c2:e0:19:
         63:93:46:8b:3a:3e:3f:db:99:e8:b2:a8:95:c3:9c:1d:6d:a5:
         a0:a7:53:e7:ad:0a:27:1c:79:96:49:e1:ff:70:d2:6d:35:c7:
         65:35:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:31:11 2026 by rpki-client