Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/8B561272865211F19521866891A30FBC.roa
File:                     8B561272865211F19521866891A30FBC.roa (raw, json)
Hash identifier:          CmE/ScQDfyD7qcIIyHlSoauvCQK1eBuHZtmN3CfgXTY=
Subject key identifier:   59:60:53:B5:1C:DC:56:45:07:30:E3:9F:41:8D:84:5D:5A:85:88:85
Certificate issuer:       /CN=A91D2432/serialNumber=8A6A383F260F6D4D23575AE9F96BDCA44AF08161
Certificate serial:       05
Authority key identifier: 8A:6A:38:3F:26:0F:6D:4D:23:57:5A:E9:F9:6B:DC:A4:4A:F0:81:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/8B561272865211F19521866891A30FBC.roa
Signing time:             Thu 23 Jul 2026 04:54:12 +0000
ROA not before:           Thu 23 Jul 2026 04:54:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150670
IP address blocks:        160.236.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.crl
                          rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2432, serialNumber=8A6A383F260F6D4D23575AE9F96BDCA44AF08161
        Validity
            Not Before: Jul 23 04:54:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a619e73-8ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3e:80:dd:4e:24:59:04:e5:d1:69:64:d6:bf:
                    a9:38:da:12:83:4d:d2:20:b2:37:81:66:99:cb:59:
                    8d:93:ad:7e:e3:a0:3c:bb:90:64:31:bb:56:bd:b6:
                    26:1d:54:b6:37:c3:06:d2:da:3c:7b:03:29:ff:42:
                    ff:34:8c:9d:da:fb:0e:76:e0:93:6a:d3:20:fd:f1:
                    d0:92:f1:c7:e5:d7:22:7b:fa:35:76:fb:18:9b:ec:
                    d6:37:b8:9b:f7:b2:97:ad:40:28:ca:19:06:52:64:
                    cf:c6:b4:22:1a:dc:4e:e8:d4:19:b3:5f:55:52:bd:
                    71:d9:d8:1c:d8:27:61:61:57:c6:e7:66:40:70:7c:
                    d4:8b:22:c3:b8:06:21:36:4d:4f:f4:43:09:8c:ce:
                    a0:bd:72:c9:aa:c8:fa:55:6c:f9:5b:da:5a:96:ef:
                    e8:6c:e7:45:6a:11:84:f1:a6:bb:b5:66:ee:c6:1e:
                    7f:74:fa:af:48:e4:e2:e3:ab:f5:0f:9c:dd:1a:07:
                    03:cc:7e:9a:5e:8d:9a:a6:68:b5:50:3f:e3:b7:8c:
                    6b:1b:f2:0d:7d:9f:25:47:7b:67:63:a1:0b:16:5d:
                    c0:60:82:c8:f9:cb:45:07:23:75:97:f1:b4:4f:71:
                    b7:fc:33:f2:bc:73:8e:d4:ba:fc:69:94:84:72:94:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:53:B5:1C:DC:56:45:07:30:E3:9F:41:8D:84:5D:5A:85:88:85
            X509v3 Authority Key Identifier:
                keyid:8A:6A:38:3F:26:0F:6D:4D:23:57:5A:E9:F9:6B:DC:A4:4A:F0:81:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/imo4PyYPbU0jV1rp-WvcpErwgWE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/imo4PyYPbU0jV1rp-WvcpErwgWE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2432/9BCD2D9682CB11F1B54AB87D77A30FBC/8B561272865211F19521866891A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:dc:30:bb:bf:f2:cc:df:f4:5a:17:9a:ac:bf:a3:68:cf:
         49:3d:2b:79:06:a0:6d:34:f9:d0:72:d4:38:0a:73:90:dd:6b:
         19:47:2b:81:42:79:6d:f8:8a:d6:d2:e9:72:22:68:2c:fb:50:
         76:b0:ef:70:a3:12:72:a6:7c:b2:ca:26:d3:ba:55:6d:65:d9:
         ae:71:0e:ef:18:63:b6:29:bb:fd:b9:da:53:5e:78:98:99:10:
         02:92:d1:12:d6:ea:0c:26:9a:5c:01:81:e2:45:9e:c1:74:30:
         62:7f:44:fe:75:7a:54:b0:ba:eb:5d:94:ec:f8:d4:8b:67:43:
         6b:9e:74:0f:01:35:69:25:94:cb:a2:92:d5:4e:87:28:16:5d:
         bb:d9:5d:a3:dd:99:0c:f7:99:ec:51:7b:b5:14:ce:4f:94:8d:
         4d:d6:90:12:7a:6d:07:fa:64:0b:b2:cc:01:cf:15:d3:26:04:
         7b:75:68:51:4f:b7:51:6d:31:53:78:d5:f7:ce:e2:34:26:14:
         d4:02:e8:1a:75:e9:be:87:2a:3d:8f:f9:45:54:4e:e7:5d:c1:
         f4:5e:9d:59:20:8f:b5:8c:e2:81:46:37:a3:81:28:d7:2e:d7:
         97:b1:52:9f:8a:90:fa:1b:b0:00:99:14:10:41:95:92:a1:66:
         63:72:a7:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:28:44 2026 by rpki-client