Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa
File:                     3117605AFF2E11F099836B6D89EE528E.roa (raw, json)
Hash identifier:          9SU96IyHt+q6dfn55IH1qHwjcN6QmVNgdXOAMwSq/nc=
Subject key identifier:   48:2C:EC:48:23:C6:F3:D2:AF:89:4B:D7:62:1E:DE:42:16:23:5F:D5
Certificate issuer:       /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
Certificate serial:       015E
Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa
Signing time:             Mon 03 Aug 2026 06:55:56 +0000
ROA not before:           Mon 03 Aug 2026 06:55:56 +0000
ROA not after:            Wed 02 Dec 2026 00:00:00 +0000
asID:                     153394
IP address blocks:        160.191.190.0/23 maxlen: 23
                          160.191.190.0/24 maxlen: 24
                          160.191.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 04:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B
        Validity
            Not Before: Aug  3 06:55:56 2026 GMT
            Not After : Dec  2 00:00:00 2026 GMT
        Subject: CN=6a703b7c-680e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:95:f9:6a:36:7f:8f:8c:55:4b:91:43:55:9f:
                    91:aa:aa:81:af:d1:a5:79:d9:18:58:1b:6f:1a:42:
                    a3:0a:5c:f2:b7:f3:ff:53:0f:db:a0:db:65:0e:5b:
                    6e:cb:93:dd:64:04:04:4e:eb:87:0c:ab:0c:e7:87:
                    c5:3d:ff:a8:90:4c:83:cd:b0:50:eb:be:c7:c9:58:
                    98:4b:94:68:32:e0:6f:38:01:11:2c:c1:a9:23:5c:
                    f0:66:99:80:c0:88:77:8a:c3:da:08:c5:ae:91:b1:
                    da:88:72:0c:04:46:b4:6f:d3:41:db:79:63:7b:85:
                    12:83:41:b7:d8:14:8c:f3:53:97:e0:30:d6:7a:c3:
                    33:a8:8f:36:e3:2d:4d:18:80:4d:4f:82:fc:5f:a0:
                    af:2e:91:ba:26:6d:c8:44:34:67:0d:6a:39:80:08:
                    af:96:6c:d8:a1:3d:fa:1a:3f:30:fa:b2:30:53:08:
                    b1:e5:4f:03:09:b2:f1:cb:78:92:02:ef:bc:40:17:
                    82:6e:ea:ba:84:8c:25:97:a2:4e:de:14:09:11:a9:
                    3a:3a:34:7e:12:04:ab:8d:c2:d3:2a:90:1e:ee:52:
                    83:2e:b7:3d:c8:22:5c:2b:7b:c6:f9:61:87:e6:b2:
                    1b:a7:01:1f:0e:57:4c:f3:fa:69:ae:6f:b4:6c:34:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2C:EC:48:23:C6:F3:D2:AF:89:4B:D7:62:1E:DE:42:16:23:5F:D5
            X509v3 Authority Key Identifier:
                keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:e0:89:04:66:fe:ac:74:e5:53:14:71:b5:0b:80:70:08:2b:
         8b:72:8c:81:5a:1e:d0:af:ab:99:9c:be:25:56:d6:e7:4b:bc:
         9d:bf:c8:e9:7e:4e:d0:31:0c:ab:19:8e:91:b0:97:45:9b:8e:
         fd:52:da:79:b3:01:1a:f8:63:c8:59:b6:11:de:50:57:71:1a:
         89:1a:c5:02:86:28:0d:65:1d:99:cd:7e:be:c8:c9:0a:5c:b4:
         03:0c:b3:6a:76:f2:5b:8e:c8:13:5a:bd:42:6f:8c:af:4b:a1:
         71:df:87:19:a7:d0:07:32:30:b2:17:de:de:0e:cf:4e:30:ed:
         e9:87:86:96:a8:e6:29:d7:89:fc:09:de:76:2e:12:c4:bc:1b:
         f5:45:07:10:d6:5a:87:f2:97:a5:12:6c:7e:16:e1:05:05:95:
         00:26:8d:05:6b:44:b5:ca:09:32:04:8b:de:17:11:cb:13:88:
         90:c3:4c:5e:7c:ce:79:0e:74:d8:ad:72:67:fc:43:ea:e2:2f:
         91:c4:c6:e4:d5:16:fb:fe:c8:7b:92:87:ce:79:ed:0e:3d:a1:
         89:e0:f1:e0:1c:18:41:43:50:a6:43:6a:e1:ea:f4:d5:0c:4c:
         35:a4:4a:da:8d:3b:8a:d1:8c:15:cf:ae:28:60:b3:4f:cc:8f:
         c1:4f:36:c8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy
NENERjVFNkIwHhcNMjYwODAzMDY1NTU2WhcNMjYxMjAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTcwM2I3Yy02ODBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAh5X5ajZ/j4xVS5FDVZ+RqqqBr9GledkYWBtvGkKjClzyt/P/Uw/boNtlDltu
y5PdZAQETuuHDKsM54fFPf+okEyDzbBQ677HyViYS5RoMuBvOAERLMGpI1zwZpmA
wIh3isPaCMWukbHaiHIMBEa0b9NB23lje4USg0G32BSM81OX4DDWesMzqI824y1N
GIBNT4L8X6CvLpG6Jm3IRDRnDWo5gAivlmzYoT36Gj8w+rIwUwix5U8DCbLxy3iS
Au+8QBeCbuq6hIwll6JO3hQJEak6OjR+EgSrjcLTKpAe7lKDLrc9yCJcK3vG+WGH
5rIbpwEfDldM8/pprm+0bDQDtQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEgs7Egj
xvPSr4lL12Ie3kIWI1/VMB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD
RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY
bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUJBNDYvRkY4QUEyNEE5Q0Y1MTFFRjhBNkM4NTgxQzRGOUFFMDIvMzExNzYwNUFG
RjJFMTFGMDk5ODM2QjZEODlFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoL++MA0GCSqGSIb3DQEBCwUAA4IBAQAv4IkEZv6sdOVTFHG1C4Bw
CCuLcoyBWh7Qr6uZnL4lVtbnS7ydv8jpfk7QMQyrGY6RsJdFm479Utp5swEa+GPI
WbYR3lBXcRqJGsUChigNZR2ZzX6+yMkKXLQDDLNqdvJbjsgTWr1Cb4yvS6Fx34cZ
p9AHMjCyF97eDs9OMO3ph4aWqOYp14n8Cd52LhLEvBv1RQcQ1lqH8pelEmx+FuEF
BZUAJo0Fa0S1ygkyBIveFxHLE4iQw0xefM55DnTYrXJn/EPq4i+RxMbk1Rb7/sh7
kofOee0OPaGJ4PHgHBhBQ1CmQ2rh6vTVDEw1pErajTuK0YwVz64oYLNPzI/BTzbI
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:31:17 2026 by rpki-client