Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/7AF7C814840211F1973E26E995A30FBC.roa
File:                     7AF7C814840211F1973E26E995A30FBC.roa (raw, json)
Hash identifier:          is6JOCj8UH69lDcFhNaVF+Wuwi+xpA8ahsitf2M2Xz8=
Subject key identifier:   9D:87:3D:25:98:71:04:A2:6D:3C:57:E9:0E:27:62:10:55:66:E2:82
Certificate issuer:       /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
Certificate serial:       0179
Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/7AF7C814840211F1973E26E995A30FBC.roa
Signing time:             Mon 20 Jul 2026 06:16:02 +0000
ROA not before:           Mon 20 Jul 2026 06:16:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147180
IP address blocks:        160.191.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 06:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982
        Validity
            Not Before: Jul 20 06:16:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a5dbd21-7dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:e7:bd:73:fb:e2:11:f0:6c:d8:81:0d:1b:
                    d4:19:54:13:0f:0e:b8:d5:05:ad:57:22:6b:09:74:
                    d3:68:95:cb:00:3b:c1:33:8b:ac:b5:6b:65:30:7e:
                    5d:89:f1:fc:be:5e:0a:7a:0c:87:77:3d:77:eb:94:
                    f8:f7:24:e6:2e:a6:cd:5f:7c:62:07:f9:fe:33:c4:
                    f3:49:d1:0d:ef:f5:db:b8:a7:f0:4e:01:26:7f:fa:
                    90:66:c0:8b:30:d1:5c:40:f4:30:98:57:95:d1:1b:
                    10:74:04:41:c4:29:8d:ab:e7:78:bb:ef:b4:f8:dd:
                    81:63:c5:49:c4:cc:ab:6e:e8:43:71:11:b7:aa:5b:
                    ba:f1:fd:64:65:65:55:00:2b:79:ca:37:60:c3:f9:
                    3a:b6:c8:17:fa:56:f4:cd:77:53:4b:ac:04:d6:4b:
                    94:d1:d8:45:6e:d7:e9:e0:05:4e:e6:b3:b1:d0:e1:
                    12:21:2a:2e:ea:1a:36:05:4b:a1:a6:27:59:8d:df:
                    b1:8d:e8:0b:4b:08:43:f6:ef:34:36:9f:f0:b7:bb:
                    b2:d4:25:43:f0:d8:16:42:57:f6:13:7d:c4:dc:ec:
                    f3:bf:bf:22:11:62:17:0f:eb:39:49:a5:6f:01:9b:
                    3e:ab:17:7a:e7:5a:2b:06:e9:7d:30:bf:72:78:c8:
                    74:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:3D:25:98:71:04:A2:6D:3C:57:E9:0E:27:62:10:55:66:E2:82
            X509v3 Authority Key Identifier:
                keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/7AF7C814840211F1973E26E995A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:ba:ee:fc:5e:8b:b7:4a:11:01:91:dd:8b:f5:5d:73:2b:f0:
         cf:f0:6f:53:a4:a5:81:21:65:c4:0d:08:b8:01:59:25:81:2d:
         58:85:eb:69:8d:0b:4b:8b:cc:f8:23:95:6a:7c:e3:e9:d6:f2:
         3e:45:a6:bd:68:38:6b:2a:5e:af:90:52:ff:fa:81:9c:e1:b2:
         88:3c:6c:26:66:94:05:45:12:6b:f3:2b:a6:57:a5:c0:1c:76:
         94:76:87:ce:33:47:8b:12:58:52:df:1a:76:d4:1a:3a:af:70:
         0f:8d:da:e8:f6:53:f9:fc:90:a2:40:0b:7f:1e:b0:13:11:bb:
         94:6c:f3:fc:71:b8:7b:92:e9:3e:c4:89:e7:2d:c8:23:14:67:
         7d:3d:36:d0:17:6c:08:a9:0c:8f:32:86:85:6b:21:9a:56:3f:
         4b:3d:2b:69:0d:9b:5c:de:0e:59:10:b6:85:bb:27:cb:f6:6e:
         89:83:f2:5f:41:ac:27:ed:1d:36:68:b1:13:2e:ee:c2:e2:10:
         12:26:95:42:37:4f:90:9d:66:6c:ed:00:98:97:ca:90:48:d3:
         6a:f8:90:fa:d5:80:af:a6:1d:3a:80:98:4d:56:e2:10:07:fd:
         42:8a:8e:af:9a:bb:ee:5a:f9:42:e1:ca:15:2a:dd:5c:81:00:
         c6:30:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:24 2026 by rpki-client