Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/F0D45092BD4D11F0B4019718C4F9AE02.roa
File:                     F0D45092BD4D11F0B4019718C4F9AE02.roa (raw, json)
Hash identifier:          UxRNcFWWBgujwkCG1nsERvTPh4W+tQkhJi1fOJzqfLE=
Subject key identifier:   5B:3F:51:5E:DB:08:21:85:3A:8E:F5:A5:E1:8E:66:18:7D:48:CA:37
Certificate issuer:       /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial:       0114
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/F0D45092BD4D11F0B4019718C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:56:37 +0000
ROA not before:           Mon 05 Jan 2026 05:27:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     20200
IP address blocks:        160.250.10.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:20:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Validity
            Not Before: Jan  5 05:27:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5a525-b24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9a:5b:6d:a0:1d:23:b0:c4:6f:9b:16:48:08:
                    e2:bc:ca:03:68:53:4b:a0:ce:e1:7d:6c:bb:a6:b3:
                    f8:16:fa:88:d7:34:c2:e3:50:0e:04:ab:53:9e:d2:
                    49:8d:85:a8:58:fc:bd:dc:d8:48:fb:88:0b:09:10:
                    5e:be:31:5d:3b:3e:e5:94:b3:34:9b:ec:34:b7:0a:
                    40:d7:56:45:32:d7:cd:aa:df:65:c2:86:5a:4b:af:
                    1e:4c:2e:f8:b0:7d:6f:46:26:06:ba:fb:ed:9f:40:
                    9c:96:28:12:ab:71:7c:84:af:11:31:d6:8e:9e:85:
                    c6:4c:4d:94:e3:dc:70:af:67:bf:57:82:5d:5c:a6:
                    5a:78:24:9f:df:36:ce:3b:4f:41:68:46:34:80:48:
                    33:ee:a9:8d:f0:42:54:aa:2a:a4:81:03:48:f3:41:
                    73:d6:7a:d3:0c:23:10:1f:81:d3:fd:73:97:2d:05:
                    fd:a5:65:cf:e0:57:65:9b:84:4d:f2:e3:05:9f:02:
                    fd:cd:62:44:e3:36:9e:6d:d3:7b:53:d6:7c:92:89:
                    4b:a1:bc:ed:61:2c:76:2e:03:c3:32:47:40:d1:7b:
                    4b:a7:9d:12:d0:c6:61:d4:36:ae:af:95:5a:8f:f6:
                    d9:5a:a0:fe:58:5e:08:21:14:6c:3b:02:5d:36:3b:
                    65:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3F:51:5E:DB:08:21:85:3A:8E:F5:A5:E1:8E:66:18:7D:48:CA:37
            X509v3 Authority Key Identifier:
                keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/F0D45092BD4D11F0B4019718C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:40:5a:bd:76:8b:4c:7e:95:f0:0f:d2:dd:83:f0:ae:81:71:
         42:63:57:07:a7:61:fc:0e:06:3a:d7:a4:b7:5d:86:50:6f:fd:
         86:94:f5:2b:63:89:f5:41:bc:0a:24:df:65:35:94:d5:9c:75:
         73:d7:fc:50:51:47:55:a2:61:82:4d:19:b9:bb:85:76:8b:ca:
         71:be:96:b4:e8:9c:f1:45:91:71:28:34:f4:ec:bf:19:8c:17:
         86:9d:d7:40:4c:5c:7f:fe:6b:4a:13:33:58:de:29:be:89:41:
         69:3a:4c:55:29:de:dd:b1:ae:93:e1:d1:27:da:35:5e:8d:db:
         78:1b:58:32:f0:19:ad:6d:de:0b:90:b1:b3:d9:6b:83:15:5d:
         e4:0f:d0:0d:4a:82:a2:f3:34:c9:f4:a9:e7:41:4c:79:f5:34:
         29:f1:18:f1:37:6b:1f:02:33:b7:26:a3:e3:fe:90:48:63:8d:
         76:72:e9:10:60:33:fb:5c:dd:e9:05:81:07:55:83:d1:fc:8f:
         23:83:79:7a:5a:97:22:41:1d:cc:c5:db:5f:eb:d1:04:20:11:
         31:5e:5f:f3:c7:94:e0:3d:7f:ca:13:fb:f5:a0:cd:1a:15:1c:
         34:51:02:fa:55:a1:f7:c8:2f:cf:c2:53:e2:a2:cc:68:49:06:
         13:e7:93:c4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY5MUExMTAvBgNVBAUTKDc0Q0I4NUE2MzQ5QzNDQTYxODRBRUNGNzBGODNBRkZE
RkNFMEE3RjcwHhcNMjYwMTA1MDUyNzQwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTUyNS1iMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZpbbaAdI7DEb5sWSAjivMoDaFNLoM7hfWy7prP4FvqI1zTC41AOBKtTntJJ
jYWoWPy93NhI+4gLCRBevjFdOz7llLM0m+w0twpA11ZFMtfNqt9lwoZaS68eTC74
sH1vRiYGuvvtn0CcligSq3F8hK8RMdaOnoXGTE2U49xwr2e/V4JdXKZaeCSf3zbO
O09BaEY0gEgz7qmN8EJUqiqkgQNI80Fz1nrTDCMQH4HT/XOXLQX9pWXP4Fdlm4RN
8uMFnwL9zWJE4zaebdN7U9Z8kolLobztYSx2LgPDMkdA0XtLp50S0MZh1Daur5Va
j/bZWqD+WF4IIRRsOwJdNjtl4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFs/UV7b
CCGFOo71peGOZhh9SMo3MB8GA1UdIwQYMBaAFHTLhaY0nDymGErs9w+Dr/384Kf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkxQS83NTFGMzFEQUEy
ODUxMUVGODQyQjk0MTBDNEY5QUUwMi9kTXVGcGpTY1BLWVlTdXozRDRPdl9memdw
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RNdUZwalNjUEtZWVN1ejNENE92X2Z6Z3BfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY5MUEvNzUxRjMxREFBMjg1MTFFRjg0MkI5NDEwQzRGOUFFMDIvRjBENDUwOTJC
RDREMTFGMEI0MDE5NzE4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPoKMA0GCSqGSIb3DQEBCwUAA4IBAQCXQFq9dotMfpXwD9Ldg/Cu
gXFCY1cHp2H8DgY616S3XYZQb/2GlPUrY4n1QbwKJN9lNZTVnHVz1/xQUUdVomGC
TRm5u4V2i8pxvpa06JzxRZFxKDT07L8ZjBeGnddATFx//mtKEzNY3im+iUFpOkxV
Kd7dsa6T4dEn2jVejdt4G1gy8Bmtbd4LkLGz2WuDFV3kD9ANSoKi8zTJ9KnnQUx5
9TQp8RjxN2sfAjO3JqPj/pBIY412cukQYDP7XN3pBYEHVYPR/I8jg3l6WpciQR3M
xdtf69EEIBExXl/zx5TgPX/KE/v1oM0aFRw0UQL6VaH3yC/PwlPiosxoSQYT55PE
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:24 2026 by rpki-client