Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5AF3ECBEAFBA11EF91955453C4F9AE02.roa
File:                     5AF3ECBEAFBA11EF91955453C4F9AE02.roa (raw, json)
Hash identifier:          oDbq8aHQpmwpTVbKMN5yg6duwCoRhyPVojQ6jr19VtY=
Subject key identifier:   C7:F5:6D:CC:FA:74:FC:45:23:7D:7B:23:AE:01:D8:41:10:A2:AA:40
Certificate issuer:       /CN=A911E0B4/serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
Certificate serial:       F3
Authority key identifier: 0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5AF3ECBEAFBA11EF91955453C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:12:39 +0000
ROA not before:           Wed 21 Jan 2026 05:24:51 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139043
IP address blocks:        160.250.50.0/24 maxlen: 24
                          160.250.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl
                          rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E0B4, serialNumber=0FD4437521DB5C0BC99E45B59754FF7B671F86F3
        Validity
            Not Before: Jan 21 05:24:51 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41f27-dd0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:4c:e4:cd:9c:ca:69:10:8d:43:1d:68:51:
                    a7:6e:97:76:3e:ca:ff:a7:a2:b5:fb:45:35:b5:56:
                    c1:5e:13:e6:e9:b6:3a:72:c9:81:2b:45:83:ef:82:
                    ac:25:8c:7b:c5:77:4d:7c:fb:f3:a8:f4:3f:46:f7:
                    c6:02:5e:61:5c:7a:c3:9f:82:41:e9:50:fa:20:48:
                    e4:5e:7b:9d:7c:03:b4:3e:b2:f5:0e:22:a1:e1:cd:
                    5d:b1:16:1a:8c:5e:68:83:bb:e6:0e:d3:a8:ee:e1:
                    0b:c2:ef:5f:b5:a4:fe:e5:56:2f:a6:50:13:18:d4:
                    d5:f9:fd:55:23:16:76:b4:e6:69:22:9c:98:ec:f4:
                    e1:d1:c6:76:a8:70:b9:8d:1e:9a:b1:83:9a:46:6c:
                    09:28:86:39:f6:b4:6b:dd:31:b2:43:c1:1e:6f:2c:
                    3d:88:d4:67:43:81:ed:7a:eb:80:48:61:57:12:77:
                    ce:1e:08:c1:36:47:2a:f7:b2:bd:4a:02:e5:71:e0:
                    5e:c7:b6:65:28:18:0c:fe:79:76:bc:62:bd:7f:dc:
                    4b:dd:63:cc:53:77:22:dc:d9:54:93:05:39:a0:3b:
                    e3:20:3b:49:17:a1:5b:4b:09:69:58:32:32:dc:71:
                    fd:8d:94:aa:6f:e7:f1:87:28:0e:2b:c2:ec:bc:79:
                    48:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:6D:CC:FA:74:FC:45:23:7D:7B:23:AE:01:D8:41:10:A2:AA:40
            X509v3 Authority Key Identifier:
                keyid:0F:D4:43:75:21:DB:5C:0B:C9:9E:45:B5:97:54:FF:7B:67:1F:86:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/D9RDdSHbXAvJnkW1l1T_e2cfhvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D9RDdSHbXAvJnkW1l1T_e2cfhvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E0B4/E96489AEAF3811EFA20DD013C4F9AE02/5AF3ECBEAFBA11EF91955453C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:73:9c:b1:95:17:a7:02:60:87:4c:a3:e4:9d:46:b1:a8:9c:
         44:c1:a2:02:5c:85:c3:f6:da:93:5d:ac:f6:88:48:1c:92:81:
         ab:1d:2b:f6:90:0b:a4:71:96:2b:96:d5:1d:ea:5b:13:fc:20:
         d2:6c:5c:c3:7c:61:fd:bd:e7:8d:cc:b2:4b:5f:08:ba:7e:75:
         cb:6b:14:03:1b:18:be:b3:d1:15:98:99:a5:02:c8:de:14:65:
         b2:ed:c2:0b:a5:43:74:26:41:9c:1e:55:95:4f:5f:6a:6e:c7:
         6d:22:39:43:13:99:ba:fd:2c:84:0b:3a:f0:73:f7:61:d8:76:
         82:05:a5:91:da:fe:46:0c:89:9b:64:60:99:9c:47:38:37:79:
         82:21:49:e1:8e:51:e8:48:ee:9e:b3:c5:9f:30:75:60:0c:07:
         84:34:3d:10:a6:e8:b5:d4:5b:14:f7:2d:2d:77:bb:13:40:d9:
         8e:2e:17:a1:15:cf:85:81:95:84:70:ec:55:2f:99:f7:c2:ac:
         56:1c:5b:c4:e3:54:47:73:33:f5:6e:2d:2e:43:2f:a6:5b:2c:
         89:d1:ad:4e:f6:1f:9b:dd:20:e1:6e:83:f7:86:7b:a3:25:97:
         0c:e6:de:4a:7d:93:e2:41:d2:63:fd:ce:fa:f5:9a:45:d1:d5:
         44:ac:54:9e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUUwQjQxMTAvBgNVBAUTKDBGRDQ0Mzc1MjFEQjVDMEJDOTlFNDVCNTk3NTRGRjdC
NjcxRjg2RjMwHhcNMjYwMTIxMDUyNDUxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MWYyNy1kZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAogNM5M2cymkQjUMdaFGnbpd2Psr/p6K1+0U1tVbBXhPm6bY6csmBK0WD74Ks
JYx7xXdNfPvzqPQ/RvfGAl5hXHrDn4JB6VD6IEjkXnudfAO0PrL1DiKh4c1dsRYa
jF5og7vmDtOo7uELwu9ftaT+5VYvplATGNTV+f1VIxZ2tOZpIpyY7PTh0cZ2qHC5
jR6asYOaRmwJKIY59rRr3TGyQ8Eebyw9iNRnQ4HteuuASGFXEnfOHgjBNkcq97K9
SgLlceBex7ZlKBgM/nl2vGK9f9xL3WPMU3ci3NlUkwU5oDvjIDtJF6FbSwlpWDIy
3HH9jZSqb+fxhygOK8LsvHlICwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMf1bcz6
dPxFI317I64B2EEQoqpAMB8GA1UdIwQYMBaAFA/UQ3Uh21wLyZ5FtZdU/3tnH4bz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTBCNC9FOTY0ODlBRUFG
MzgxMUVGQTIwREQwMTNDNEY5QUUwMi9EOVJEZFNIYlhBdkpua1cxbDFUX2UyY2Zo
dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Q5UkRkU0hiWEF2Sm5rVzFsMVRfZTJjZmh2TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUUwQjQvRTk2NDg5QUVBRjM4MTFFRkEyMEREMDEzQzRGOUFFMDIvNUFGM0VDQkVB
RkJBMTFFRjkxOTU1NDUzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPoyMA0GCSqGSIb3DQEBCwUAA4IBAQAOc5yxlRenAmCHTKPknUax
qJxEwaICXIXD9tqTXaz2iEgckoGrHSv2kAukcZYrltUd6lsT/CDSbFzDfGH9veeN
zLJLXwi6fnXLaxQDGxi+s9EVmJmlAsjeFGWy7cILpUN0JkGcHlWVT19qbsdtIjlD
E5m6/SyECzrwc/dh2HaCBaWR2v5GDImbZGCZnEc4N3mCIUnhjlHoSO6es8WfMHVg
DAeEND0Qpui11FsU9y0td7sTQNmOLhehFc+FgZWEcOxVL5n3wqxWHFvE41RHczP1
bi0uQy+mWyyJ0a1O9h+b3SDhboP3hnujJZcM5t5KfZPiQdJj/c769ZpF0dVErFSe
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:04 2026 by rpki-client