Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/FB729544B57F11EF8BDF3346C4F9AE02.roa
File:                     FB729544B57F11EF8BDF3346C4F9AE02.roa (raw, json)
Hash identifier:          lra+qhDRGNXUaND0a9KhE0KK0EaPsUI652BkcyFm2ic=
Subject key identifier:   03:6F:02:48:4B:66:E2:D6:EF:CD:6A:B3:36:66:3F:0C:1F:87:5C:A0
Certificate issuer:       /CN=A912E3C7/serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
Certificate serial:       F5
Authority key identifier: 89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/FB729544B57F11EF8BDF3346C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:00:15 +0000
ROA not before:           Wed 03 Dec 2025 04:34:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153325
IP address blocks:        160.250.162.0/24 maxlen: 24
                          160.250.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl
                          rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E3C7, serialNumber=893AC579014156186AEAF5034BA0B4926F92E374
        Validity
            Not Before: Dec  3 04:34:33 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a597ef-b7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:8f:d3:d5:11:f6:a4:7d:d5:b6:0e:cd:d6:
                    6e:7b:62:d2:07:bd:31:2e:28:8d:a2:40:d6:e1:1d:
                    51:45:9e:89:66:ef:e6:d2:45:11:d1:db:64:ed:58:
                    64:3b:b8:6e:fa:45:67:0a:7e:ee:cb:1d:9c:82:dd:
                    1d:cb:e5:dc:a0:2b:58:f9:f4:41:60:3d:4e:1f:69:
                    fc:62:58:ae:c0:8d:87:c8:0d:92:57:be:1c:ec:1e:
                    8e:6b:c3:52:4d:51:a9:9b:21:38:65:fd:76:88:d2:
                    35:a2:95:60:c9:fb:ef:01:29:32:7e:6e:13:d6:07:
                    6f:62:bc:6c:78:c8:df:af:c1:9d:b8:b5:86:a9:d5:
                    f3:f0:96:95:92:09:56:e5:68:c4:b6:9c:aa:35:9d:
                    2f:b2:4c:1b:d2:a3:e2:97:8b:87:bf:45:e0:0e:a0:
                    2b:b6:96:0d:df:a5:19:a9:e9:cb:d1:cc:33:4e:5f:
                    c8:c3:20:5d:68:82:15:58:e0:a6:ff:d8:27:22:49:
                    95:95:32:f2:7d:a6:71:5b:5e:73:33:cd:5e:f4:f3:
                    50:74:9b:ad:1b:f2:0f:59:14:eb:d1:1b:f0:fe:de:
                    87:6c:24:22:37:73:bb:8b:b9:d5:11:c1:a8:bc:71:
                    6b:28:55:be:d7:4e:3e:38:7e:f4:7a:93:b7:37:e6:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6F:02:48:4B:66:E2:D6:EF:CD:6A:B3:36:66:3F:0C:1F:87:5C:A0
            X509v3 Authority Key Identifier:
                keyid:89:3A:C5:79:01:41:56:18:6A:EA:F5:03:4B:A0:B4:92:6F:92:E3:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/iTrFeQFBVhhq6vUDS6C0km-S43Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iTrFeQFBVhhq6vUDS6C0km-S43Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E3C7/865887B6B26711EFA565A849C4F9AE02/FB729544B57F11EF8BDF3346C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:7d:24:c0:bf:9c:7b:4e:da:b0:28:ba:d4:24:f0:67:c2:
         aa:7a:63:6d:0d:59:d1:7b:a6:fd:2b:ef:bc:80:74:60:a6:19:
         f8:3e:a9:1d:53:48:62:a7:fb:0a:fe:67:97:61:c4:e7:99:25:
         55:4b:25:6d:2f:c1:95:07:8e:cf:62:00:a7:e6:3e:15:78:e0:
         48:fa:a5:58:91:16:e7:74:10:87:80:f1:98:00:c8:3a:8d:ef:
         15:5f:4e:69:41:5d:72:56:a6:be:87:ab:54:73:be:b1:2a:02:
         a8:75:ba:96:64:64:70:c4:f8:a1:d0:4f:cc:42:84:5e:47:4f:
         27:62:1d:90:0c:b5:ff:78:a0:33:cf:32:58:7f:75:73:a7:32:
         20:b3:78:e7:ba:40:71:29:31:b2:8c:3c:08:ec:07:45:4f:20:
         a6:62:06:f5:00:02:1d:11:33:2a:64:a4:8b:49:d1:93:00:b3:
         fb:c7:ca:f3:27:ee:8d:5f:6b:83:16:1c:e6:b7:5f:99:3d:ee:
         32:f0:73:6c:ac:90:ae:fe:52:70:5f:1a:53:47:8e:64:dd:5e:
         bf:69:2d:97:84:df:3e:30:e7:5b:c4:ef:6d:d9:19:14:56:04:
         d7:6c:d7:69:f2:6b:c3:55:78:6b:39:f0:41:1f:36:80:f1:09:
         2c:13:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:02:00 2026 by rpki-client