Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/E3239FCAD48C11EFA27EEC37C4F9AE02.roa
File:                     E3239FCAD48C11EFA27EEC37C4F9AE02.roa (raw, json)
Hash identifier:          yjuBkaQ9iRKgMQ7a+4P/BtzlYCvqc8B89mQbeBjPRXM=
Subject key identifier:   69:F6:35:3F:5B:80:31:E9:4E:36:65:C5:81:B7:88:76:B4:3E:A3:89
Certificate issuer:       /CN=A91685E9/serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
Certificate serial:       010A
Authority key identifier: 62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/E3239FCAD48C11EFA27EEC37C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:42:07 +0000
ROA not before:           Tue 03 Mar 2026 06:42:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152565
IP address blocks:        161.248.162.0/23 maxlen: 23
                          161.248.162.0/24 maxlen: 24
                          161.248.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl
                          rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:43:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91685E9, serialNumber=624B96E1D665ED78E78DFAF6C220191073DB66CC
        Validity
            Not Before: Mar  3 06:42:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a682bf-109c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:1d:f0:c3:d4:fd:5f:de:96:14:93:7f:70:
                    36:6c:2b:25:1d:1d:52:59:36:7d:08:1a:bb:70:3f:
                    93:6e:8b:43:af:92:a1:ad:9f:7e:82:1a:70:90:41:
                    cd:c5:7e:34:da:64:c5:bf:df:97:31:73:c2:95:4e:
                    12:c9:48:96:5d:e6:83:09:46:17:08:95:3e:cb:b1:
                    e6:18:54:b7:5a:65:3e:78:4d:15:82:fd:16:0e:31:
                    46:fc:65:85:f8:4a:29:d4:01:56:1e:2b:25:e6:e0:
                    66:1d:91:77:15:85:ed:85:a1:c3:b6:4e:c0:c7:8a:
                    c8:a6:81:27:63:5f:81:3f:9c:28:89:4e:82:f4:05:
                    14:7f:fe:b1:89:ed:d1:28:76:54:a1:5d:46:68:21:
                    d4:0c:12:a2:a9:4d:3c:0d:0a:5e:d0:4d:69:05:8b:
                    68:65:0c:e0:0a:a1:bb:0f:96:a0:0b:5a:66:55:48:
                    eb:67:54:5f:57:e7:c9:83:f8:0e:ec:0d:27:66:6e:
                    e0:98:e6:7b:4b:21:78:35:db:a9:d3:d4:a3:96:c5:
                    58:f9:1c:ae:9c:3e:af:17:b5:4d:89:09:46:17:ac:
                    c4:9c:b6:f1:83:6e:65:51:b5:62:b4:02:10:3b:d7:
                    c0:88:b6:8b:9b:9f:51:0d:8b:9f:c1:77:c0:e2:85:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F6:35:3F:5B:80:31:E9:4E:36:65:C5:81:B7:88:76:B4:3E:A3:89
            X509v3 Authority Key Identifier:
                keyid:62:4B:96:E1:D6:65:ED:78:E7:8D:FA:F6:C2:20:19:10:73:DB:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YkuW4dZl7Xjnjfr2wiAZEHPbZsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91685E9/C112F55CD17611EF95C5DE5AC4F9AE02/E3239FCAD48C11EFA27EEC37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:64:ed:34:2a:a0:72:8c:fd:db:10:a0:03:68:26:a3:fa:e5:
         dc:90:8c:32:ca:a8:22:53:b3:a2:34:28:61:a9:8f:b0:e0:a9:
         5f:ec:3d:7f:00:b3:97:50:81:04:d9:af:1f:e3:04:46:f6:b0:
         87:11:7c:f1:eb:37:5d:60:eb:e9:ea:fa:6f:b7:f6:30:49:14:
         c9:da:66:a6:af:71:b2:1c:c9:19:ff:7a:22:6f:9d:93:78:9d:
         67:7b:42:d6:a4:28:0e:e7:1d:77:84:6a:d5:d4:88:1a:0f:72:
         6f:f9:6a:d1:2a:ae:cb:c1:16:72:44:61:f2:d9:a5:8f:63:38:
         a4:8d:4d:6d:dd:b1:a1:dc:1b:21:b8:05:6e:07:1a:db:1e:fc:
         2f:87:41:95:42:8e:d8:e8:21:16:96:9b:5a:5f:6d:f3:3e:af:
         c3:f2:2e:67:09:f4:46:15:81:9e:85:0b:2a:68:d9:b8:80:8c:
         c6:37:f4:af:d9:18:7d:4d:e6:12:fb:d7:09:6d:ed:c9:c7:5c:
         92:81:03:5c:de:1b:b8:46:e5:e1:e0:39:f8:7a:ea:4d:40:8b:
         f2:97:71:b1:ab:2c:5c:ff:64:ef:95:3f:3b:7f:d9:bc:48:9a:
         a9:fc:2d:f0:8f:96:7a:00:bf:ee:98:38:c6:be:56:05:15:22:
         11:31:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:55 2026 by rpki-client