Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/CE88C72C569911F08E21CF87C4F9AE02.roa
File:                     CE88C72C569911F08E21CF87C4F9AE02.roa (raw, json)
Hash identifier:          q/nsqh9kiH+bznpNaj8r4apm6/Ae9GpQkbbiW39Shpg=
Subject key identifier:   9E:64:4E:A7:F9:40:D7:9E:C0:8B:17:BB:49:29:FC:54:71:73:42:C6
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       9C
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/CE88C72C569911F08E21CF87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:32:40 +0000
ROA not before:           Thu 15 Jan 2026 07:24:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     57025
IP address blocks:        160.250.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:34:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Jan 15 07:24:34 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43ff8-a724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:28:4b:07:19:58:74:d1:86:26:8f:04:f4:
                    64:c2:39:bf:dc:2b:35:45:a0:9b:fe:42:59:67:27:
                    63:42:67:2e:8c:3e:50:87:0d:94:0a:06:9c:91:8a:
                    44:92:e6:01:74:b9:9d:41:f1:b2:67:5f:d1:f9:bc:
                    42:cd:5a:50:92:40:5f:b9:7a:5b:a9:cc:37:6f:7c:
                    b5:da:2c:33:fe:0d:99:d7:af:3a:dc:56:25:20:1f:
                    b1:4d:99:d9:87:bd:f3:70:b0:dc:ce:ce:96:12:fb:
                    7f:8b:10:63:d3:ba:e7:a8:54:bf:53:e0:bf:3f:8a:
                    49:e3:ae:23:98:8c:4b:bb:69:e2:0e:38:6f:b0:85:
                    87:dd:cf:a0:8b:a1:c3:92:63:a6:8b:32:7b:71:cc:
                    4f:96:01:9e:fd:5b:83:67:28:f6:ec:41:d9:a0:d9:
                    53:a1:72:b0:e2:f9:28:07:cd:f0:fb:ea:d5:30:9a:
                    d7:70:7f:54:b1:5f:54:95:b8:80:c5:3e:62:64:7e:
                    d7:a9:a2:a9:3a:95:62:e7:5d:07:9b:99:03:c1:c3:
                    a8:52:39:ae:96:a7:35:54:20:84:5b:b6:b6:98:14:
                    44:be:d1:b7:08:bc:b3:0e:4d:8a:1d:6f:72:c4:92:
                    f4:13:60:2f:a8:3d:c3:e0:8c:6b:d8:a0:69:a9:7c:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:64:4E:A7:F9:40:D7:9E:C0:8B:17:BB:49:29:FC:54:71:73:42:C6
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/CE88C72C569911F08E21CF87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:1f:13:a5:5b:2d:1f:3a:b8:23:2b:82:d5:06:83:a7:d0:51:
         3e:72:ae:d7:65:be:16:7a:92:c2:20:85:24:49:80:6b:b3:25:
         f2:e0:2a:c3:bb:f9:9d:86:61:2b:43:d8:3e:b1:8c:38:fc:2c:
         7a:3e:57:46:fb:80:2f:fa:76:5e:f8:3d:bd:05:58:48:6f:7d:
         07:f8:13:1a:e4:6c:da:83:28:23:bc:17:db:74:1e:f7:cb:25:
         3c:8d:11:0b:42:bc:56:32:b2:ca:c9:cc:e0:19:98:a8:a2:14:
         e8:d6:17:be:f1:29:0a:02:f4:38:14:ad:8c:3b:b9:96:ce:53:
         85:1f:fc:b8:7c:ba:bd:9b:52:75:41:de:d9:26:21:fa:5f:59:
         8b:eb:5d:71:ab:1f:50:f8:2e:ec:d4:47:05:d9:ea:37:aa:f2:
         3a:ad:49:f0:cd:9a:dc:fc:97:ef:a1:a6:3f:4e:12:86:55:c5:
         1b:90:bb:d8:ab:36:ac:77:1f:78:5e:b7:20:85:ae:cc:ce:e5:
         a9:d8:26:49:4b:48:ca:df:c6:62:4c:f5:0c:45:a4:b6:1f:2f:
         15:6e:e6:14:d0:52:f9:21:da:fc:c5:c3:a5:36:d9:ce:e9:d1:
         4d:d1:97:00:3f:cf:b6:1b:a5:c0:b8:24:e3:94:53:9c:e7:0c:
         a5:c1:26:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:03:53 2026 by rpki-client