Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/F5BB256ECE9611EF97EBCF65C4F9AE02.roa
File:                     F5BB256ECE9611EF97EBCF65C4F9AE02.roa (raw, json)
Hash identifier:          A2j9A1LDxFn91KRfJQkzZYzQlvghcjV9LwvRtdCgpqk=
Subject key identifier:   73:C3:72:7C:14:32:17:5E:B0:2D:A6:44:DA:8D:DF:12:B8:C4:A5:62
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       0102
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/F5BB256ECE9611EF97EBCF65C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:04:42 +0000
ROA not before:           Thu 27 Nov 2025 04:22:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        160.187.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:24:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
        Validity
            Not Before: Nov 27 04:22:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a58aea-15c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:21:3e:5f:25:77:7f:9f:17:f5:8e:b3:7b:
                    4a:b2:11:50:e3:9b:67:07:e9:8a:82:85:04:0a:b8:
                    4b:48:a9:8e:f6:11:fa:b1:95:9b:1d:a4:1a:4e:de:
                    48:b4:aa:d1:1c:f9:0f:6b:0a:b6:a5:2c:3d:b5:85:
                    23:16:01:d3:2f:bd:e3:ad:52:8f:72:52:eb:51:3f:
                    b6:ae:80:81:8b:a3:11:cb:0d:76:ec:f3:64:28:d7:
                    d8:09:88:5d:00:0c:f6:b7:eb:51:99:c9:c8:5b:18:
                    1d:b4:76:52:26:fc:49:c9:a9:cc:de:c4:f2:89:9d:
                    37:3c:f4:19:87:24:eb:da:8e:18:00:eb:47:f5:15:
                    17:30:9f:70:4b:89:c0:26:85:38:bf:47:77:b7:07:
                    ac:5a:92:30:4a:21:57:55:b4:22:c2:5d:cc:00:6f:
                    e4:cb:06:97:01:33:2f:3e:d2:6c:e6:7f:e9:c0:b4:
                    24:3a:ca:c2:2d:5e:03:67:c6:c7:a8:1f:83:a1:6d:
                    0f:c2:01:4d:69:c0:13:0a:9b:c2:98:dc:ee:e8:d8:
                    d1:58:95:e2:18:20:57:3f:02:75:59:ae:e2:00:fc:
                    48:76:6b:0c:d4:56:41:9b:cc:2e:b4:e4:ad:6b:98:
                    5a:f8:30:bf:ba:5b:5b:36:89:89:17:5b:e4:74:5c:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C3:72:7C:14:32:17:5E:B0:2D:A6:44:DA:8D:DF:12:B8:C4:A5:62
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/F5BB256ECE9611EF97EBCF65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ad:a1:53:41:67:19:fb:23:46:37:20:e3:4e:07:33:fe:38:
         9e:dd:dc:90:9f:ef:43:92:0d:52:c3:50:27:26:04:24:68:09:
         79:30:b4:f1:6e:55:f8:17:57:84:06:4f:b4:7f:df:31:a0:76:
         de:7b:cc:ec:af:8b:db:45:82:17:b5:4a:f1:b3:e4:17:49:a9:
         28:82:71:c6:8c:47:68:e5:01:a5:98:b4:a7:94:9d:ae:d6:ca:
         15:e4:bd:6d:e4:dd:56:bf:d3:62:4d:a7:a3:b9:62:7b:53:7b:
         94:fa:36:b4:26:7e:e4:52:44:5b:4a:38:dc:b6:07:38:4f:29:
         7e:6a:f7:5a:cd:0a:ef:c2:42:0c:a6:7b:ac:50:74:e1:82:4c:
         bb:ad:9f:ec:31:3b:7a:ed:fb:cf:e6:fd:f6:72:21:4f:ce:70:
         93:0e:1d:89:dc:60:98:38:65:62:a1:22:08:bd:08:cb:1c:5f:
         af:42:e0:14:4a:50:cd:dc:fa:60:0e:bb:84:8d:4b:09:5d:2e:
         c8:4b:2b:9f:69:b1:54:a3:b0:41:8f:26:64:3b:86:d1:28:2e:
         c3:e5:b0:28:c2:cc:ed:25:b5:6e:72:af:90:7e:4f:56:89:e7:
         8d:9a:1a:ec:1b:51:bb:88:05:87:2a:9b:97:7e:23:eb:ee:fa:
         cc:bb:01:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:05:28 2026 by rpki-client