Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/91D2F686B4BE11EFA41A5C26C4F9AE02.roa
File:                     91D2F686B4BE11EFA41A5C26C4F9AE02.roa (raw, json)
Hash identifier:          7tTDB/tssfPu0ukhnLfqeZyRc0Pbk+Bf/jBD9Oepn9o=
Subject key identifier:   13:8E:11:90:A3:EC:FE:EC:38:94:FD:9A:FE:31:77:C5:37:70:63:19
Certificate issuer:       /CN=A91921AE/serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
Certificate serial:       F8
Authority key identifier: F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/91D2F686B4BE11EFA41A5C26C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:22:26 +0000
ROA not before:           Mon 29 Dec 2025 05:24:50 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        160.250.94.0/24 maxlen: 24
                          160.250.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl
                          rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91921AE, serialNumber=F6D3793027751C62F8ABB90886EA93F49B33F64C
        Validity
            Not Before: Dec 29 05:24:50 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a58f12-3b12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:ff:b5:c1:fd:4e:e3:f6:17:5a:6f:e1:8e:
                    99:00:fd:4c:e1:bb:60:5a:a7:84:cb:cd:a8:71:4e:
                    5a:74:9c:56:3e:38:17:2c:d1:0a:ad:4a:67:4e:b3:
                    2b:2d:22:f7:5d:97:90:95:3b:62:4c:fe:85:07:fd:
                    95:f8:17:7e:b6:03:8e:cd:7f:10:17:db:a7:24:07:
                    24:69:de:6b:bc:1a:83:10:eb:e1:45:cd:3f:43:7e:
                    95:50:b7:c8:ba:3f:50:a8:c9:8b:94:76:b2:7a:9e:
                    fa:8c:3e:5f:d0:e9:0e:0d:cb:5a:04:83:e4:26:fc:
                    c5:79:bd:70:b3:55:e1:7e:2b:da:3f:a5:52:99:ca:
                    36:20:0c:f5:cf:2c:94:10:6b:13:0d:db:61:8c:e5:
                    32:0c:82:5a:3f:ac:22:1e:d0:ad:2d:ac:e1:3d:4b:
                    07:d1:ae:5d:d6:ab:0a:61:59:db:15:3d:54:5e:6f:
                    87:51:50:25:11:da:05:d9:2c:7d:4a:b5:3b:8a:16:
                    2b:6c:ed:f4:d1:42:31:63:99:81:8d:71:d4:5f:5f:
                    34:19:e7:45:2b:94:4f:09:80:90:40:ca:05:9b:7f:
                    9e:cf:64:3f:18:81:8c:d6:d3:96:89:43:9d:e4:24:
                    b1:53:1e:8f:31:0d:4c:3a:71:e3:12:2c:b8:2d:c2:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8E:11:90:A3:EC:FE:EC:38:94:FD:9A:FE:31:77:C5:37:70:63:19
            X509v3 Authority Key Identifier:
                keyid:F6:D3:79:30:27:75:1C:62:F8:AB:B9:08:86:EA:93:F4:9B:33:F6:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9tN5MCd1HGL4q7kIhuqT9Jsz9kw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91921AE/6C7048A6AC7311EFA3CBD14AC4F9AE02/91D2F686B4BE11EFA41A5C26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:db:c6:17:fe:9a:39:94:42:65:60:d6:e3:f8:43:ac:2e:3d:
         f0:3c:9f:c7:f0:ed:4c:76:fc:2a:39:6c:3d:88:3d:ef:be:e1:
         f7:c1:8f:b0:59:16:93:c8:1b:6c:8c:89:b7:48:10:e9:c4:5e:
         67:4f:ef:c5:b7:96:16:23:28:be:53:25:a3:21:bb:2d:f8:db:
         31:53:13:a9:56:29:06:c5:61:83:2a:88:0f:24:cc:e1:df:90:
         23:e9:88:1a:ee:e4:a1:3a:23:dc:95:56:ab:e6:19:bb:65:25:
         24:91:3d:ac:35:36:ba:34:a7:c4:8f:df:99:51:61:f9:39:3a:
         19:b8:f1:01:4d:58:aa:78:da:59:53:a3:3b:64:65:cf:b3:d8:
         c3:28:7b:f0:62:ff:6e:a7:17:b9:a9:fe:76:14:f9:16:93:8b:
         06:b8:e2:ad:d6:fe:9a:c3:8f:e9:1f:dd:04:23:81:f7:0a:16:
         6b:94:3a:60:98:98:58:75:78:1c:94:8a:ef:d7:4d:85:13:8c:
         ae:c1:bb:da:3c:af:f4:64:fc:fa:8b:47:a4:ef:0d:3d:ba:e8:
         23:58:bc:90:d4:bd:03:af:43:ad:5c:1b:e6:7b:4a:5b:52:f0:
         61:f2:5f:a5:dc:d7:f1:55:13:64:ed:fc:76:55:35:43:77:60:
         c4:80:f3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:21 2026 by rpki-client