Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/8CC6B54CB44011F0ACFB4D45C4F9AE02.roa
File:                     8CC6B54CB44011F0ACFB4D45C4F9AE02.roa (raw, json)
Hash identifier:          8h9Rkyj4zjajWzGw5jayk/XGQjzAGuusfuMh7luHUj4=
Subject key identifier:   7C:9F:40:A5:E0:77:F9:76:41:AC:74:81:5B:80:37:F8:90:F8:C9:49
Certificate issuer:       /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial:       011C
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/8CC6B54CB44011F0ACFB4D45C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 06:36:09 +0000
ROA not before:           Sat 25 Apr 2026 06:36:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137526
IP address blocks:        160.250.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:16:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
        Validity
            Not Before: Apr 25 06:36:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69ec60d9-c6af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:23:f5:7f:eb:72:28:63:31:aa:8f:87:3e:
                    04:df:56:28:fd:d0:34:20:ba:6c:0f:69:9b:b9:b8:
                    2a:e2:8b:29:80:57:60:6f:e6:9f:3e:ac:d7:e7:16:
                    73:69:b6:f4:84:e8:53:77:2d:b4:45:76:4c:20:80:
                    b3:9e:15:46:52:20:06:c1:df:ee:66:e8:f2:e2:55:
                    5f:0e:ee:46:04:17:63:2e:be:04:3b:29:93:1d:ff:
                    dd:d8:9c:9a:dc:51:2b:a1:05:c2:96:00:54:bb:2d:
                    bf:f6:79:39:90:88:4c:8e:7f:ac:cb:14:f7:12:0b:
                    8b:4d:fc:30:dd:3c:d1:29:12:1f:9d:da:f1:f5:f5:
                    fe:01:fe:ea:cd:4e:2d:90:a1:6d:dd:b9:57:b2:b7:
                    d1:12:18:28:33:ee:ee:41:40:7f:f9:ec:f9:6b:e8:
                    e7:f6:0e:a0:1f:13:15:4f:f7:63:48:93:65:23:12:
                    26:17:e6:29:64:b5:b3:90:23:b1:15:70:ec:5d:be:
                    3a:ca:23:9c:f7:68:a5:ea:ff:7c:d9:e1:5b:3c:1d:
                    1a:26:ce:ea:02:21:ba:39:22:99:53:c2:b0:7c:b9:
                    10:c3:d2:f1:0f:d7:fb:72:3f:eb:2c:31:0a:00:2a:
                    a0:bc:c7:dc:0d:35:55:2e:67:08:db:17:ad:11:76:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9F:40:A5:E0:77:F9:76:41:AC:74:81:5B:80:37:F8:90:F8:C9:49
            X509v3 Authority Key Identifier:
                keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/8CC6B54CB44011F0ACFB4D45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:55:55:7d:3b:b5:95:e7:6e:bc:1b:12:62:2f:68:1b:0f:b5:
         0b:31:45:84:4e:ad:73:31:bc:cc:0a:16:dd:3c:7e:94:58:5c:
         53:3d:63:b6:de:71:70:2d:d1:95:ed:c8:09:6e:cc:7d:4d:d5:
         47:fa:8e:74:94:50:0f:6d:30:8b:31:c2:41:80:f0:12:75:aa:
         96:a1:01:f0:54:eb:d1:bb:15:10:b8:81:41:19:8f:f7:dc:26:
         0c:cc:fa:0d:ed:02:d4:59:1c:32:7a:15:f4:55:54:b3:0a:63:
         5e:96:8c:23:d7:dd:33:04:23:fa:59:42:6b:63:59:71:33:1f:
         59:1b:44:8f:6a:ac:cd:f3:2d:7e:b3:45:7f:69:12:19:cc:a5:
         10:8b:19:be:62:c2:72:a7:99:ff:f0:45:59:6f:e1:59:c0:4e:
         ae:c3:9a:33:f8:92:5f:9c:cc:8f:6f:59:e1:e7:b6:ed:96:5a:
         7a:3c:04:f7:08:9a:d1:3f:0a:b0:3d:db:d7:4a:ee:54:ff:76:
         40:c9:54:00:1c:71:fe:a1:09:4e:16:96:77:96:07:ba:4d:f9:
         5c:26:a5:78:af:7b:95:4c:77:ab:ae:02:3e:b5:9c:60:17:ba:
         9f:42:c8:e4:a5:7e:37:7d:a1:43:f7:ec:05:86:d1:cb:35:51:
         cd:27:df:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:52:46 2026 by rpki-client