Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/95CA439CDAE211ECA14A8254C4F9AE02.roa
File:                     95CA439CDAE211ECA14A8254C4F9AE02.roa (raw, json)
Hash identifier:          DXFn9IbM02w7n1eFZzgRJrQaHr06yYFyVzCtJliHjPE=
Subject key identifier:   EA:AC:2A:42:89:BB:E2:3E:FC:81:E7:4C:82:82:CA:B6:BB:3A:4C:B1
Certificate issuer:       /CN=A91A80D2/serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
Certificate serial:       0391
Authority key identifier: 2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/95CA439CDAE211ECA14A8254C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 01:33:57 +0000
ROA not before:           Tue 03 Mar 2026 01:33:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     396982
IP address blocks:        45.250.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl
                          rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80D2, serialNumber=2B1BB24ADCDB14F6E2C7BBB2D88ABADB1DDD898D
        Validity
            Not Before: Mar  3 01:33:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a63a85-dd94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:53:0a:66:32:f1:f4:9f:4f:cc:5b:1a:4b:e6:
                    60:17:4d:46:9b:b5:90:f9:62:05:3c:c8:e2:fb:c4:
                    47:0b:04:bc:b4:2b:70:d1:64:5d:55:a2:6e:bb:8a:
                    4e:84:99:58:28:19:1b:a5:60:83:7f:ee:30:f3:12:
                    fb:50:da:b8:e0:8d:46:96:74:21:42:45:29:3d:eb:
                    03:65:a5:6d:b9:b5:9d:99:ae:62:24:58:1d:69:9e:
                    4a:74:02:69:1b:d4:65:a3:fc:43:87:b7:90:08:0d:
                    2c:76:35:32:a7:a2:26:bc:18:9c:57:b0:0f:d2:79:
                    84:09:72:b8:8a:99:3c:da:dd:5c:81:de:a7:70:6f:
                    16:93:74:6f:1a:53:52:5b:b1:58:00:c0:6a:d1:6c:
                    64:79:26:f0:17:13:a1:0c:44:a8:64:0c:0a:3c:d8:
                    e7:d5:0e:ca:d9:ce:21:36:fa:79:6a:35:d0:66:88:
                    64:6b:48:73:70:92:e6:bb:d5:b1:82:9e:e6:85:94:
                    85:c0:d2:21:08:bc:1f:77:f3:c7:a2:76:a7:f9:78:
                    ad:9a:f9:2a:97:8e:b8:c6:35:cb:42:0a:8c:04:ae:
                    34:b3:2b:fe:8a:74:e1:dc:63:a2:13:aa:7a:19:ab:
                    30:9c:19:fd:5a:64:47:05:82:71:fa:02:99:79:26:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:2A:42:89:BB:E2:3E:FC:81:E7:4C:82:82:CA:B6:BB:3A:4C:B1
            X509v3 Authority Key Identifier:
                keyid:2B:1B:B2:4A:DC:DB:14:F6:E2:C7:BB:B2:D8:8A:BA:DB:1D:DD:89:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/KxuyStzbFPbix7uy2Iq62x3diY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxuyStzbFPbix7uy2Iq62x3diY0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80D2/D428D0C6DADE11EC87711450C4F9AE02/95CA439CDAE211ECA14A8254C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:80:65:1d:ee:53:69:15:68:57:44:78:23:9a:f4:38:e0:71:
         97:bf:85:7b:14:01:5a:fe:22:2c:30:c1:7a:70:62:be:dc:c7:
         d1:dc:9b:da:65:a0:c4:83:d4:69:bb:8d:6c:40:52:3d:a9:18:
         cd:a5:50:9b:37:fb:20:67:bd:6e:d5:2b:4d:1d:8e:80:c8:1a:
         47:fd:70:f3:ba:93:26:5d:51:19:e5:a5:de:4f:db:f7:1c:e2:
         b3:e9:a2:ba:37:79:78:e1:36:87:56:28:86:a9:3b:55:ce:3e:
         9e:96:35:23:c5:f2:db:02:1d:54:1d:2e:a3:8c:e6:08:71:1a:
         96:f7:9a:4a:10:d6:23:ed:f8:a7:8f:74:1b:93:90:90:17:16:
         a4:30:9b:67:4e:76:77:58:e2:b5:69:e4:e8:94:7d:84:98:24:
         d6:b5:7f:1b:5c:1f:19:1c:38:5c:71:9a:15:29:a8:7d:20:c9:
         e3:ac:f3:f2:fc:33:55:ee:d2:44:8c:16:d1:d1:9e:c0:33:ed:
         e7:f8:9c:5a:3b:6c:b4:c2:9d:53:9c:f5:09:a9:4b:7c:01:f4:
         00:81:b2:b9:e1:a1:3b:38:71:65:aa:2e:6d:49:8e:f5:7b:35:
         32:f8:96:83:71:1e:01:65:d1:f0:cf:41:f6:51:41:26:05:88:
         3e:cb:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:34:56 2026 by rpki-client