Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa
File:                     A3815188C9D211EFB961F44DC4F9AE02.roa (raw, json)
Hash identifier:          DHIuEGlAe2mG5wZOhiV1lUw2gUeKuaIT7YiSDLTxpgQ=
Subject key identifier:   4F:1C:B0:D4:4F:34:20:2E:11:ED:72:EA:69:AC:1C:30:63:0D:13:D6
Certificate issuer:       /CN=A91B23D9/serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
Certificate serial:       E5
Authority key identifier: BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:27:12 +0000
ROA not before:           Sat 17 Jan 2026 05:24:26 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     140641
IP address blocks:        160.250.204.0/24 maxlen: 24
                          160.250.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl
                          rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B23D9, serialNumber=BE8B4733B1AE8A4736B7E9132733D654091E3D2B
        Validity
            Not Before: Jan 17 05:24:26 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a59030-2d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:6d:4c:2a:b0:a1:d5:ec:4e:e0:80:94:62:
                    7c:b6:5d:fb:e8:dd:8b:fb:e6:87:ad:aa:d1:28:49:
                    ca:8c:4a:c3:81:f8:c1:63:5c:b3:4c:b9:98:f5:29:
                    62:cb:7d:ae:b6:a7:17:b9:9f:7e:f2:6b:c5:da:57:
                    13:b5:8c:c5:37:7a:31:27:f4:78:c4:b9:27:0b:79:
                    bb:ed:7f:cf:7b:42:e4:1e:27:c0:86:93:4d:41:50:
                    23:9b:50:e9:0e:f9:7d:45:1e:9a:6b:42:f8:1a:06:
                    af:5a:36:fe:31:57:96:09:15:cc:48:fc:68:2b:30:
                    82:bb:5b:8b:15:37:ba:3d:52:e0:b8:83:df:77:21:
                    9f:5a:65:8a:1e:e5:62:57:45:ba:ab:77:70:b3:d9:
                    27:80:a5:3a:14:80:61:3f:77:71:2c:50:ab:1e:28:
                    cd:db:9c:2b:cd:4b:14:a3:bb:ff:aa:a6:bb:83:b3:
                    de:7c:2d:92:84:00:b3:34:48:c1:54:11:f0:f4:86:
                    1e:d8:9a:f3:c9:5c:c7:a7:ce:17:80:0a:e9:36:86:
                    54:10:4e:c4:d0:07:ff:17:d8:02:3e:fc:9a:1d:ff:
                    13:fc:e8:70:11:ff:f1:2f:e3:b6:83:59:2b:20:d7:
                    f3:6b:f3:ed:a8:51:73:a8:d5:ec:44:8e:40:ba:d2:
                    4f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1C:B0:D4:4F:34:20:2E:11:ED:72:EA:69:AC:1C:30:63:0D:13:D6
            X509v3 Authority Key Identifier:
                keyid:BE:8B:47:33:B1:AE:8A:47:36:B7:E9:13:27:33:D6:54:09:1E:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/votHM7Guikc2t-kTJzPWVAkePSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/votHM7Guikc2t-kTJzPWVAkePSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/7B8BD6CCC9D111EF975BDC4BC4F9AE02/A3815188C9D211EFB961F44DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:c1:b7:fc:a6:fb:f0:72:be:00:aa:43:7b:da:92:1f:7a:b0:
         10:bc:8f:e3:9f:c6:72:61:04:e8:25:e8:ed:40:a9:ed:9c:bd:
         d3:2b:0b:9b:46:73:d9:77:4c:e7:ab:a6:e6:66:26:30:bf:2b:
         06:b7:1e:2f:01:75:b4:eb:19:a8:03:e6:b0:a9:5f:38:51:e1:
         e6:b9:c8:ca:a3:43:7e:74:47:ac:d8:c2:13:b4:be:f6:dc:57:
         14:52:45:2e:26:21:b8:a1:40:84:71:bd:b6:5a:2e:95:f6:a8:
         ee:c8:46:9b:ac:6b:c5:a9:be:d9:eb:44:ee:48:05:0c:c9:27:
         1f:a0:5f:9a:e6:ac:c2:ef:50:75:2d:5d:ee:0c:b4:2d:e6:b3:
         5b:fb:09:f3:d4:0f:ac:98:2e:e6:33:0b:b7:91:35:37:6d:62:
         27:8b:8c:24:e6:03:6d:f0:c2:72:ad:34:4f:9d:cb:c2:0a:46:
         30:96:97:4d:9e:2b:1a:6c:cb:87:9f:20:70:b9:c1:75:56:64:
         01:8c:80:59:2f:01:dc:fd:28:10:1e:19:02:92:95:cd:7a:df:
         99:13:64:9f:e3:65:4d:bb:66:f7:09:ea:59:9e:89:6c:49:80:
         be:e2:48:86:65:c6:17:d8:9a:80:f7:3d:7d:81:b8:30:ff:7b:
         96:1e:50:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:16 2026 by rpki-client