Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/06522672D49411EFA8DF5E69C4F9AE02.roa
File:                     06522672D49411EFA8DF5E69C4F9AE02.roa (raw, json)
Hash identifier:          Tk6XuHe+UOcO0wAYL78ZhK/3o/y93kH+Qpt8b1oatZE=
Subject key identifier:   EF:84:F4:FB:9F:8A:5F:02:11:0C:57:45:C1:CE:2F:69:B9:A5:E9:3B
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       E7
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/06522672D49411EFA8DF5E69C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:39:07 +0000
ROA not before:           Thu 05 Feb 2026 16:25:08 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135028
IP address blocks:        161.248.190.0/23 maxlen: 23
                          161.248.190.0/24 maxlen: 24
                          161.248.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Feb  5 16:25:08 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5a10b-811a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a3:a5:2d:9f:69:d8:8c:11:22:6a:8c:36:8b:
                    1d:91:03:ab:de:74:59:e6:5e:e1:92:5e:b0:57:f8:
                    7e:a5:e9:3c:68:39:e6:e8:96:5c:13:83:25:68:9f:
                    bc:e9:7b:fb:a2:64:a7:a7:f2:61:b4:c5:00:64:5b:
                    0b:08:66:55:c2:ed:9a:ac:d0:b1:20:62:1e:03:d8:
                    c3:46:f9:7f:be:76:6f:00:2a:b3:ab:52:76:ba:e6:
                    0a:0e:88:ae:8c:67:10:1a:ee:73:1a:2d:25:66:66:
                    47:dc:c3:43:97:77:e7:fb:7a:dd:ec:46:ef:e5:64:
                    d5:53:c4:91:30:0f:b5:47:e8:d0:88:d8:db:fc:d7:
                    df:db:90:ed:0f:3b:a8:92:5f:76:39:cf:de:69:10:
                    4a:55:8c:7e:c9:3f:9a:5d:eb:d1:f8:69:41:1c:c4:
                    37:30:86:39:c7:78:07:74:52:6a:2a:a6:49:97:4c:
                    61:cb:26:4f:50:5e:9e:f5:67:1d:af:76:95:d4:94:
                    2a:52:32:0c:ac:59:8d:7e:b3:8a:09:6a:b6:9a:dc:
                    74:15:a7:a7:a2:d1:36:8c:9d:b6:74:f5:31:a4:37:
                    54:84:b6:92:4c:7d:62:78:ee:05:76:94:5c:32:c5:
                    48:65:8d:6f:f1:f7:fb:05:10:cc:b6:6f:bd:a7:9e:
                    fb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:84:F4:FB:9F:8A:5F:02:11:0C:57:45:C1:CE:2F:69:B9:A5:E9:3B
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/06522672D49411EFA8DF5E69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:d3:15:0d:df:72:1c:0d:7d:0e:7e:a8:7b:76:65:44:bd:92:
         45:f9:12:6d:61:60:2b:bb:8b:c2:c4:f9:b6:ed:4e:de:3e:9d:
         34:c9:6f:a5:f6:ca:57:37:83:d0:c1:9a:4f:17:72:e6:cc:2f:
         3a:d0:ef:7f:e0:60:7d:85:87:38:68:f1:aa:08:e7:13:00:ba:
         ba:29:97:d1:a4:26:75:94:58:f6:b1:11:5d:69:15:ff:e3:5c:
         ee:68:66:1f:d3:fd:81:a7:c6:f6:1c:0b:59:9c:ad:44:61:37:
         6a:d9:9b:ea:3f:10:35:a6:84:24:0f:97:52:58:2c:4e:b2:3a:
         04:59:fe:b1:23:f7:d3:5a:b0:53:12:19:14:53:84:65:31:8e:
         c4:fe:7a:a3:40:67:72:29:3f:30:80:5e:b5:5b:04:cb:65:8c:
         5c:29:6a:00:00:f8:85:c4:9e:13:69:a1:0b:61:fd:cf:19:02:
         35:f6:92:92:d4:1a:8e:8d:ff:85:f1:a1:2a:7a:b9:d2:8b:cc:
         94:7e:c7:8c:95:72:51:e4:cd:ad:82:6b:62:85:34:c5:ab:48:
         83:f8:10:db:36:23:b6:8b:47:e8:c9:82:7f:31:9c:89:17:28:
         ff:8f:3f:17:17:94:1a:5f:da:69:c8:50:f4:21:b4:ea:d5:c7:
         e4:ba:bf:ff
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1
RjA3MDJBQzgwHhcNMjYwMjA1MTYyNTA4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTEwYi04MTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8qOlLZ9p2IwRImqMNosdkQOr3nRZ5l7hkl6wV/h+pek8aDnm6JZcE4MlaJ+8
6Xv7omSnp/JhtMUAZFsLCGZVwu2arNCxIGIeA9jDRvl/vnZvACqzq1J2uuYKDoiu
jGcQGu5zGi0lZmZH3MNDl3fn+3rd7Ebv5WTVU8SRMA+1R+jQiNjb/Nff25DtDzuo
kl92Oc/eaRBKVYx+yT+aXevR+GlBHMQ3MIY5x3gHdFJqKqZJl0xhyyZPUF6e9Wcd
r3aV1JQqUjIMrFmNfrOKCWq2mtx0FaenotE2jJ22dPUxpDdUhLaSTH1ieO4FdpRc
MsVIZY1v8ff7BRDMtm+9p577RwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO+E9Puf
il8CEQxXRcHOL2m5pek7MB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0
OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzZBMzUvOTkyNzc4NDZENDkyMTFFRkI1NjRERTYyQzRGOUFFMDIvMDY1MjI2NzJE
NDk0MTFFRkE4REY1RTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofi+MA0GCSqGSIb3DQEBCwUAA4IBAQCB0xUN33IcDX0Ofqh7dmVE
vZJF+RJtYWAru4vCxPm27U7ePp00yW+l9spXN4PQwZpPF3LmzC860O9/4GB9hYc4
aPGqCOcTALq6KZfRpCZ1lFj2sRFdaRX/41zuaGYf0/2Bp8b2HAtZnK1EYTdq2Zvq
PxA1poQkD5dSWCxOsjoEWf6xI/fTWrBTEhkUU4RlMY7E/nqjQGdyKT8wgF61WwTL
ZYxcKWoAAPiFxJ4TaaELYf3PGQI19pKS1BqOjf+F8aEqernSi8yUfseMlXJR5M2t
gmtihTTFq0iD+BDbNiO2i0foyYJ/MZyJFyj/jz8XF5QaX9ppyFD0IbTq1cfkur//
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:05 2026 by rpki-client