Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
File:                     250320C4761511EDA05B8A63C4F9AE02.roa (raw, json)
Hash identifier:          fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=
Subject key identifier:   73:68:53:B1:C2:25:00:B5:18:45:F8:17:0A:CA:BF:FC:2F:4B:33:F4
Certificate issuer:       /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial:       0269
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:35:13 +0000
ROA not before:           Wed 07 May 2025 02:39:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     9509
IP address blocks:        165.12.0.0/16 maxlen: 16
                          192.207.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
        Validity
            Not Before: May  7 02:39:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5a021-aec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:23:8d:fe:d2:6f:70:34:45:80:00:0b:32:35:
                    6d:50:5f:24:87:33:ed:fc:1c:d3:3c:cd:f5:c0:99:
                    df:09:35:bc:7c:a0:d8:6b:98:2c:f4:08:19:76:f9:
                    59:45:e6:77:63:24:6d:4d:a5:c3:b0:b0:38:ff:5a:
                    ee:3c:7d:7d:98:13:64:a0:73:4f:ac:0f:0d:b3:d2:
                    b3:e2:a6:6a:f0:28:2d:c1:17:d1:ae:67:80:96:96:
                    31:90:71:1f:8e:57:d1:df:1f:13:af:92:87:1b:4d:
                    62:34:b4:3e:4e:3f:73:df:0e:7f:4c:be:ee:79:d3:
                    1c:a3:0d:05:80:a3:c4:cf:b1:38:05:33:ee:23:0f:
                    df:55:e6:b7:49:a0:c7:fb:db:f9:07:25:2b:05:7e:
                    29:24:d8:dd:77:2d:dd:23:d4:de:79:79:51:01:62:
                    49:b1:f9:29:8a:5f:87:57:f5:80:4e:6a:73:50:a1:
                    21:bc:5b:66:8e:dd:71:b7:28:33:7b:7d:1e:de:4a:
                    d7:48:a0:6b:fe:74:1b:0b:54:2c:85:f7:eb:ae:ba:
                    7f:18:f4:c7:ef:ad:82:22:b9:c8:85:2e:6c:61:85:
                    77:82:29:43:a1:02:c9:bb:a7:fc:9e:e7:dc:7c:18:
                    7a:f5:67:0f:66:19:7c:d1:42:ec:af:5e:a9:bf:14:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:68:53:B1:C2:25:00:B5:18:45:F8:17:0A:CA:BF:FC:2F:4B:33:F4
            X509v3 Authority Key Identifier:
                keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/250320C4761511EDA05B8A63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.12.0.0/16
                  192.207.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:32:32:66:67:22:2d:d6:f1:62:06:f6:c1:59:3c:39:25:5e:
         45:9e:45:17:8d:1f:2d:f9:ce:5d:bd:2d:39:fa:5f:7f:2e:27:
         7a:41:ff:ae:a3:b1:dc:2f:95:23:ea:f8:21:06:a9:2b:ee:63:
         df:7e:7a:5a:a8:48:40:77:ef:fb:1d:83:1f:f7:15:99:d2:f7:
         94:13:74:c3:4c:8f:88:de:9f:9a:b7:bc:84:8d:65:9d:f4:14:
         2d:00:f1:c9:c9:5c:91:9d:1e:9b:40:59:ba:91:12:25:47:ac:
         8c:b4:f6:12:cc:9c:a8:00:75:2f:8e:c9:c9:89:8a:b6:16:3e:
         89:07:2e:e3:b3:7b:05:e3:20:1e:de:cf:ae:c0:ea:d3:62:fa:
         c7:0b:51:db:f7:2e:d8:0f:9f:ad:e1:f7:7e:78:c0:ff:1d:39:
         20:f6:df:f2:7f:54:a9:eb:64:c4:ca:46:6b:cc:04:76:f9:c3:
         b3:36:b2:1b:a6:da:d3:d9:42:29:41:7f:0e:b3:2e:31:35:ea:
         fd:b7:dd:e5:b8:37:83:43:5d:c2:35:58:56:92:4a:23:ac:b7:
         2a:07:24:08:fc:71:70:38:be:35:0d:31:f8:f8:b0:25:a6:03:
         ce:39:76:16:af:8e:75:dc:48:91:90:b2:49:ec:d6:13:55:25:
         c2:97:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:17:18 2026 by rpki-client