Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/8B349526E61B11EFA5CFAA1CC4F9AE02.roa
File:                     8B349526E61B11EFA5CFAA1CC4F9AE02.roa (raw, json)
Hash identifier:          DfxQYn473L3GRcLQOcasHyVtEcw9/bAiZQ1Qjo4k8zI=
Subject key identifier:   60:35:BE:D6:75:12:E6:97:42:B7:01:87:EB:9C:34:CF:A0:DB:3C:47
Certificate issuer:       /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial:       010A
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/8B349526E61B11EFA5CFAA1CC4F9AE02.roa
Signing time:             Mon 27 Apr 2026 06:44:38 +0000
ROA not before:           Mon 27 Apr 2026 06:44:38 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     150001
IP address blocks:        161.248.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
        Validity
            Not Before: Apr 27 06:44:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69ef05d6-56d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:cc:37:fe:c7:0f:cd:ca:7a:dc:e0:c4:02:
                    6d:49:3f:54:b3:b6:dd:62:84:a7:f5:48:5f:25:30:
                    ad:18:37:86:72:c3:09:8b:c4:09:ca:e2:54:69:96:
                    37:47:41:84:26:75:79:91:19:95:a0:51:69:51:f8:
                    d6:4e:ff:fc:a3:1a:1e:62:13:d6:10:21:19:04:18:
                    f7:a7:57:43:37:c2:91:0c:71:b3:88:f5:2e:1f:33:
                    d6:9e:09:d9:fb:a4:a2:fd:be:54:96:db:e3:8f:90:
                    5b:d5:b0:11:40:a1:29:8e:78:44:98:3f:4a:e4:40:
                    fd:d1:ba:57:e0:8f:d1:d4:8d:6e:fb:c9:d2:11:c8:
                    6e:51:c4:89:99:3b:83:ae:ef:b2:ad:29:4f:52:e5:
                    16:8e:f8:f9:11:1e:f6:6c:5a:4d:21:e3:7a:94:24:
                    b9:20:d5:f2:37:17:cf:f1:6c:13:66:8c:5f:7e:82:
                    c3:ad:2f:13:c2:3f:f2:60:e9:3f:c1:55:f9:a3:e6:
                    9c:29:0a:39:92:55:40:6e:78:92:17:13:05:d3:d1:
                    39:d1:98:b9:b8:ae:b9:25:53:f7:bd:41:00:58:d5:
                    5d:f0:ce:3f:3e:0f:43:aa:85:f9:bd:a5:02:de:85:
                    44:09:4a:19:54:68:40:e2:80:18:b0:b3:36:3d:02:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:35:BE:D6:75:12:E6:97:42:B7:01:87:EB:9C:34:CF:A0:DB:3C:47
            X509v3 Authority Key Identifier:
                keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/8B349526E61B11EFA5CFAA1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:8a:70:0f:3d:2d:00:6a:8e:cd:a2:0c:b3:04:1c:a0:14:
         32:55:4d:b3:32:8f:ac:b3:78:b3:e8:42:48:d6:2d:be:e5:1a:
         a8:61:4d:3b:0c:a2:0e:f1:ab:00:fa:73:0b:09:2e:da:8d:5e:
         fe:03:48:80:db:5b:0b:c6:2a:f0:b2:8e:b2:10:03:61:45:07:
         a7:24:e0:80:73:de:89:b3:98:3c:e8:1e:2f:58:f7:8a:b2:9f:
         01:8f:66:24:cf:77:f8:1f:2d:c2:0a:fd:13:fe:f5:35:8c:77:
         b1:54:19:b7:31:0c:da:c9:d9:ad:96:7f:43:18:fe:68:76:6f:
         bf:64:6a:cf:ee:5a:76:80:b4:80:38:8e:a9:3f:46:93:9a:93:
         6e:b3:c0:93:e6:7d:16:47:cd:1d:9d:f7:00:41:64:ed:8c:8f:
         53:8f:0d:7c:4d:16:06:30:a8:22:28:8b:fc:bb:d3:1e:22:70:
         07:8f:78:b9:83:db:4e:64:13:6a:5b:e4:fc:d7:1c:84:dd:4e:
         6a:b4:e3:a3:25:a8:36:d3:7b:66:9d:7b:26:30:76:d6:cf:5c:
         6c:43:90:fd:ff:a4:f9:cb:32:65:8b:47:f7:26:35:0f:fc:11:
         33:52:02:e2:07:55:a0:66:b8:5c:7a:61:7a:59:aa:98:56:0f:
         e9:d9:1a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:22 2026 by rpki-client