Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/0B65C980136D11F09F542C81C4F9AE02.roa
File:                     0B65C980136D11F09F542C81C4F9AE02.roa (raw, json)
Hash identifier:          wGUGCDLQuCuMzbcHbV/cBOi37S+j6xYKnWjU86HEOho=
Subject key identifier:   7E:0E:6A:32:08:72:62:71:EE:92:6B:27:5F:5E:17:9B:4C:A3:A9:0F
Certificate issuer:       /CN=A91F3B5F/serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
Certificate serial:       B1
Authority key identifier: DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/0B65C980136D11F09F542C81C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:20:56 +0000
ROA not before:           Sun 09 Nov 2025 04:51:55 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153526
IP address blocks:        161.248.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl
                          rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3B5F, serialNumber=DEB4C0B907FACA1C5D3776BD4946F4BAA8CA6B30
        Validity
            Not Before: Nov  9 04:51:55 2025 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a58eb8-67e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6f:fd:3f:a2:fe:ab:2e:a7:b3:91:32:12:10:
                    21:fa:41:94:92:42:20:62:46:7e:bf:67:a7:d4:64:
                    81:d4:09:be:a3:d0:92:c7:6a:3d:d9:75:3c:be:d0:
                    db:ed:17:80:0a:74:64:8f:87:62:c6:69:7a:ac:7f:
                    e1:f0:da:a0:74:0c:3b:87:21:99:8e:17:3f:20:d9:
                    04:f7:39:63:57:b0:cc:eb:3b:37:5d:2d:1c:07:20:
                    e0:68:1e:d2:40:c6:e8:79:2f:f9:c3:f3:72:76:32:
                    ad:92:e1:8d:c5:c5:cc:e8:21:58:db:7d:56:0f:b5:
                    cf:b9:1f:fe:74:bd:5a:ac:13:55:01:d2:39:d3:ca:
                    79:aa:1c:94:c2:ca:8e:3c:cb:9c:8a:45:49:91:4b:
                    51:b3:7a:ce:a8:12:4a:5d:52:bd:a5:15:e6:17:71:
                    43:6a:fa:0f:fc:64:b4:d1:b7:c1:2d:1a:e2:4f:3e:
                    f4:8d:c2:43:df:92:fe:d0:62:db:8a:f9:9c:85:4e:
                    9a:98:6b:b6:0f:10:89:38:44:f4:46:83:36:c9:b1:
                    d7:0f:72:6d:56:4d:8a:53:a7:ff:9b:d2:08:3a:ad:
                    71:84:0d:ca:1b:f3:23:f4:a9:ce:47:fb:0c:14:7a:
                    0e:2d:4c:4e:5d:55:65:e6:39:e5:fb:f0:af:b4:d2:
                    a9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0E:6A:32:08:72:62:71:EE:92:6B:27:5F:5E:17:9B:4C:A3:A9:0F
            X509v3 Authority Key Identifier:
                keyid:DE:B4:C0:B9:07:FA:CA:1C:5D:37:76:BD:49:46:F4:BA:A8:CA:6B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/3rTAuQf6yhxdN3a9SUb0uqjKazA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3rTAuQf6yhxdN3a9SUb0uqjKazA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3B5F/B170C912136611F082E3C50DC4F9AE02/0B65C980136D11F09F542C81C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:04:cd:f6:55:8b:83:b0:27:6d:e9:6b:d9:52:29:1b:ca:
         3d:3a:fc:e2:48:e0:d5:6b:31:4f:86:64:28:a6:8d:47:5a:1a:
         5f:88:78:98:0b:df:de:5b:b7:69:73:f4:94:c9:19:0a:24:6a:
         fe:6a:8a:4e:bc:e4:15:dc:d3:ac:0d:2a:94:c3:a4:f3:16:ea:
         49:9b:61:ee:0c:04:5f:02:17:84:9a:0e:f0:4d:58:25:68:5f:
         06:e1:93:f8:f2:4d:05:86:47:cd:9a:27:5b:2d:99:ce:05:47:
         37:8d:96:73:fb:68:dd:d4:98:ae:26:36:9d:df:1c:98:10:f4:
         16:ac:e3:3f:6a:fa:92:21:40:31:14:84:29:73:42:f5:ed:4d:
         34:08:b8:05:5f:7f:51:a4:b4:1b:4f:b2:c1:ff:75:c1:10:e4:
         29:c3:18:39:6f:67:79:6e:0c:c4:a7:6c:ee:c6:00:ea:63:23:
         fd:22:72:ae:ad:7a:d4:b5:d5:6a:27:62:d9:13:76:02:6e:f1:
         c7:c8:a7:59:e8:2b:7f:d0:c0:4f:5e:d2:7d:58:2f:cf:f6:c9:
         78:23:c6:79:aa:a3:66:34:2e:20:31:b2:64:21:3c:c4:c8:8d:
         71:ce:de:52:c0:fc:17:ae:55:89:33:4b:6f:3b:71:95:39:3d:
         af:bc:ed:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:04:50 2026 by rpki-client