Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F03C370AE3E11EF9289306CC4F9AE02.roa
File:                     9F03C370AE3E11EF9289306CC4F9AE02.roa (raw, json)
Hash identifier:          VQA6pjuu/o8U/g10GJhyRj7RgcZTt+KPBg7nxgVDWd0=
Subject key identifier:   FD:5B:DF:2C:5F:D9:45:56:BF:4A:29:CC:32:0B:72:EF:CA:A4:50:BA
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       F7
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F03C370AE3E11EF9289306CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:13:41 +0000
ROA not before:           Wed 17 Dec 2025 06:24:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153460
IP address blocks:        160.250.114.0/24 maxlen: 24
                          160.250.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Dec 17 06:24:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a457a5-91e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:b5:9d:81:ab:34:0a:76:75:fb:96:16:3a:
                    9d:7f:b2:8f:c5:63:9d:38:06:94:51:90:02:20:8c:
                    41:4e:36:3b:ce:17:0b:1f:a4:75:4e:cd:59:7e:30:
                    ba:01:f4:3e:56:02:46:16:3f:6b:b4:85:d3:c9:42:
                    99:95:f5:74:12:f8:c9:ba:1e:0d:8c:e0:91:ef:63:
                    01:79:ca:6f:f8:31:a5:47:c8:7b:20:4c:90:9f:11:
                    67:46:4e:ca:4b:34:0d:b2:2a:33:6a:17:11:0a:38:
                    81:9f:1e:d8:2f:04:e2:f6:6f:91:48:ce:61:75:66:
                    8b:10:8b:7d:99:ff:de:5d:d7:f6:c0:db:1e:cf:39:
                    cb:4a:b5:15:f3:35:27:a8:16:75:72:3d:cb:d4:18:
                    1a:41:07:73:63:30:e1:5d:4d:07:b0:c5:a3:b0:c3:
                    ee:6d:7a:68:ec:76:a4:4f:44:56:89:c8:79:93:73:
                    3f:08:ee:6e:84:f3:63:cd:2f:57:97:33:c8:99:22:
                    df:15:f1:fe:0b:fe:e9:b4:08:1c:2d:7c:9f:a4:65:
                    fa:7f:be:f3:f3:92:5b:fc:b5:d3:0b:d4:7a:74:c1:
                    d5:e0:c6:12:64:ba:eb:f3:fd:96:02:7a:29:4b:f2:
                    c4:48:73:e8:b1:e5:50:44:40:28:84:f3:1c:20:a8:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:5B:DF:2C:5F:D9:45:56:BF:4A:29:CC:32:0B:72:EF:CA:A4:50:BA
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/9F03C370AE3E11EF9289306CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:59:7a:76:5c:c1:ce:c8:7a:c7:25:8c:5e:a7:2e:a5:53:
         4a:37:af:1c:42:bd:86:98:ef:77:67:91:bb:c6:23:4d:9f:01:
         2f:4a:54:89:cd:af:40:8d:b8:e4:fb:04:78:b9:d3:44:7d:df:
         b8:ed:72:75:2f:36:e8:43:9b:a3:ff:59:53:6e:b4:d6:d9:5b:
         53:34:4e:25:63:44:b4:f9:97:42:ee:7d:8f:30:16:13:03:53:
         63:8c:a9:2a:33:db:0f:e6:f7:94:e3:9a:82:09:a7:47:4e:97:
         99:ed:47:39:a6:76:82:35:c9:0e:10:d5:c0:b4:b8:e4:bd:de:
         6e:73:22:f3:38:d5:78:a7:ea:cb:c5:4b:38:14:49:38:fb:bc:
         ef:3f:af:4e:65:a7:9d:85:a2:fb:51:2a:e0:a1:5d:00:4a:68:
         91:70:d9:c9:a1:0a:f9:05:3f:5b:c1:40:3a:c8:70:92:a4:41:
         91:e0:31:3e:34:e2:11:5d:b8:1a:9f:f8:e2:1f:24:14:68:48:
         93:f1:40:87:cb:01:d3:be:27:6a:c2:6b:09:22:aa:1e:26:8c:
         28:ee:18:5c:c6:2a:1b:a2:ae:49:40:29:a3:4f:1d:dd:60:1a:
         eb:64:85:76:61:98:bb:21:ea:b6:0e:75:18:7a:e2:ac:1c:f3:
         b4:f0:70:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKDI3MjJDNUFCQkVFNjNCNzZCOURBOTY2Qzc4RDczQTY2
NTdEMjQ0RUIwHhcNMjUxMjE3MDYyNDIxWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NTdhNS05MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAO1nYGrNAp2dfuWFjqdf7KPxWOdOAaUUZACIIxBTjY7zhcLH6R1Ts1ZfjC6
AfQ+VgJGFj9rtIXTyUKZlfV0EvjJuh4NjOCR72MBecpv+DGlR8h7IEyQnxFnRk7K
SzQNsiozahcRCjiBnx7YLwTi9m+RSM5hdWaLEIt9mf/eXdf2wNsezznLSrUV8zUn
qBZ1cj3L1BgaQQdzYzDhXU0HsMWjsMPubXpo7HakT0RWich5k3M/CO5uhPNjzS9X
lzPImSLfFfH+C/7ptAgcLXyfpGX6f77z85Jb/LXTC9R6dMHV4MYSZLrr8/2WAnop
S/LESHPoseVQREAohPMcIKia3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP1b3yxf
2UVWv0opzDILcu/KpFC6MB8GA1UdIwQYMBaAFCcixau+5jt2udqWbHjXOmZX0kTr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9CMUQ0QTU5Q0FF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi9KeUxGcTc3bU8zYTUycFpzZU5jNlpsZlNS
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0p5TEZxNzdtTzNhNTJwWnNlTmM2WmxmU1JPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkIxMkEvQjFENEE1OUNBRTNEMTFFRjk2Qjc2QzZBQzRGOUFFMDIvOUYwM0MzNzBB
RTNFMTFFRjkyODkzMDZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPpyMA0GCSqGSIb3DQEBCwUAA4IBAQCXmll6dlzBzsh6xyWMXqcu
pVNKN68cQr2GmO93Z5G7xiNNnwEvSlSJza9Ajbjk+wR4udNEfd+47XJ1LzboQ5uj
/1lTbrTW2VtTNE4lY0S0+ZdC7n2PMBYTA1NjjKkqM9sP5veU45qCCadHTpeZ7Uc5
pnaCNckOENXAtLjkvd5ucyLzONV4p+rLxUs4FEk4+7zvP69OZaedhaL7USrgoV0A
SmiRcNnJoQr5BT9bwUA6yHCSpEGR4DE+NOIRXbgan/jiHyQUaEiT8UCHywHTvidq
wmsJIqoeJowo7hhcxioboq5JQCmjTx3dYBrrZIV2YZi7Ieq2DnUYeuKsHPO08HBl
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:44 2026 by rpki-client