Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/C38216B8396E11F1992DA1BA96833773.roa
File:                     C38216B8396E11F1992DA1BA96833773.roa (raw, json)
Hash identifier:          /iOQsyc6F1r8WmEZPqbUXMRcjfmcWlpbEB4138jOfIk=
Subject key identifier:   CE:EB:07:69:10:D3:B7:B9:2A:1C:4F:83:C3:87:5A:2B:EE:DE:22:F0
Certificate issuer:       /CN=A912B12A/serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
Certificate serial:       0112
Authority key identifier: 27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/C38216B8396E11F1992DA1BA96833773.roa
Signing time:             Thu 16 Apr 2026 08:32:11 +0000
ROA not before:           Thu 16 Apr 2026 08:32:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     38193
IP address blocks:        160.250.114.0/24 maxlen: 24
                          160.250.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=2722C5ABBEE63B76B9DA966C78D73A6657D244EB
        Validity
            Not Before: Apr 16 08:32:11 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69e09e8b-f4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:ee:a7:b4:64:ad:c9:a9:9a:4e:73:b8:46:
                    c1:14:50:19:81:d6:a8:51:5f:7d:00:f4:ee:88:08:
                    44:3e:b6:98:d7:df:d9:57:83:e8:5f:a3:16:c6:ed:
                    c9:20:4d:f1:96:dc:38:f9:c6:7f:d0:dc:ed:36:ff:
                    b5:35:13:ff:30:e5:ed:19:86:40:1f:40:06:24:51:
                    82:9a:2a:7d:d3:f2:46:68:ce:82:47:e6:64:20:6c:
                    d9:47:db:00:c2:ef:c5:57:9a:fd:e6:4b:56:26:bf:
                    01:06:ca:2b:c9:bc:3e:06:c7:0c:9a:4c:c8:9d:c6:
                    51:ba:7d:a1:9e:d4:b3:f4:f7:24:69:0b:67:f5:cd:
                    43:14:3c:4e:80:4c:e1:8f:09:46:13:7c:3b:5f:88:
                    7e:5b:6d:d5:b9:d8:38:77:1c:71:63:7d:fc:0d:50:
                    d3:35:33:1e:2d:74:fe:3e:8a:84:84:25:75:dc:cd:
                    b2:74:cf:f1:d4:a8:a2:8e:c6:86:2e:da:eb:2f:40:
                    67:71:91:7b:29:f6:78:59:76:72:a2:6d:c1:31:da:
                    15:2f:49:35:8f:7a:97:20:52:9e:9b:99:84:b1:48:
                    b9:6c:c1:f4:50:4d:e5:a3:5e:ae:97:e0:e5:63:bc:
                    d4:5f:60:06:de:b5:a6:ae:62:90:2c:88:d2:43:c1:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:EB:07:69:10:D3:B7:B9:2A:1C:4F:83:C3:87:5A:2B:EE:DE:22:F0
            X509v3 Authority Key Identifier:
                keyid:27:22:C5:AB:BE:E6:3B:76:B9:DA:96:6C:78:D7:3A:66:57:D2:44:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/JyLFq77mO3a52pZseNc6ZlfSROs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JyLFq77mO3a52pZseNc6ZlfSROs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B1D4A59CAE3D11EF96B76C6AC4F9AE02/C38216B8396E11F1992DA1BA96833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:bb:57:72:96:d4:43:3d:f9:f3:d7:1c:60:c5:a5:21:c9:b0:
         bd:9e:ac:52:72:a9:17:2b:b8:5c:80:0b:e8:4e:7e:ea:90:a1:
         12:82:5f:6f:87:c3:b0:e3:34:02:e9:85:7b:d7:0a:02:17:f9:
         9f:c9:23:eb:17:05:20:53:97:5d:4f:9d:c8:85:33:0b:20:06:
         e1:4e:7c:6c:35:56:07:70:f8:e7:85:3a:53:65:d7:7a:4d:5b:
         91:7e:66:6f:08:68:56:93:40:5c:bc:e6:15:57:00:da:07:1d:
         b6:1c:63:8f:8a:76:97:5b:97:a9:63:71:d3:3f:13:5c:26:80:
         14:d8:10:54:ca:62:88:88:75:d8:e4:e9:05:12:4a:b3:c2:40:
         0f:22:1b:44:fd:ab:17:6c:8c:86:7c:e6:d2:2a:17:1a:3c:c2:
         ef:d8:28:95:2a:0f:7c:f2:1a:2d:b6:7e:c6:73:26:ec:0f:7c:
         26:9f:d2:a3:91:e8:ae:52:83:66:29:9e:f8:94:7b:a5:bd:ad:
         62:9c:a9:ce:a9:0c:0f:7a:b5:b4:b9:cb:5d:84:e9:99:b8:20:
         61:3a:37:cc:ef:6d:2f:93:83:70:e3:99:18:be:89:0d:ce:c5:
         84:33:49:33:a1:ac:84:07:78:bd:be:cc:44:c9:8f:49:b4:02:
         f6:94:1a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:22 2026 by rpki-client