Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/5D117282A7F911EF8E7B1773C4F9AE02.roa
File:                     5D117282A7F911EF8E7B1773C4F9AE02.roa (raw, json)
Hash identifier:          ANjzdpRTnZYnb2IgP9uL0uuWKgG+fxMLmh0yV+GGQqk=
Subject key identifier:   37:8F:8C:4F:08:0B:30:71:EC:97:93:85:5A:7C:82:3A:54:E3:B3:0C
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       F9
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/5D117282A7F911EF8E7B1773C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:12:17 +0000
ROA not before:           Mon 19 Jan 2026 05:24:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139326
IP address blocks:        160.250.48.0/23 maxlen: 23
                          160.250.48.0/24 maxlen: 24
                          160.250.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: Jan 19 05:24:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41f11-3bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:28:8a:8d:01:dd:72:e7:8d:c9:51:d9:a3:26:
                    3c:ca:92:e7:2e:d8:3f:1c:6f:49:4a:fa:88:4b:ca:
                    fb:d6:3e:af:e9:22:40:82:cc:cd:48:4d:26:f9:05:
                    32:fe:cc:af:cc:2d:53:ae:e6:cf:aa:23:d2:ab:a7:
                    65:0c:5d:95:ee:44:f1:36:8e:3e:2a:b5:2d:bb:80:
                    1e:34:08:58:17:9e:8a:a8:7a:de:75:2f:a8:67:ff:
                    0a:80:8f:f4:2a:ad:b3:e8:29:55:e8:c7:47:2e:11:
                    b4:05:47:b6:f6:c2:87:45:46:a4:81:09:a1:22:a5:
                    b4:df:a6:8b:42:9f:9d:fb:ef:6b:e0:35:9c:99:d7:
                    54:c2:53:f8:cb:b9:4c:2c:52:14:f8:e1:ac:56:4e:
                    2b:6d:be:03:2b:0d:49:61:9d:e5:fe:f9:fd:13:52:
                    ad:49:2e:29:be:30:22:9e:a1:00:0a:b0:47:46:ec:
                    e4:4d:e2:ba:94:2b:07:48:f5:42:63:89:0e:1c:f3:
                    d7:22:5d:b3:2d:2a:87:c1:ae:10:0e:75:ec:80:1e:
                    d9:b5:67:6b:94:00:2c:d6:e7:8e:c6:41:74:f4:13:
                    b5:1a:6d:8f:fa:86:83:72:37:4e:40:45:0d:05:ea:
                    08:f0:3e:a1:c6:d1:f3:75:b9:2f:d4:8e:a2:ea:32:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:8C:4F:08:0B:30:71:EC:97:93:85:5A:7C:82:3A:54:E3:B3:0C
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/5D117282A7F911EF8E7B1773C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:41:73:6e:2e:9b:53:0c:96:78:4c:fc:1e:6d:3a:3d:df:
         0f:3e:f8:11:80:da:89:56:c6:2e:8c:12:f2:8c:97:a2:5b:76:
         ce:43:43:fc:ba:f2:c4:f6:9f:4f:05:14:73:cb:6c:fd:e1:96:
         d0:87:e3:5e:15:9a:01:bf:5b:eb:b4:bf:1c:6f:7f:6a:21:0e:
         00:0b:10:43:8c:6e:73:f4:92:d6:6c:7f:ff:06:d0:5f:22:28:
         fc:2b:23:ce:e6:68:1b:c1:dd:7e:59:87:51:6a:56:dd:47:12:
         28:da:6c:d7:78:18:ba:02:ac:f3:65:d1:a8:29:06:44:4f:90:
         12:fe:23:b0:bf:44:0e:0c:9e:5d:11:2d:b5:51:66:fa:3a:01:
         24:58:1d:7e:d2:e6:22:d5:60:c7:ec:46:15:94:79:2a:44:9a:
         e3:92:1c:c3:7b:2f:76:df:9f:b9:bd:40:2b:01:ce:31:e7:a2:
         e2:a8:a2:a5:a7:55:78:15:9a:bd:c7:43:05:04:85:a6:54:ee:
         37:b3:85:a8:da:2d:0f:49:de:71:a8:d4:f2:20:5e:69:de:56:
         2b:cd:b4:9e:01:d9:3b:b6:1a:a7:0f:52:16:83:ad:0f:2f:ed:
         d1:90:29:db:ff:46:72:51:f6:9f:90:f9:d7:ef:55:06:6c:09:
         1a:6f:c5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:10 2026 by rpki-client