Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
File:                     A90B2F28B1F611EF86337B54C4F9AE02.roa (raw, json)
Hash identifier:          FpKYebTOMUd8YipYtl4iDbEzYiMKyHWRqn8sMgieEyo=
Subject key identifier:   9B:78:0C:03:9A:1D:43:A3:F7:39:F0:68:CF:13:FE:EA:DD:5B:61:2F
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       F3
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:14:55 +0000
ROA not before:           Sat 13 Dec 2025 05:44:57 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     134801
IP address blocks:        160.250.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Dec 13 05:44:57 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43bce-ecf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:62:59:72:48:07:9a:79:51:e4:6c:5a:62:
                    44:57:48:77:5a:10:49:ec:01:8e:8f:d6:2c:82:ee:
                    d7:90:e3:cb:a2:4c:a2:69:b0:df:4b:25:3f:2f:f7:
                    dc:df:10:a1:80:0d:09:ed:66:ca:26:c4:90:df:80:
                    9d:20:49:f3:5d:1e:cb:54:86:8a:eb:0c:51:df:82:
                    44:d2:8b:ed:0f:8c:9a:d8:61:cc:ed:74:26:70:9a:
                    e2:fe:0e:f9:35:12:02:61:6f:e8:bf:93:db:da:92:
                    41:cf:11:1f:1a:28:a2:bf:87:c3:d1:ed:d7:09:1d:
                    eb:1d:ab:90:b6:7c:53:4f:9f:43:0d:14:ae:b1:59:
                    ff:3e:e1:de:d7:e9:62:b4:f4:2a:17:d9:94:0b:21:
                    21:83:e9:73:ee:80:83:57:83:42:9b:63:63:50:03:
                    4e:bc:40:9e:28:d9:8e:a6:05:d7:bd:16:fb:d2:b9:
                    a6:61:a8:1d:6f:b4:43:f6:fd:fe:86:89:ba:fc:b5:
                    2a:1c:d7:89:d2:d6:49:0e:57:a2:1a:83:9d:6e:74:
                    43:93:36:e3:de:83:6c:79:14:84:5b:c1:e0:05:7f:
                    86:f4:8b:5a:a9:0a:98:18:87:ec:aa:95:8c:e2:70:
                    3f:0f:81:8d:91:40:3e:2a:73:33:50:c6:da:f4:71:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:0C:03:9A:1D:43:A3:F7:39:F0:68:CF:13:FE:EA:DD:5B:61:2F
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/A90B2F28B1F611EF86337B54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:72:ee:d6:93:f4:59:b8:38:c0:52:2e:e4:8c:b9:0f:46:06:
         b9:94:74:9b:47:57:97:d6:44:ce:ae:d9:4f:42:5c:fe:64:da:
         a8:be:84:c8:e6:8e:b1:5a:f8:58:b3:5c:ad:7c:90:8c:26:41:
         5d:34:ea:97:5f:a4:33:0d:51:60:e2:80:9c:c7:45:08:e3:39:
         66:24:a3:e6:b2:c3:2f:a8:92:dd:86:0f:d0:42:1a:1c:b0:3d:
         85:a4:6e:62:a5:5f:3b:ea:aa:e0:4e:1e:5a:45:6a:84:a3:8b:
         81:87:1e:17:30:34:f9:c5:22:6d:ab:df:5d:09:af:2d:8e:55:
         a3:2d:ca:7a:eb:bb:e1:9c:96:da:4f:7d:29:45:a8:e5:77:02:
         41:c2:22:bf:7e:69:88:8b:41:fe:ce:f2:c6:32:3a:14:30:41:
         12:8e:f2:c3:9d:de:8a:12:60:c8:7c:09:7a:68:11:c8:0d:70:
         6c:7b:55:1f:c4:89:bc:53:db:04:73:34:ab:80:25:60:dc:92:
         ba:c3:53:44:3c:54:8f:ac:30:4d:a8:55:ce:08:99:da:77:a9:
         11:0a:1c:c6:6d:e2:81:9c:9e:ef:37:0e:4b:37:c9:49:3f:e9:
         e3:9a:4e:03:de:5b:73:8d:3c:31:4f:8e:a8:5f:9d:9e:8d:30:
         6b:be:e9:7a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Q3NTYxMTAvBgNVBAUTKDZFREEwQTQ3Q0VBQzVGOTQ5MDE1NDZFRTg5QTNGNUUy
MkUxOUE3NjIwHhcNMjUxMjEzMDU0NDU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2JjZS1lY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs4NiWXJIB5p5UeRsWmJEV0h3WhBJ7AGOj9Ysgu7XkOPLokyiabDfSyU/L/fc
3xChgA0J7WbKJsSQ34CdIEnzXR7LVIaK6wxR34JE0ovtD4ya2GHM7XQmcJri/g75
NRICYW/ov5Pb2pJBzxEfGiiiv4fD0e3XCR3rHauQtnxTT59DDRSusVn/PuHe1+li
tPQqF9mUCyEhg+lz7oCDV4NCm2NjUANOvECeKNmOpgXXvRb70rmmYagdb7RD9v3+
hom6/LUqHNeJ0tZJDleiGoOdbnRDkzbj3oNseRSEW8HgBX+G9ItaqQqYGIfsqpWM
4nA/D4GNkUA+KnMzUMba9HFmdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJt4DAOa
HUOj9znwaM8T/urdW2EvMB8GA1UdIwQYMBaAFG7aCkfOrF+UkBVG7omj9eIuGadi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDc1Ni82MjNDNjVCNkIw
NjcxMUVGODIxNEQ0NjlDNEY5QUUwMi9idG9LUjg2c1g1U1FGVWJ1aWFQMTRpNFpw
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2J0b0tSODZzWDVTUUZVYnVpYVAxNGk0WnAySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0Q3NTYvNjIzQzY1QjZCMDY3MTFFRjgyMTRENDY5QzRGOUFFMDIvQTkwQjJGMjhC
MUY2MTFFRjg2MzM3QjU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoPpEMA0GCSqGSIb3DQEBCwUAA4IBAQAdcu7Wk/RZuDjAUi7kjLkP
Rga5lHSbR1eX1kTOrtlPQlz+ZNqovoTI5o6xWvhYs1ytfJCMJkFdNOqXX6QzDVFg
4oCcx0UI4zlmJKPmssMvqJLdhg/QQhocsD2FpG5ipV876qrgTh5aRWqEo4uBhx4X
MDT5xSJtq99dCa8tjlWjLcp667vhnJbaT30pRajldwJBwiK/fmmIi0H+zvLGMjoU
MEESjvLDnd6KEmDIfAl6aBHIDXBse1UfxIm8U9sEczSrgCVg3JK6w1NEPFSPrDBN
qFXOCJnad6kRChzGbeKBnJ7vNw5LN8lJP+njmk4D3ltzjTwxT46oX52ejTBrvul6
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:11 2026 by rpki-client