Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/C18E24EEB1F911EF80160911C4F9AE02.roa
File:                     C18E24EEB1F911EF80160911C4F9AE02.roa (raw, json)
Hash identifier:          CbU8kv0LCnvXsi0KlzOhOJ0Cbx7Rko5vYiK3SNy5Qvc=
Subject key identifier:   06:A4:D1:7E:38:ED:02:AF:19:AD:6D:59:AC:5B:8C:D2:11:39:BB:55
Certificate issuer:       /CN=A913D756/serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
Certificate serial:       F4
Authority key identifier: 6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/C18E24EEB1F911EF80160911C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:14:56 +0000
ROA not before:           Sat 13 Dec 2025 05:44:58 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     64072
IP address blocks:        160.250.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=6EDA0A47CEAC5F94901546EE89A3F5E22E19A762
        Validity
            Not Before: Dec 13 05:44:58 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a43bcf-7ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:90:32:85:4d:c3:7d:80:d2:37:f4:cd:a4:84:
                    cd:5f:fe:4d:f4:80:a2:8c:fc:79:cf:c7:4e:45:28:
                    2d:fe:9e:fd:d6:25:8a:c5:e4:55:57:f6:20:fa:22:
                    ad:8a:cd:da:44:fd:25:21:c2:f4:4d:f1:23:d7:90:
                    07:d6:03:7e:34:fc:44:d8:8d:30:3a:f1:10:ae:29:
                    b1:30:8b:16:5f:c0:d7:5f:a0:c5:50:a6:0a:3f:83:
                    29:79:25:64:cb:8f:78:1c:a0:31:98:ca:ff:24:01:
                    ad:02:60:2e:f8:6c:32:e6:20:65:40:14:df:92:a4:
                    d7:46:e2:f2:de:e1:7f:ca:2b:7c:53:85:d6:8f:6e:
                    8d:88:1e:1d:35:38:a2:df:c8:35:8c:97:cf:d1:9f:
                    47:0d:8f:a1:e2:9a:64:25:9c:cd:41:76:eb:88:a6:
                    a1:21:e0:7c:0e:a0:d5:2f:89:77:e3:ff:41:52:4c:
                    c9:04:b2:23:ec:60:9e:35:97:5f:92:22:3b:af:d9:
                    31:3c:74:e9:b7:6f:fd:9b:d6:9b:24:f8:e9:2c:12:
                    bb:c3:60:ec:89:89:75:11:a6:67:75:ff:0b:fe:08:
                    45:22:73:1b:78:6f:4c:65:34:5c:f1:a1:74:21:08:
                    8c:de:f7:67:9b:86:6c:15:60:55:75:d2:cb:e3:92:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:D1:7E:38:ED:02:AF:19:AD:6D:59:AC:5B:8C:D2:11:39:BB:55
            X509v3 Authority Key Identifier:
                keyid:6E:DA:0A:47:CE:AC:5F:94:90:15:46:EE:89:A3:F5:E2:2E:19:A7:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/btoKR86sX5SQFUbuiaP14i4Zp2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/btoKR86sX5SQFUbuiaP14i4Zp2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/623C65B6B06711EF8214D469C4F9AE02/C18E24EEB1F911EF80160911C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:cc:cc:4d:f2:ae:12:7c:44:57:96:a7:fb:6b:52:58:f2:b9:
         78:22:a0:a0:7c:52:79:f8:8d:fb:96:37:66:92:08:a7:f9:8b:
         c5:c6:43:e4:5b:de:67:cf:6b:04:67:1f:05:24:07:9e:0f:75:
         3b:03:e1:cc:5c:bf:8c:bd:72:4e:ff:90:d7:0a:d5:e8:e7:d2:
         4f:46:c0:25:ff:c9:39:a1:60:ce:f9:c6:90:3c:86:5c:7b:df:
         fc:de:4c:b3:f2:82:7d:da:f4:7e:e2:77:ab:6a:2e:8a:ca:de:
         fe:33:da:c9:53:b2:6b:23:7e:80:4e:62:66:00:31:77:63:78:
         dd:80:f5:d2:0d:bc:2e:a4:4a:c4:24:b5:98:66:91:df:79:7d:
         6a:41:9c:07:e4:25:4b:8e:91:d5:5a:c6:b2:c6:57:17:fa:34:
         9b:3c:d6:55:d2:fc:2a:b1:14:00:2f:3e:23:d9:be:0b:ac:e6:
         1b:26:64:ca:ee:cd:dc:6b:4f:d9:86:10:dc:d8:57:71:80:24:
         70:03:b4:66:d3:fb:ff:9e:47:09:f4:65:33:80:41:0a:33:21:
         bf:0a:9e:c3:62:0b:6d:42:78:78:94:d2:4d:38:04:fe:60:28:
         bb:35:cb:78:a4:ad:c7:e7:b5:c7:55:12:e1:d6:6b:2b:ed:41:
         85:f8:b6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:03 2026 by rpki-client