Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/2EA48F06569A11F0A878F309C4F9AE02.roa
File:                     2EA48F06569A11F0A878F309C4F9AE02.roa (raw, json)
Hash identifier:          TgVrDlat2+ByZMpKIQ8pI5WNmuoF/FmyVp9TGWTtSyI=
Subject key identifier:   6F:0A:4F:A5:44:AC:4B:1C:96:19:05:24:EE:06:7D:A7:B2:0C:A7:38
Certificate issuer:       /CN=A9184684/serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
Certificate serial:       9B
Authority key identifier: F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/2EA48F06569A11F0A878F309C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:32:39 +0000
ROA not before:           Thu 15 Jan 2026 07:24:33 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     149485
IP address blocks:        160.250.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184684, serialNumber=F1E50163AC506A62CCFB5A8AF56511C38F150414
        Validity
            Not Before: Jan 15 07:24:33 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43ff7-4e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:8d:b1:b3:b5:1a:e2:5d:7d:8d:d4:7f:c9:
                    9e:15:37:7e:ec:d9:85:2d:61:26:48:24:98:11:3c:
                    5d:30:98:87:a6:2c:a4:3e:f4:10:b4:03:78:80:73:
                    7d:15:33:12:91:43:ad:fe:ab:20:13:63:c2:21:4a:
                    53:7b:77:77:b6:e1:20:09:28:09:77:24:c1:bd:81:
                    5f:26:01:1d:6b:7c:7e:84:3a:7e:e6:b7:3c:6a:f7:
                    02:22:49:42:22:bd:09:b8:79:78:d5:73:b1:62:25:
                    15:3f:46:43:52:db:ec:8f:9f:c8:09:ce:96:05:a1:
                    f6:7d:ed:60:84:9b:48:78:82:42:d5:02:1d:d5:b4:
                    4b:f7:a4:8c:7c:07:41:9e:dd:21:23:ee:d7:1b:45:
                    5d:61:35:c6:54:59:97:b3:71:6c:39:b9:d9:5f:50:
                    74:a2:1e:56:76:81:32:94:be:7a:03:b8:f9:0b:b2:
                    01:56:17:b9:6f:de:d2:dd:c4:64:38:99:45:d0:9a:
                    b0:81:e7:65:b7:6d:97:44:97:a8:f2:7a:32:c5:8c:
                    c1:16:cd:39:32:b0:d1:5f:bf:06:6a:92:4a:20:4c:
                    23:51:2f:53:4e:ac:67:e4:d7:c6:f6:00:05:02:36:
                    61:42:06:26:37:6f:ee:cf:e9:da:29:0b:67:26:de:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:4F:A5:44:AC:4B:1C:96:19:05:24:EE:06:7D:A7:B2:0C:A7:38
            X509v3 Authority Key Identifier:
                keyid:F1:E5:01:63:AC:50:6A:62:CC:FB:5A:8A:F5:65:11:C3:8F:15:04:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/8eUBY6xQamLM-1qK9WURw48VBBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8eUBY6xQamLM-1qK9WURw48VBBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/B6BA012C398611F0ACC55914C4F9AE02/2EA48F06569A11F0A878F309C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:df:a1:bd:16:8f:cc:17:ce:6c:bc:f6:79:a2:d1:ad:42:
         d0:c1:72:1c:91:15:0c:bf:53:d6:bf:c8:8e:de:e9:0b:39:95:
         99:92:1e:1c:5f:4d:34:6c:88:ec:ec:30:c5:e5:b6:60:94:4a:
         5b:98:b9:3a:76:f2:a8:91:f9:ab:96:5b:d9:c7:dc:08:3d:05:
         c4:3b:f7:1a:e9:d8:5a:25:90:37:14:0c:a5:54:86:c7:6c:39:
         a5:f2:c3:f5:3e:0a:bd:2d:4e:f1:01:62:84:2a:82:5b:6d:84:
         9f:54:c7:fd:8a:50:67:38:2e:61:50:d0:e2:c1:ee:7c:ed:1d:
         b0:3a:29:c4:74:75:e4:6d:a4:8a:67:c2:e8:20:06:ec:3d:70:
         b8:23:03:53:b9:ce:83:39:74:55:10:0b:1c:48:20:8e:f1:ce:
         78:af:b7:1d:cf:0c:0b:2f:71:3d:30:f8:14:6e:84:20:19:74:
         66:15:4d:d5:df:14:ef:3b:52:58:52:30:dc:f0:ef:b0:87:e1:
         39:c7:50:ae:b8:c9:bf:34:16:98:10:67:c1:ef:24:ff:4f:5a:
         ba:ae:f3:4f:24:9f:80:7d:f0:06:94:a2:02:41:14:4f:b9:85:
         ae:db:18:f4:7f:18:1f:e5:64:28:b0:66:40:51:84:d3:5d:99:
         6b:00:93:c2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQ2ODQxMTAvBgNVBAUTKEYxRTUwMTYzQUM1MDZBNjJDQ0ZCNUE4QUY1NjUxMUMz
OEYxNTA0MTQwHhcNMjYwMTE1MDcyNDMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2ZmNy00ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8+NsbO1GuJdfY3Uf8meFTd+7NmFLWEmSCSYETxdMJiHpiykPvQQtAN4gHN9
FTMSkUOt/qsgE2PCIUpTe3d3tuEgCSgJdyTBvYFfJgEda3x+hDp+5rc8avcCIklC
Ir0JuHl41XOxYiUVP0ZDUtvsj5/ICc6WBaH2fe1ghJtIeIJC1QId1bRL96SMfAdB
nt0hI+7XG0VdYTXGVFmXs3FsObnZX1B0oh5WdoEylL56A7j5C7IBVhe5b97S3cRk
OJlF0Jqwgedlt22XRJeo8noyxYzBFs05MrDRX78GapJKIEwjUS9TTqxn5NfG9gAF
AjZhQgYmN2/uz+naKQtnJt4nhwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG8KT6VE
rEsclhkFJO4GfaeyDKc4MB8GA1UdIwQYMBaAFPHlAWOsUGpizPtaivVlEcOPFQQU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDY4NC9CNkJBMDEyQzM5
ODYxMUYwQUNDNTU5MTRDNEY5QUUwMi84ZVVCWTZ4UWFtTE0tMXFLOVdVUnc0OFZC
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhlVUJZNnhRYW1MTS0xcUs5V1VSdzQ4VkJCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQ2ODQvQjZCQTAxMkMzOTg2MTFGMEFDQzU1OTE0QzRGOUFFMDIvMkVBNDhGMDY1
NjlBMTFGMEE4NzhGMzA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoPoMMA0GCSqGSIb3DQEBCwUAA4IBAQCOjt+hvRaPzBfObLz2eaLR
rULQwXIckRUMv1PWv8iO3ukLOZWZkh4cX000bIjs7DDF5bZglEpbmLk6dvKokfmr
llvZx9wIPQXEO/ca6dhaJZA3FAylVIbHbDml8sP1Pgq9LU7xAWKEKoJbbYSfVMf9
ilBnOC5hUNDiwe587R2wOinEdHXkbaSKZ8LoIAbsPXC4IwNTuc6DOXRVEAscSCCO
8c54r7cdzwwLL3E9MPgUboQgGXRmFU3V3xTvO1JYUjDc8O+wh+E5x1CuuMm/NBaY
EGfB7yT/T1q6rvNPJJ+AffAGlKICQRRPuYWu2xj0fxgf5WQosGZAUYTTXZlrAJPC
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:54 2026 by rpki-client