Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
File:                     9FE1BE90366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          bTEfr6e3UYTJtEKaPYWG9RTqbYRlEbEpek9SXbZLbzk=
Subject key identifier:   C1:13:16:0F:11:8F:03:21:20:0A:51:60:D8:97:51:AD:5A:C5:4D:5F
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       026E
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:17 +0000
ROA not before:           Mon 23 Jun 2025 03:22:15 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     137885
IP address blocks:        161.82.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Jun 23 03:22:15 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a485b8-689e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:5c:79:8d:6c:c1:04:bd:40:df:22:1d:f9:
                    09:d7:9d:d0:92:d9:68:00:d5:b4:5a:9c:53:cd:de:
                    81:3a:e9:b1:0e:26:e0:23:7a:70:2c:a8:26:0b:f0:
                    56:6a:44:08:09:dc:16:33:67:ed:89:b7:42:2a:2e:
                    b3:2b:eb:ea:af:03:ad:90:f7:d4:03:ed:c1:6b:7b:
                    12:2c:f3:e6:35:5b:90:01:27:ba:1e:e1:73:77:e5:
                    c7:40:48:da:da:84:a4:28:03:61:28:3f:a1:8d:93:
                    24:99:fb:8d:80:03:05:45:84:87:7b:f4:c5:48:0c:
                    f9:44:c7:a8:c6:5e:f0:3c:b4:9a:25:db:0c:1b:5f:
                    db:39:1a:2f:32:44:c6:91:a6:a0:4d:57:8e:b9:b1:
                    af:9a:92:1b:45:7d:5c:8f:52:6e:b5:8d:f9:87:89:
                    97:88:0a:6c:cc:bc:f7:9c:90:42:a6:7c:5f:52:62:
                    35:4d:aa:a0:cb:ed:9f:7f:30:ee:02:89:97:2f:b8:
                    c0:a4:a6:41:77:21:ec:07:dd:13:9c:ca:28:bb:9e:
                    c6:b0:eb:26:08:1f:6c:2b:96:a9:a6:cf:18:e9:2a:
                    2f:5a:8b:d8:8b:34:a4:cf:0b:ca:38:ea:8b:8b:cc:
                    a0:7f:89:85:a6:62:25:b8:3d:5b:13:36:7c:d3:ef:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:13:16:0F:11:8F:03:21:20:0A:51:60:D8:97:51:AD:5A:C5:4D:5F
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/9FE1BE90366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.82.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:61:bb:d2:f2:21:a2:95:45:96:86:43:91:46:fa:47:92:d1:
         05:9f:1e:7a:59:3b:be:55:32:cd:7c:c9:f4:54:99:73:31:cb:
         1b:d9:0d:70:1d:fb:47:cf:35:f3:79:8a:af:1d:d9:d6:72:91:
         39:c6:a5:2b:67:91:3a:00:e6:36:ea:b6:99:ea:0e:ad:22:33:
         e9:85:09:b4:ac:de:4d:3d:e1:06:e6:61:1b:f0:ec:25:62:75:
         c3:0e:11:00:c3:02:50:4f:34:fb:80:86:01:19:cf:10:5b:90:
         90:9b:0e:27:59:d8:5a:8a:fc:fa:e4:d8:6e:69:94:3f:e6:cc:
         d4:8a:eb:c2:b9:96:a9:17:84:67:67:61:31:5e:4a:52:b7:b2:
         aa:7c:1b:4d:b3:98:fb:c1:88:40:3e:f8:74:5b:47:24:b5:c8:
         75:f7:38:f1:ca:2b:0c:39:ca:6d:2f:96:17:a9:99:ad:08:b7:
         a6:82:00:3b:71:a1:73:da:b2:21:19:44:86:26:38:59:5a:c4:
         bd:48:a8:48:ff:10:96:78:d1:f1:04:62:6a:4d:d9:1f:7a:63:
         95:ee:b9:c6:df:5e:33:ea:9c:8f:41:c1:9e:93:0e:d0:a1:8c:
         17:7d:ed:29:9e:60:7c:4b:34:60:ee:fe:f8:ec:19:18:e8:4f:
         79:69:b3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:10:32 2026 by rpki-client