Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/4B34CDD888EB11F09EC0EE50C4F9AE02.roa
File:                     4B34CDD888EB11F09EC0EE50C4F9AE02.roa (raw, json)
Hash identifier:          LTeDYOxv1CdVjP62uw0VyofY9va/1s4GlAErksCQQfE=
Subject key identifier:   B8:69:1F:01:43:7E:E9:C2:F1:2E:64:C7:6D:56:81:95:CD:B6:57:BB
Certificate issuer:       /CN=A91982B6/serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
Certificate serial:       FA
Authority key identifier: 39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/4B34CDD888EB11F09EC0EE50C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:26:22 +0000
ROA not before:           Sun 01 Mar 2026 08:26:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142615
IP address blocks:        160.250.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=390A3837ABA6912A2CF29E610DA49555DF2C6FA5
        Validity
            Not Before: Mar  1 08:26:22 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f82e-e8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:4f:b3:68:cf:5f:2e:fc:7f:f5:3e:53:c1:
                    fb:3d:50:b3:03:fe:31:7c:c6:29:d1:b3:b6:a6:49:
                    4c:54:0c:81:1a:bc:4f:b5:33:bf:4c:60:54:43:56:
                    c7:c0:82:ef:9b:6c:84:52:65:91:ce:ec:1a:7d:0f:
                    89:e2:95:47:50:f6:a8:99:58:e6:b0:64:dc:5c:cf:
                    df:64:2e:99:89:45:83:3d:74:47:f1:16:4f:60:16:
                    06:1f:a0:02:de:6e:57:20:62:88:ad:8a:9a:b4:12:
                    f4:e3:eb:89:11:35:6a:6f:a2:5e:70:73:4b:30:4c:
                    88:a7:91:b8:fa:1f:26:5a:b8:7d:0a:5a:6a:db:21:
                    75:4f:ab:53:f5:5e:74:a4:7c:b9:42:5b:d3:c2:39:
                    ac:a2:e9:9d:0f:6e:1e:0e:5d:e8:53:70:de:73:73:
                    61:27:ef:55:78:9b:c5:af:ac:eb:e0:d4:41:a3:5c:
                    b7:be:81:05:66:93:65:cf:b4:32:de:bd:84:9d:e6:
                    b6:92:cb:ec:42:82:0b:63:97:68:5b:95:9e:4a:0a:
                    91:c0:9a:92:aa:84:31:3c:af:9c:4d:2d:6a:d3:18:
                    f3:bc:da:48:85:16:87:db:50:6d:1a:92:90:f6:cf:
                    6c:49:98:9b:96:a7:e5:03:c2:1c:a7:55:5e:3a:47:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:69:1F:01:43:7E:E9:C2:F1:2E:64:C7:6D:56:81:95:CD:B6:57:BB
            X509v3 Authority Key Identifier:
                keyid:39:0A:38:37:AB:A6:91:2A:2C:F2:9E:61:0D:A4:95:55:DF:2C:6F:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/OQo4N6umkSos8p5hDaSVVd8sb6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OQo4N6umkSos8p5hDaSVVd8sb6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/DE7E321ECB5911EF86915B61C4F9AE02/4B34CDD888EB11F09EC0EE50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ff:d0:fe:56:44:d1:7a:79:c0:5f:ab:16:bb:62:7e:8d:d5:
         98:b4:50:ef:f3:5d:22:02:f5:56:1c:58:51:22:be:25:b6:8b:
         7b:b9:81:98:cc:08:79:68:dd:1f:1f:fa:a9:d3:e8:86:50:26:
         17:01:f7:79:2d:1f:14:c4:55:50:02:6e:71:9d:be:75:fd:55:
         92:86:e1:8f:40:f7:23:65:c4:4f:8e:38:3b:14:0a:c2:08:9d:
         65:5d:b0:11:47:74:12:22:63:2c:70:d9:b8:38:69:e9:1f:67:
         ba:ec:34:38:fe:d6:94:48:95:20:18:2e:be:6b:d0:b1:81:22:
         e6:ae:54:3c:3c:77:70:2a:b6:b7:b9:97:bf:d1:8d:3e:7f:b3:
         3e:8d:0c:9a:a3:b0:94:30:c1:f6:94:6e:9e:ef:28:ac:33:7b:
         49:b5:fc:e1:28:48:21:5d:a4:36:e0:8b:3d:52:f0:2a:68:cc:
         41:cd:67:56:4c:4a:e1:89:5e:f5:e5:f2:b9:a7:0f:70:06:db:
         a7:09:85:61:84:2c:53:b2:65:13:79:88:8a:4b:7c:f8:5b:c4:
         56:6a:39:df:a3:2f:eb:b7:ae:3e:e9:68:ea:ee:44:93:04:1b:
         6f:e5:73:bc:69:ee:b3:7b:a9:d6:09:17:b1:9a:3c:40:09:77:
         e8:a2:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:03 2026 by rpki-client