Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0612FCC62F11F096D6631CC4F9AE02.roa
File:                     3A0612FCC62F11F096D6631CC4F9AE02.roa (raw, json)
Hash identifier:          AblWgtjNw/aCxB7oaSZ2HIA0KmhC7UB6th1bhO3CumQ=
Subject key identifier:   29:F9:07:CB:21:D9:C5:13:FC:12:0D:A5:93:3C:B4:01:E5:4B:8A:98
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       0851
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0612FCC62F11F096D6631CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:15:49 +0000
ROA not before:           Thu 20 Nov 2025 16:37:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153450
IP address blocks:        160.250.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Nov 20 16:37:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4ac85-ba96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:8c:93:1c:bf:f7:1a:cd:7e:b1:24:df:f2:
                    9b:cc:75:37:cc:e5:eb:55:f1:58:28:80:89:3a:74:
                    62:71:4b:3d:e0:a3:c0:3d:69:bd:36:cc:cd:a0:58:
                    1b:b3:3f:a7:c2:93:f6:46:3a:58:f0:ba:c1:8c:c0:
                    70:c2:56:18:2e:16:26:3e:ff:04:9b:4e:7b:54:fb:
                    5f:b6:1f:d1:a6:29:93:06:d0:ad:65:35:fe:b8:8c:
                    c0:85:26:77:3d:6c:65:68:ee:eb:08:ef:44:1a:08:
                    4d:ad:ff:f1:30:d2:2d:09:87:86:47:a6:0f:61:90:
                    e1:c1:dc:a0:9b:8a:ee:38:19:5a:d7:9a:db:2b:d7:
                    b6:10:a2:c2:fa:7d:e5:30:cc:d4:a4:be:55:6a:3f:
                    ed:53:e7:da:e0:34:5a:24:dd:a2:4c:d5:f7:23:c7:
                    d2:70:86:1d:41:7e:5a:cb:b2:3d:dd:e5:43:3e:1c:
                    af:3c:39:e1:d3:9c:1f:ce:7c:c9:a3:d6:99:c4:ef:
                    e1:e8:9e:f4:e9:ff:da:b5:27:8a:5f:ef:0f:93:71:
                    56:2a:40:a4:8f:e2:d2:16:65:27:3f:fe:d8:92:fc:
                    76:e4:df:4a:3d:26:19:52:d7:fc:ca:b7:93:f8:86:
                    7a:4a:9c:29:fb:d0:85:3b:37:50:4d:43:bc:f0:46:
                    e9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F9:07:CB:21:D9:C5:13:FC:12:0D:A5:93:3C:B4:01:E5:4B:8A:98
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/3A0612FCC62F11F096D6631CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:4f:67:51:55:ed:44:eb:6b:db:ad:62:78:33:36:8c:1f:18:
         54:5b:da:a1:b6:b7:da:5b:f2:74:8c:d1:3a:0b:8e:c3:84:28:
         e9:e3:ec:9a:21:c4:80:b2:55:0b:0a:d8:7e:15:9a:56:c3:c9:
         4b:64:67:8f:6e:53:6b:6e:76:8c:6d:b4:01:4f:87:a5:2a:f9:
         1d:25:ec:0f:7c:42:9b:97:dd:54:3c:df:c4:aa:a8:87:b0:bb:
         64:34:44:55:be:72:20:69:e9:3c:4e:5c:7b:cf:c2:98:e4:fe:
         6e:cf:8f:ce:4f:97:e5:fb:0d:59:54:d1:ca:87:10:55:3b:bb:
         66:77:c8:78:6d:72:a1:1d:00:89:dd:5b:3b:99:21:4a:bf:d3:
         19:44:28:1a:56:62:12:f3:f9:cf:42:a4:41:9f:04:64:9d:4f:
         25:9b:f1:f2:39:c9:aa:13:c7:3a:31:be:c9:c0:11:85:ef:fb:
         95:b7:eb:5c:2b:f6:7f:fc:57:63:09:cf:89:b6:48:37:46:96:
         21:eb:7e:9e:9d:be:9c:ed:13:da:59:f7:89:88:44:12:20:36:
         a6:57:11:5e:c5:c5:c3:3c:ef:a7:cb:27:c8:9f:73:5b:0f:32:
         0c:75:39:7f:c7:9e:69:2d:06:af:3e:15:b8:f4:6f:12:53:49:
         c8:c2:9c:73
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCFEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUxMTIwMTYzNzM5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWM4NS1iYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq26Mkxy/9xrNfrEk3/KbzHU3zOXrVfFYKICJOnRicUs94KPAPWm9NszNoFgb
sz+nwpP2RjpY8LrBjMBwwlYYLhYmPv8Em057VPtfth/RpimTBtCtZTX+uIzAhSZ3
PWxlaO7rCO9EGghNrf/xMNItCYeGR6YPYZDhwdygm4ruOBla15rbK9e2EKLC+n3l
MMzUpL5Vaj/tU+fa4DRaJN2iTNX3I8fScIYdQX5ay7I93eVDPhyvPDnh05wfznzJ
o9aZxO/h6J706f/atSeKX+8Pk3FWKkCkj+LSFmUnP/7Ykvx25N9KPSYZUtf8yreT
+IZ6Spwp+9CFOzdQTUO88EbphQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCn5B8sh
2cUT/BINpZM8tAHlS4qYMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvM0EwNjEyRkND
NjJGMTFGMDk2RDY2MzFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPr6MA0GCSqGSIb3DQEBCwUAA4IBAQBkT2dRVe1E62vbrWJ4MzaM
HxhUW9qhtrfaW/J0jNE6C47DhCjp4+yaIcSAslULCth+FZpWw8lLZGePblNrbnaM
bbQBT4elKvkdJewPfEKbl91UPN/EqqiHsLtkNERVvnIgaek8Tlx7z8KY5P5uz4/O
T5fl+w1ZVNHKhxBVO7tmd8h4bXKhHQCJ3Vs7mSFKv9MZRCgaVmIS8/nPQqRBnwRk
nU8lm/HyOcmqE8c6Mb7JwBGF7/uVt+tcK/Z//FdjCc+Jtkg3RpYh636enb6c7RPa
WfeJiEQSIDamVxFexcXDPO+nyyfIn3NbDzIMdTl/x55pLQavPhW49G8SU0nIwpxz
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:29 2026 by rpki-client