Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
File:                     7229FDDCDC3D11F08C062F6F696F56BC.roa (raw, json)
Hash identifier:          ds7dDCTSCzhkVPcLD8GUON/3AW1ttpCQoU0Ff89LGuU=
Subject key identifier:   FD:E1:8F:25:AB:1A:35:DF:E1:05:E4:EB:99:68:1C:CC:9D:CA:0D:69
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       D9
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa
Signing time:             Sun 01 Mar 2026 15:14:14 +0000
ROA not before:           Thu 18 Dec 2025 18:14:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153528
IP address blocks:        161.248.200.0/24 maxlen: 24
                          161.248.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Dec 18 18:14:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a457c5-6200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6b:df:24:b4:eb:4f:89:5a:2c:e6:50:93:2e:
                    a4:62:09:fd:9d:50:fa:68:a1:ed:0d:ad:7f:f9:e0:
                    cd:67:d3:69:be:df:fd:e2:b1:13:87:c2:89:a0:38:
                    18:d7:ed:90:c1:4d:e5:45:1f:7e:98:3c:de:8c:b7:
                    a7:4e:5a:af:75:25:41:40:44:e9:ee:bf:3e:f0:28:
                    4f:1b:7c:dc:dd:bc:43:f1:1f:a1:67:57:bf:03:23:
                    b2:87:3d:fb:b8:45:a5:6b:2e:d8:6b:5e:b9:5a:10:
                    3c:9f:09:12:7b:30:f2:e0:6f:e1:54:7c:9e:4a:4e:
                    66:1f:9b:e5:2f:71:92:04:06:c8:f0:0e:67:98:07:
                    7f:42:9d:ef:20:00:74:6b:26:1c:fb:e0:5a:d1:46:
                    a1:15:5b:8c:c1:8a:5d:d1:c9:16:e0:7f:c6:2f:4c:
                    0f:97:4f:7e:34:ff:78:ac:1d:09:f6:70:d8:27:c4:
                    d7:a2:8b:f9:d5:3e:f7:1b:7f:b8:0f:5b:3b:28:58:
                    e7:57:87:c6:8a:bd:21:24:2c:ab:d4:cf:77:4b:13:
                    76:d6:57:a2:3a:ac:e9:22:2d:cd:bc:f4:3e:e4:d2:
                    07:18:c1:59:73:b5:35:23:2e:3c:b9:ee:5a:86:b9:
                    fc:38:35:0e:29:57:c3:75:14:92:27:a7:08:82:aa:
                    27:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:8F:25:AB:1A:35:DF:E1:05:E4:EB:99:68:1C:CC:9D:CA:0D:69
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/7229FDDCDC3D11F08C062F6F696F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:75:00:59:5d:55:bd:13:49:a6:50:d1:f0:ad:7a:d3:ed:ba:
         18:9d:2c:10:63:9d:c2:b4:9b:35:47:58:4b:91:65:14:e0:2a:
         c8:8c:d7:e5:c9:e0:23:58:04:bd:1b:82:62:97:46:a2:d5:1f:
         c1:7e:1e:db:6d:e6:3a:a6:f5:e3:51:4f:79:fb:65:86:c8:32:
         dd:6e:53:3e:a9:27:4a:bd:fb:1f:8c:b0:fb:65:9b:3f:a7:51:
         b4:ab:4f:a7:b4:b7:f9:f3:2e:c2:dc:e4:93:fb:3d:34:6c:10:
         a2:b0:f0:c3:4e:aa:6e:12:df:d0:4d:24:62:34:33:df:01:18:
         07:e1:93:31:32:ee:d6:60:fd:40:cf:83:01:69:86:56:73:21:
         b0:cc:3d:ee:78:53:4e:29:96:2f:c9:cb:ec:6a:35:ac:04:2f:
         15:07:ab:2b:3f:1d:5c:b7:12:2e:18:09:91:65:63:c7:b7:df:
         41:4d:a3:59:3a:28:e8:d1:d1:de:1b:56:ec:d0:50:fd:ef:f3:
         9f:2c:01:8a:0d:8c:ea:0f:85:80:88:cd:4e:85:ce:84:87:3d:
         7c:31:57:1b:4e:ad:49:ea:84:16:e6:f2:50:9d:7e:40:b5:49:
         9d:1a:64:27:d6:d9:f4:f9:a5:a1:1c:0e:10:fc:65:60:ed:cf:
         f7:db:ac:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:00 2026 by rpki-client