Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa
File:                     A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa (raw, json)
Hash identifier:          d0vm5wncisSlyFIQNK+dAA18qYesSQU/iTYEX3JnVQc=
Subject key identifier:   64:7C:9E:CC:CD:03:B4:DE:E2:32:2A:B0:1F:07:5A:6F:C7:38:E4:AD
Certificate issuer:       /CN=A91C022C/serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
Certificate serial:       FC
Authority key identifier: 3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa
Signing time:             Fri 17 Apr 2026 06:41:07 +0000
ROA not before:           Fri 17 Apr 2026 06:41:07 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154434
IP address blocks:        161.248.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=3BA2558CA5F1A037D9696F567AE81367C6EE35E6
        Validity
            Not Before: Apr 17 06:41:07 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e1d603-18e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a0:cf:db:65:b3:a9:3c:40:bb:50:0d:79:37:
                    f8:c9:ee:39:71:e5:82:ed:b3:38:c0:dc:81:2d:85:
                    13:ce:a6:1d:16:0f:34:9e:bd:d8:b3:b3:0f:e1:06:
                    2b:88:eb:92:ba:75:72:94:3c:46:fb:bd:f4:8a:19:
                    07:0d:fa:84:23:e0:76:1c:10:93:84:bd:ec:90:56:
                    b4:47:2c:e1:59:5b:39:53:cb:40:d8:55:e4:22:ea:
                    30:90:35:a0:75:5c:f0:ec:79:ab:d6:d7:d0:1b:fa:
                    39:13:b7:a2:55:88:a3:a0:78:8a:f6:07:8d:b0:07:
                    01:13:4e:ee:75:dc:b5:f4:90:c5:ac:3d:32:02:9b:
                    89:a7:ee:51:d8:9e:4b:9a:3e:2a:dc:40:28:e1:1b:
                    44:8c:77:49:c0:3a:37:85:c2:a7:63:3d:dd:a7:ec:
                    54:7b:8f:24:70:92:05:c2:d6:63:87:ba:5b:b4:0d:
                    ef:ad:f4:20:6e:92:bc:28:f4:74:56:8d:94:74:a4:
                    14:08:31:57:bc:b3:34:4d:dd:f3:f6:53:f1:ed:9f:
                    85:99:48:d4:bd:35:ff:05:9a:07:4e:5d:95:27:25:
                    0a:7d:b6:24:38:0a:05:18:c4:c5:26:89:c4:77:ed:
                    b2:0b:e5:8f:bb:a4:3a:1a:ee:f8:30:70:e9:2f:a3:
                    80:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:9E:CC:CD:03:B4:DE:E2:32:2A:B0:1F:07:5A:6F:C7:38:E4:AD
            X509v3 Authority Key Identifier:
                keyid:3B:A2:55:8C:A5:F1:A0:37:D9:69:6F:56:7A:E8:13:67:C6:EE:35:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/O6JVjKXxoDfZaW9WeugTZ8buNeY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/O6JVjKXxoDfZaW9WeugTZ8buNeY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/B1C18230D4B911EF9FA8E24FC4F9AE02/A6C2BD2CDC3D11F0BD1F8D86696F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:c2:60:e4:82:26:dc:7f:11:3d:8d:dc:32:7b:8f:bf:69:06:
         b3:f3:c3:d8:02:5b:94:52:45:22:62:45:df:5a:4c:89:3b:d1:
         24:6e:dc:dd:7a:0a:d3:99:b5:94:89:a1:a1:9c:2b:14:0f:2d:
         e7:f8:3e:b4:32:5b:23:6c:9b:de:2e:a5:0f:32:eb:66:39:f8:
         2f:27:de:ed:14:e3:5f:7c:ff:4c:6c:00:01:a5:0c:49:54:0a:
         12:68:c5:48:ec:00:6e:ad:ee:aa:4e:7a:59:9d:a9:95:26:dc:
         85:a5:d3:9c:9d:7e:dc:c3:a1:c3:a3:7c:9b:62:a5:c6:fb:0b:
         cc:32:e1:8a:7c:37:2c:a8:16:3b:b3:e4:e3:d2:01:be:ab:c2:
         d1:7d:f6:7c:d6:44:2a:d6:96:31:e7:1a:17:2a:bc:55:d9:0c:
         a6:0c:ca:06:43:58:79:cf:23:bb:f3:d2:69:34:76:d0:b4:0a:
         81:63:27:b6:13:2a:94:ac:0f:cd:99:f1:de:f6:58:2e:42:dc:
         da:1e:35:97:05:9a:6f:f0:52:ec:6d:05:78:f5:3a:bd:36:35:
         e3:50:8d:90:d9:5f:f4:0e:49:03:61:2a:22:a0:fd:44:82:8d:
         b2:ce:89:5d:ec:f1:bf:a5:7d:12:9a:1e:02:64:2d:f0:2d:d6:
         6a:fb:2a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:01:09 2026 by rpki-client