Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/06522672D49411EFA8DF5E69C4F9AE02.roa
File:                     06522672D49411EFA8DF5E69C4F9AE02.roa (raw, json)
Hash identifier:          cO0ZpweqiESQRvFOYHg4FFOd9wxES4U5GNfJ007yF5g=
Subject key identifier:   10:76:77:DE:E4:6A:25:0C:89:C6:C9:40:39:C2:AE:58:42:F1:3A:EE
Certificate issuer:       /CN=A91C6A35/serialNumber=924866B40C30442D696F2477015475C5F0702AC8
Certificate serial:       DD
Authority key identifier: 92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/06522672D49411EFA8DF5E69C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 05:12:46 +0000
ROA not before:           Thu 05 Feb 2026 16:25:08 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135028
IP address blocks:        161.248.190.0/23 maxlen: 23
                          161.248.190.0/24 maxlen: 24
                          161.248.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=924866B40C30442D696F2477015475C5F0702AC8
        Validity
            Not Before: Feb  5 16:25:08 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a51c4e-f876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:26:89:3c:23:69:f2:74:20:96:b4:d5:5e:e6:
                    32:ed:a0:11:aa:78:e7:e5:af:66:e3:a3:87:fb:41:
                    67:7d:c6:5e:3d:96:5b:9a:a4:14:2b:7b:76:be:76:
                    de:89:7a:2d:ae:91:0e:b6:69:33:48:ef:2d:e0:7b:
                    d4:c4:fa:bf:6a:3e:8f:3f:1e:06:43:75:9d:4f:b1:
                    db:68:17:50:ac:9b:fe:52:37:43:cc:5c:65:b0:f8:
                    5b:74:01:5e:20:4f:31:28:9a:32:6c:c1:e7:2b:0c:
                    fc:3e:c0:19:73:b6:4b:58:39:17:f1:c2:fc:7e:03:
                    31:30:26:1f:d4:bf:d2:10:6b:8d:27:dc:b4:c1:d9:
                    b2:6e:04:b1:2d:a0:14:fb:8c:02:50:3a:7f:f0:e1:
                    6d:6c:17:2c:1d:5d:0c:b6:67:66:1e:cd:39:80:e6:
                    7c:f0:66:3a:4c:f4:37:3a:83:74:dd:64:7b:9d:ea:
                    00:ec:2e:df:80:1f:44:9e:56:68:34:5f:d1:7c:b3:
                    ba:f6:98:2c:e1:a1:3c:a0:7e:d6:6b:99:75:d1:78:
                    03:43:fe:4a:9a:fd:14:97:27:d8:ed:af:46:76:1d:
                    a4:f9:a7:3a:a1:1b:e1:2b:7d:9e:bd:ff:fe:a3:3e:
                    45:30:6d:8c:67:d3:62:15:a0:d0:b1:c7:ba:3b:bf:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:76:77:DE:E4:6A:25:0C:89:C6:C9:40:39:C2:AE:58:42:F1:3A:EE
            X509v3 Authority Key Identifier:
                keyid:92:48:66:B4:0C:30:44:2D:69:6F:24:77:01:54:75:C5:F0:70:2A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/kkhmtAwwRC1pbyR3AVR1xfBwKsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kkhmtAwwRC1pbyR3AVR1xfBwKsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/99277846D49211EFB564DE62C4F9AE02/06522672D49411EFA8DF5E69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:3a:5a:0a:3e:a4:8b:6f:32:dd:12:85:7b:c1:bd:76:bc:42:
         d7:39:51:ad:7c:d1:98:5f:3f:b7:9e:d4:30:5d:a4:75:fa:d9:
         8c:bc:ea:f9:b5:cd:f7:02:c8:0b:00:1b:bf:f0:37:d7:f2:e2:
         34:e8:98:c5:3a:97:2f:72:6f:e4:a3:b0:b2:53:60:49:6d:a6:
         14:0a:83:03:11:ab:a3:06:3e:67:08:7f:c8:29:81:84:21:16:
         7d:aa:fa:89:01:64:94:2e:60:59:72:bf:4d:5f:ad:25:6a:33:
         2c:2f:74:33:90:30:7c:0b:87:d3:d8:c0:f6:7d:6d:8b:46:04:
         d7:a5:e4:51:e7:8f:d2:37:c6:5b:12:61:4e:c6:3b:79:9d:d5:
         8e:54:35:9f:44:9a:54:17:46:b1:84:a3:26:43:f4:ae:8f:da:
         91:8c:95:92:cf:98:8c:2b:28:83:7c:19:22:8f:06:38:b6:15:
         31:81:7e:bd:5a:37:95:ca:d8:bb:3f:f9:ca:77:42:23:e9:c2:
         a1:9f:63:88:b2:f8:0f:a5:16:c5:de:4f:cc:4a:fc:aa:ab:95:
         7d:ec:81:a4:d3:81:68:9e:00:ac:d4:2a:34:e8:77:65:d5:4c:
         e7:37:3b:0e:0b:42:1d:7d:cb:72:78:01:6e:fd:72:62:94:73:
         31:1b:0c:38
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzZBMzUxMTAvBgNVBAUTKDkyNDg2NkI0MEMzMDQ0MkQ2OTZGMjQ3NzAxNTQ3NUM1
RjA3MDJBQzgwHhcNMjYwMjA1MTYyNTA4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1MWM0ZS1mODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzCaJPCNp8nQglrTVXuYy7aARqnjn5a9m46OH+0FnfcZePZZbmqQUK3t2vnbe
iXotrpEOtmkzSO8t4HvUxPq/aj6PPx4GQ3WdT7HbaBdQrJv+UjdDzFxlsPhbdAFe
IE8xKJoybMHnKwz8PsAZc7ZLWDkX8cL8fgMxMCYf1L/SEGuNJ9y0wdmybgSxLaAU
+4wCUDp/8OFtbBcsHV0MtmdmHs05gOZ88GY6TPQ3OoN03WR7neoA7C7fgB9EnlZo
NF/RfLO69pgs4aE8oH7Wa5l10XgDQ/5Kmv0UlyfY7a9Gdh2k+ac6oRvhK32evf/+
oz5FMG2MZ9NiFaDQsce6O7+alwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBB2d97k
aiUMicbJQDnCrlhC8TruMB8GA1UdIwQYMBaAFJJIZrQMMEQtaW8kdwFUdcXwcCrI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkEzNS85OTI3Nzg0NkQ0
OTIxMUVGQjU2NERFNjJDNEY5QUUwMi9ra2htdEF3d1JDMXBieVIzQVZSMXhmQndL
c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2traG10QXd3UkMxcGJ5UjNBVlIxeGZCd0tzZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzZBMzUvOTkyNzc4NDZENDkyMTFFRkI1NjRERTYyQzRGOUFFMDIvMDY1MjI2NzJE
NDk0MTFFRkE4REY1RTY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofi+MA0GCSqGSIb3DQEBCwUAA4IBAQADOloKPqSLbzLdEoV7wb12
vELXOVGtfNGYXz+3ntQwXaR1+tmMvOr5tc33AsgLABu/8DfX8uI06JjFOpcvcm/k
o7CyU2BJbaYUCoMDEaujBj5nCH/IKYGEIRZ9qvqJAWSULmBZcr9NX60lajMsL3Qz
kDB8C4fT2MD2fW2LRgTXpeRR54/SN8ZbEmFOxjt5ndWOVDWfRJpUF0axhKMmQ/Su
j9qRjJWSz5iMKyiDfBkijwY4thUxgX69WjeVyti7P/nKd0Ij6cKhn2OIsvgPpRbF
3k/MSvyqq5V97IGk04FongCs1Co06Hdl1UznNzsOC0IdfctyeAFu/XJilHMxGww4
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:29 2026 by rpki-client