Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/E5FC085A843011F0971BDC44C4F9AE02.roa
File:                     E5FC085A843011F0971BDC44C4F9AE02.roa (raw, json)
Hash identifier:          dm3BcPGPdQuO5Idson2cH8Me4yvZsLSNX+U6zphRieA=
Subject key identifier:   CD:6A:43:AF:70:1E:78:C4:36:8A:BC:EA:5F:2D:67:8C:09:42:39:F7
Certificate issuer:       /CN=A91C8307/serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
Certificate serial:       EC
Authority key identifier: 4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/E5FC085A843011F0971BDC44C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:13:32 +0000
ROA not before:           Sun 15 Feb 2026 06:25:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133496
IP address blocks:        161.248.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl
                          rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:32:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8307, serialNumber=4B092DF104280F45BC3F2796F401CC2B4C6144E9
        Validity
            Not Before: Feb 15 06:25:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41f5c-2e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:a4:9c:85:99:dc:3c:2e:e1:22:38:41:bd:
                    60:50:7e:ed:36:63:72:d0:e4:3e:8b:6a:af:4a:30:
                    d3:38:ba:98:fd:14:c0:ce:24:3f:e7:71:f6:c9:c3:
                    a9:88:f5:6b:c7:aa:ac:78:5b:21:88:26:de:15:fb:
                    bc:ae:a8:63:cd:cf:b8:b1:8a:aa:52:22:06:4d:ab:
                    84:47:2c:7b:d4:28:1d:43:c2:de:49:37:24:40:f2:
                    b3:2f:aa:d2:23:9d:7e:b8:73:37:75:35:e5:06:00:
                    ed:10:60:58:be:7d:14:9b:1b:a3:07:fc:03:2e:70:
                    03:f0:c2:53:23:5e:f8:f6:b8:d0:09:4a:3d:f5:8b:
                    10:59:5a:cc:26:f2:85:ff:1a:56:7c:6c:7c:df:1d:
                    50:94:84:1b:ab:2f:dd:f3:1a:10:ee:cd:fa:84:48:
                    12:d0:52:3a:81:9c:61:a7:cc:50:0f:78:50:6a:0e:
                    f2:d4:3e:63:4f:00:cd:06:d4:60:77:c7:71:ce:22:
                    9c:c4:02:53:83:97:6f:0d:ef:1a:2f:ec:6b:dc:83:
                    b0:ff:15:8d:a1:c8:6d:3c:49:e8:cf:e7:fb:9d:c1:
                    94:e5:dd:2a:d9:29:de:ed:06:05:d1:ec:43:a9:4e:
                    6c:95:c4:29:e8:e2:b1:f0:cc:7c:43:4a:21:24:41:
                    62:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6A:43:AF:70:1E:78:C4:36:8A:BC:EA:5F:2D:67:8C:09:42:39:F7
            X509v3 Authority Key Identifier:
                keyid:4B:09:2D:F1:04:28:0F:45:BC:3F:27:96:F4:01:CC:2B:4C:61:44:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/Swkt8QQoD0W8PyeW9AHMK0xhROk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Swkt8QQoD0W8PyeW9AHMK0xhROk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/2BC92450BECD11EF98C74132C4F9AE02/E5FC085A843011F0971BDC44C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:4d:70:1d:7e:c7:5b:df:3b:72:f3:5f:c7:25:e4:6b:fc:1a:
         67:88:02:75:94:79:bd:18:61:1a:8e:05:45:9b:86:5b:14:b1:
         9f:47:6c:1a:4c:77:f4:06:f9:70:28:1e:e5:e0:97:9d:75:13:
         0a:c2:01:1e:27:84:71:4e:3d:5a:99:9b:28:cf:05:7c:68:6f:
         9a:9f:72:4e:96:9a:27:fc:8c:51:eb:ce:0b:c6:5c:5f:ec:b7:
         25:dd:9a:f7:9b:28:23:60:55:cb:6f:e3:ee:42:9e:76:5b:b5:
         94:0e:00:0f:7e:2e:d8:fe:1c:df:d7:f7:69:31:46:cc:05:ff:
         35:7a:f3:89:c3:16:44:ab:8f:47:f1:7d:4c:3c:a5:b5:37:93:
         b4:a7:93:16:cb:0a:08:db:10:d5:a4:52:c0:10:c8:07:bc:ab:
         e4:44:21:f9:55:03:37:de:f8:6c:70:db:ee:7a:3a:5c:e3:8d:
         32:8e:b9:22:8b:b6:b1:62:49:f4:76:54:e3:20:95:54:38:94:
         a7:f0:3b:13:5f:9d:72:30:ce:b5:e8:0f:b4:a9:94:81:34:b9:
         2f:67:e5:19:4b:1f:02:94:91:94:f8:f5:50:8f:c2:2d:73:d1:
         68:3d:67:b0:14:a7:36:f6:c4:78:cf:3b:9d:c5:27:19:51:df:
         71:ca:99:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:56 2026 by rpki-client