Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/1FE0E016B37D11EFBDE18263C4F9AE02.roa
File:                     1FE0E016B37D11EFBDE18263C4F9AE02.roa (raw, json)
Hash identifier:          dVowzphy2uXgtzt1PiwbcwH9pWDhfnknLc0RqbSLyzs=
Subject key identifier:   65:84:3E:A6:85:2D:66:80:FE:2A:37:25:3B:9C:F6:12:3A:1C:DE:3F
Certificate issuer:       /CN=A91DF233/serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
Certificate serial:       ED
Authority key identifier: 4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/1FE0E016B37D11EFBDE18263C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:12:44 +0000
ROA not before:           Fri 05 Dec 2025 04:14:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151660
IP address blocks:        160.250.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF233, serialNumber=4E759AB2DE245469F8311B9273B555387E750A90
        Validity
            Not Before: Dec  5 04:14:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41f2c-6448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:84:a9:64:af:1f:6b:7f:85:15:13:ed:8d:5e:
                    ee:26:95:4b:70:ba:e8:54:67:41:c5:cb:7c:bd:a7:
                    13:ca:59:fb:f4:a8:bb:31:c0:a1:b7:37:af:43:a3:
                    d2:24:19:c9:d1:95:b7:4c:54:3e:13:54:8c:03:59:
                    0e:7e:60:64:87:75:81:f9:3c:31:dc:a6:09:67:b4:
                    f8:ae:e4:74:45:3e:cc:72:dc:73:40:18:f4:b5:8c:
                    ce:21:42:4e:63:b3:3a:d9:ec:d7:51:80:35:22:e9:
                    49:f9:46:69:0a:a4:97:72:3b:16:0b:1d:da:3d:fd:
                    17:03:b6:b8:f1:62:05:33:f0:5f:f4:28:69:02:f2:
                    18:2f:c0:89:4a:16:36:38:20:2d:1d:3c:f6:5a:ec:
                    43:f3:96:62:36:f1:4a:52:6c:80:b0:bd:b7:ce:c3:
                    f6:92:0e:13:d6:70:ab:d9:1b:cd:e8:66:92:90:79:
                    56:3e:ed:6c:50:b4:4c:bc:25:b7:99:31:d3:13:71:
                    1a:80:43:a7:aa:d8:d8:ce:28:2b:95:28:0f:ed:b3:
                    61:9b:fe:f3:7e:88:96:c4:1e:76:63:46:0d:e5:4b:
                    79:93:17:bb:ca:3e:8f:92:99:ec:79:d6:99:3f:22:
                    fe:44:85:fa:e9:f5:7b:61:42:71:f2:24:f7:8f:0d:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:84:3E:A6:85:2D:66:80:FE:2A:37:25:3B:9C:F6:12:3A:1C:DE:3F
            X509v3 Authority Key Identifier:
                keyid:4E:75:9A:B2:DE:24:54:69:F8:31:1B:92:73:B5:55:38:7E:75:0A:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/TnWast4kVGn4MRuSc7VVOH51CpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TnWast4kVGn4MRuSc7VVOH51CpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF233/08F05260B37811EF88322B0FC4F9AE02/1FE0E016B37D11EFBDE18263C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:ef:ec:e5:90:5d:ea:bd:81:08:cf:8f:b1:9f:53:e0:18:82:
         cf:4d:88:3e:1c:51:7c:d6:4e:6e:ec:d1:e2:4a:64:fc:a5:15:
         06:55:bf:25:4f:12:5c:ec:3e:6f:bc:65:e0:74:27:19:bf:89:
         15:92:a0:2a:ba:16:bc:b1:b1:6b:df:d9:b4:b7:31:a0:fc:02:
         bc:df:5d:f2:bc:21:ef:c3:3f:f3:7a:b1:a8:c5:66:1f:e1:b0:
         05:80:7f:ff:b1:fe:83:7d:fd:96:3c:a8:ab:86:7d:3b:d0:fc:
         0b:29:3a:d0:f8:c1:c8:a5:c6:b9:38:8b:0c:8e:b2:8c:d8:2a:
         f4:bd:0e:91:1f:b2:0c:16:2d:08:6f:20:5c:12:51:90:87:ec:
         13:c6:d4:68:2b:8e:1e:ac:26:fa:a8:35:29:fc:d4:c1:61:f3:
         2c:e3:f0:87:39:e2:56:3f:7c:38:8b:f7:ee:e9:54:7c:da:6b:
         7c:a3:c8:30:a1:1e:b7:30:e1:03:3d:1a:3f:49:a6:61:6e:e2:
         2e:e2:07:eb:bb:ff:c9:6d:75:cd:ab:82:a7:b2:b4:5e:2e:94:
         6f:9b:6d:7c:e2:48:75:9a:fd:e6:27:9a:59:7f:3e:c0:4c:69:
         e2:ae:a8:5f:84:2c:cc:9d:69:9d:26:95:6b:a3:86:60:03:14:
         b9:89:25:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:29:25 2026 by rpki-client