Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
File:                     05054224D8E411E9BEB7986DC4F9AE02.roa (raw, json)
Hash identifier:          ob3kyKb+k6DfPg+34w85RGonL9slb2GFkKFVzFEICJQ=
Subject key identifier:   6F:58:2A:CA:F8:25:F6:E1:62:13:60:A4:AB:AE:30:8A:01:96:FA:C2
Certificate issuer:       /CN=A91E7BC4/serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
Certificate serial:       0DD4
Authority key identifier: A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:39:17 +0000
ROA not before:           Tue 24 Feb 2026 18:15:22 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9930
IP address blocks:        161.142.0.0/16 maxlen: 19
                          192.228.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl
                          rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3540 (0xdd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7BC4, serialNumber=A2F6F661312C95BF05A0B5230B1371D4622FD627
        Validity
            Not Before: Feb 24 18:15:22 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44f95-0035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b6:84:45:e6:f7:f9:40:77:84:20:45:26:b2:
                    c0:32:46:0d:82:d2:d3:04:6e:60:b2:01:92:ed:61:
                    94:49:87:a6:c0:85:30:27:42:b2:7a:2e:ed:7f:95:
                    53:e5:ce:6d:70:58:ed:fc:5a:7a:43:6f:61:f5:37:
                    56:d2:fa:66:70:6e:ff:16:dd:95:e6:bb:46:88:61:
                    3f:9a:2c:9a:1b:13:b3:91:2b:04:7e:bd:7d:de:61:
                    83:85:99:5e:82:62:fc:51:38:a6:b5:d5:32:ff:04:
                    c6:ee:00:16:b7:a9:66:df:f7:61:58:5c:dc:ad:4b:
                    82:4b:e0:0f:9b:49:c9:cb:57:a5:da:be:f1:e2:74:
                    6a:3d:9d:de:4c:15:d1:f8:fc:21:4c:76:18:fb:5a:
                    3d:33:a0:24:85:a1:7d:cc:1d:d6:3c:0c:93:3b:c1:
                    e6:d1:85:3f:b4:8a:6b:d0:b1:4f:81:b4:b2:b9:fc:
                    d0:6b:40:44:61:89:87:c4:38:3f:64:31:72:ed:3e:
                    7e:40:19:c5:8f:46:b5:a6:63:f4:aa:c3:17:3a:9f:
                    b6:89:41:0b:2f:bd:22:1c:14:33:fd:46:16:7b:e0:
                    7a:99:14:8f:09:47:6a:54:05:b8:cd:da:25:be:fe:
                    88:f0:7f:f4:2d:b0:a2:6d:ec:73:d9:81:40:bc:cf:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:58:2A:CA:F8:25:F6:E1:62:13:60:A4:AB:AE:30:8A:01:96:FA:C2
            X509v3 Authority Key Identifier:
                keyid:A2:F6:F6:61:31:2C:95:BF:05:A0:B5:23:0B:13:71:D4:62:2F:D6:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/ovb2YTEslb8FoLUjCxNx1GIv1ic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ovb2YTEslb8FoLUjCxNx1GIv1ic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/261D2830D50D11E9BAD6C226C4F9AE02/05054224D8E411E9BEB7986DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.142.0.0/16
                  192.228.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         21:77:2b:84:a9:b7:b4:e8:0b:82:27:63:ac:0a:81:c6:4e:df:
         9d:80:00:22:81:13:bd:19:53:a2:6c:97:97:a5:d3:c7:c5:42:
         50:3b:a0:de:25:af:a5:09:61:cd:7f:7f:7c:b1:b9:c7:2e:5c:
         56:c4:87:31:8c:9b:f6:d6:ac:52:f4:12:5e:59:30:9a:2b:dd:
         27:40:52:cf:d3:4e:96:5f:48:ef:21:cf:4f:76:ef:4e:24:8f:
         56:53:3e:02:e6:99:3e:b3:00:f0:7e:8c:c8:7c:92:cd:8d:e7:
         10:59:b1:6c:d8:ba:87:74:92:3f:75:7c:47:49:6f:14:9b:13:
         4e:ae:25:9a:b5:2a:4b:e2:b5:e2:dd:72:5c:56:d8:71:df:87:
         ee:f2:63:e2:1c:dd:b7:00:c6:73:e5:87:b6:69:65:ee:d9:f6:
         1a:58:d5:61:d7:31:03:5b:7d:bf:59:81:de:3b:80:b0:f1:ca:
         c4:af:fa:12:3a:7e:5e:1d:ad:01:a4:29:56:2b:24:2a:8c:08:
         51:94:a8:27:bd:e4:f3:23:b1:eb:3c:a1:6d:3b:3b:05:70:35:
         30:48:1a:3b:99:cb:a7:95:b9:2c:ef:20:cd:3d:5c:b1:a3:05:
         8a:a8:7b:76:41:24:2d:63:60:62:f5:8c:12:d0:6e:2c:59:ba:
         3c:6a:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:53 2026 by rpki-client