Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/2018750A5FC411F0ACE3A087C4F9AE02.roa
File:                     2018750A5FC411F0ACE3A087C4F9AE02.roa (raw, json)
Hash identifier:          R8o39adrmBVnGQ0//ScQ4qDFf9KvWQlMZLY/6u7Uyoo=
Subject key identifier:   06:AB:93:B4:9F:27:42:BB:F8:A9:DF:23:70:74:58:8E:DB:AC:B4:EB
Certificate issuer:       /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial:       F4
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/2018750A5FC411F0ACE3A087C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:27:07 +0000
ROA not before:           Tue 23 Dec 2025 05:26:04 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     137967
IP address blocks:        160.250.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
        Validity
            Not Before: Dec 23 05:26:04 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a43eab-3e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:85:cb:c1:85:3f:da:5c:8b:bc:8c:91:5b:
                    16:c9:f4:31:34:5a:41:4a:71:1e:ed:76:cf:4d:cc:
                    30:01:7c:43:3e:e4:24:da:b2:41:9c:42:80:60:a8:
                    e0:c5:5c:b6:42:c4:42:05:7f:53:2e:09:a9:cb:da:
                    c8:67:53:f8:e8:d0:c2:6f:b8:35:24:04:c3:34:c8:
                    7f:5f:9d:29:7e:7a:f4:e0:a5:30:00:03:36:25:5c:
                    63:27:f0:60:45:3d:8b:7e:88:76:92:ef:eb:66:05:
                    9e:c9:d9:40:11:00:82:4b:89:6f:2b:9b:ef:77:3d:
                    e6:62:98:8d:7d:8b:04:7d:6c:62:f6:dd:b6:d5:a1:
                    bb:83:e7:fe:24:8c:5b:dc:2a:f5:41:6c:94:7d:74:
                    cd:cb:8e:d1:14:f6:74:fc:ab:f8:ca:af:1f:5f:da:
                    36:9c:c3:79:c2:95:48:b7:0a:7f:fa:16:4d:a1:15:
                    0a:78:a2:86:e3:58:65:71:55:04:d2:49:78:61:97:
                    96:ca:6c:cb:76:d9:ed:c8:1c:31:75:36:c2:90:5e:
                    79:87:50:83:3b:7c:2a:69:38:cf:1b:75:66:bd:d1:
                    c3:0f:60:3c:0e:69:14:61:9a:e8:55:71:11:6a:35:
                    76:81:cc:b4:c5:26:01:de:4d:50:84:23:cb:df:fa:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:93:B4:9F:27:42:BB:F8:A9:DF:23:70:74:58:8E:DB:AC:B4:EB
            X509v3 Authority Key Identifier:
                keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/2018750A5FC411F0ACE3A087C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:14:18:4a:73:27:c1:e0:9c:7c:69:83:b9:6c:64:dc:c0:24:
         3c:ba:b4:bd:a4:de:0b:d7:ba:cb:ec:c3:e5:dd:34:10:38:ad:
         e6:fb:4d:c6:f3:f7:7b:89:d1:30:3b:b5:7f:a6:20:b2:cd:64:
         e3:b3:49:12:42:9e:82:f2:fa:96:d9:d5:c0:7e:00:4e:4a:44:
         ac:33:00:c9:2c:84:a5:97:79:34:35:ab:10:4f:90:d5:b1:f1:
         8f:cd:85:83:99:40:30:72:23:f5:8a:ea:dd:d4:3d:55:ef:0d:
         28:59:a1:44:c4:ca:6a:53:f0:60:a5:22:e5:a4:5e:2e:7c:81:
         a5:ef:a5:1b:ca:91:35:41:77:90:a1:fb:df:e8:58:f0:4b:c5:
         4f:02:43:e4:ec:54:6f:15:fa:aa:a8:74:93:d6:12:e0:a7:78:
         b6:de:9d:03:22:b8:27:a9:f6:00:23:4a:e4:12:aa:36:91:c9:
         b1:72:8d:4c:00:a4:01:2c:51:32:5c:5c:d1:c2:04:e0:0c:21:
         ed:04:0c:df:c8:8e:c3:ea:cf:0f:2c:82:80:ac:1e:f3:fd:28:
         c4:d9:18:a5:f7:a6:3a:bc:34:4c:ef:11:57:bf:f6:df:f0:55:
         41:6f:9d:08:0f:5c:b1:24:a7:41:1e:10:23:73:91:41:d3:7d:
         56:49:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:12:43 2026 by rpki-client