Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/8B349526E61B11EFA5CFAA1CC4F9AE02.roa
File:                     8B349526E61B11EFA5CFAA1CC4F9AE02.roa (raw, json)
Hash identifier:          f+4YHmGNktYVNDLxKhq1vMQrIMFjsHdCm70UHTOep/U=
Subject key identifier:   A1:44:B1:8C:F2:38:0F:C5:F7:0F:43:36:9F:78:52:2C:0E:4F:D3:08
Certificate issuer:       /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial:       FA
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/8B349526E61B11EFA5CFAA1CC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 06:40:19 +0000
ROA not before:           Fri 03 Apr 2026 06:40:19 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     150001
IP address blocks:        161.248.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
        Validity
            Not Before: Apr  3 06:40:19 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf60d3-b838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:d1:84:a4:b9:ae:81:f7:73:82:e4:95:f9:
                    02:ae:03:cc:a0:3a:af:9f:4d:44:10:5d:4a:61:9e:
                    f6:72:c4:34:a7:7f:76:e0:e7:ad:dd:af:cd:9b:c1:
                    b1:27:c3:2c:f3:4a:f0:80:8e:46:42:93:b1:e1:5e:
                    37:93:14:63:70:d4:9e:2d:f4:f0:fe:e2:24:7e:8e:
                    e0:61:64:71:bb:8f:6f:77:0f:69:7c:18:dd:d2:b7:
                    c7:28:e8:75:17:86:8b:3c:40:12:23:76:29:0d:60:
                    ac:47:e8:46:40:d2:24:5b:0d:72:c4:f2:d2:cc:af:
                    77:7e:14:7b:15:d3:e3:08:02:3b:a9:35:ae:d2:37:
                    da:90:93:e7:66:4b:a0:bf:1e:14:e7:14:a4:4d:2a:
                    3a:63:a7:e5:07:54:e2:cd:90:3d:ea:73:cd:0c:e4:
                    d5:03:5b:f1:2d:4e:d2:c8:5c:6a:02:59:a5:9d:27:
                    f6:70:50:62:17:b6:f6:c9:56:f0:0a:1d:e5:d3:fc:
                    c9:e1:e3:8b:a3:75:2f:34:01:da:48:b2:20:42:2e:
                    a7:e4:c0:c7:ed:40:3a:95:f3:67:9b:b5:4a:90:79:
                    ad:2f:14:73:e6:2e:c5:ff:f3:79:5e:f7:a8:fb:f9:
                    74:52:70:5f:09:cd:2e:68:dd:a4:80:0f:03:9c:d6:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:44:B1:8C:F2:38:0F:C5:F7:0F:43:36:9F:78:52:2C:0E:4F:D3:08
            X509v3 Authority Key Identifier:
                keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/8B349526E61B11EFA5CFAA1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:4b:63:6c:1d:4f:71:82:97:e9:b9:8f:b8:c0:eb:3f:8c:cd:
         d8:33:78:6e:3d:25:5a:37:f4:80:78:6a:ff:07:e6:c7:85:33:
         47:35:74:1d:80:38:8e:fa:7f:ea:48:51:d7:ec:a0:ac:9b:b2:
         b5:2a:34:fa:d5:54:1c:58:f2:4f:b9:be:70:fe:87:02:1b:ce:
         0e:c4:bb:c8:7f:ec:a8:81:16:6d:db:eb:39:6d:18:0f:3b:2b:
         79:05:e4:bc:02:b3:b7:e4:02:e1:e3:04:c5:5e:a6:9f:30:a4:
         cb:37:38:08:e4:cf:b7:24:d0:43:d1:a3:ed:d8:d7:15:4e:b0:
         aa:6a:62:43:0f:83:dc:67:21:d6:fd:ad:8c:69:b1:d4:b5:67:
         b3:54:31:4e:91:80:87:27:b7:7c:5f:96:b9:4c:0c:e1:34:8a:
         bd:e4:85:29:b1:ae:2b:07:1e:a0:8b:86:f3:aa:85:a8:c9:24:
         ba:5d:9d:e8:a8:65:84:51:be:aa:0b:20:c3:62:72:18:42:b9:
         ef:b0:95:bf:c4:c6:47:a7:90:55:60:56:80:a1:ea:e4:55:93:
         df:3a:ea:ba:51:b7:b8:84:1c:86:ff:0f:2c:cf:96:17:90:1e:
         cc:43:df:2b:41:b4:c7:25:4d:6b:41:5f:37:e1:84:71:ef:39:
         4a:4c:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:36:07 2026 by rpki-client