Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
File:                     ED46632AC75311EFAA7A9E0BC4F9AE02.roa (raw, json)
Hash identifier:          5Q0si6OW+LBzSNGQVmpJrd3DiFbkuGt23jlD/Fz//xk=
Subject key identifier:   38:88:08:4C:D4:A9:4E:C5:82:BA:BF:0C:B7:D3:B9:F3:26:14:3D:8F
Certificate issuer:       /CN=A911691A/serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
Certificate serial:       ED
Authority key identifier: 74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
Signing time:             Mon 05 Jan 2026 05:27:38 +0000
ROA not before:           Mon 05 Jan 2026 05:27:38 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153453
IP address blocks:        160.250.10.0/24 maxlen: 24
                          160.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:45:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=74CB85A6349C3CA6184AECF70F83AFFDFCE0A7F7
        Validity
            Not Before: Jan  5 05:27:38 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=695b4bca-fe95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:30:91:a5:ff:86:4b:d1:ac:4a:cf:01:cd:aa:
                    7b:ef:45:4d:85:f9:26:70:3b:db:e1:65:f9:09:e1:
                    27:87:6f:39:20:15:42:39:51:ae:19:fa:57:4f:1b:
                    b5:c8:26:8d:77:ac:4e:ed:bc:ad:cc:a4:a5:0a:8f:
                    ad:35:92:0f:8c:cb:ab:17:e4:43:a7:b2:7a:f5:d1:
                    d8:1f:8a:0c:e4:d0:7e:48:81:f1:3f:1c:54:84:88:
                    06:6c:d7:cc:0a:56:c9:9b:aa:7a:34:6e:4f:3d:66:
                    aa:6b:d6:dd:bb:8b:36:67:60:f0:3e:8a:e9:51:e4:
                    cf:af:e2:44:eb:bc:40:3c:90:97:5c:17:00:e3:dc:
                    30:c4:bd:22:75:d8:fa:57:78:e6:ff:c5:d4:42:0e:
                    ff:f0:f4:d2:b2:6f:b3:57:16:d7:ea:36:39:30:d1:
                    24:4b:da:9f:3f:a4:92:77:c9:1b:ee:30:16:2f:f0:
                    28:b7:10:2a:2f:40:35:69:73:2e:68:6a:68:6f:b1:
                    73:5a:45:9d:be:e4:26:64:ba:a1:c9:1d:98:90:45:
                    c0:31:35:29:0b:f9:dd:5a:f4:6a:bf:67:1c:20:d4:
                    0e:47:e0:55:d0:02:46:1d:c6:df:c7:b5:5b:09:11:
                    ed:3c:f2:04:19:46:3a:d3:21:a2:c0:23:3b:17:80:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:88:08:4C:D4:A9:4E:C5:82:BA:BF:0C:B7:D3:B9:F3:26:14:3D:8F
            X509v3 Authority Key Identifier:
                keyid:74:CB:85:A6:34:9C:3C:A6:18:4A:EC:F7:0F:83:AF:FD:FC:E0:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/dMuFpjScPKYYSuz3D4Ov_fzgp_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dMuFpjScPKYYSuz3D4Ov_fzgp_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/751F31DAA28511EF842B9410C4F9AE02/ED46632AC75311EFAA7A9E0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:cf:20:12:d1:41:fa:6e:29:ae:32:29:be:76:81:39:cd:69:
         96:12:c0:ed:46:51:60:29:10:b5:05:19:73:74:e1:8e:ac:ca:
         e5:5d:1e:16:b4:4e:65:25:8e:cb:d1:b9:64:31:01:db:36:f4:
         4e:35:0f:eb:51:63:b3:09:8a:82:09:56:8a:61:20:69:b9:39:
         3b:08:c1:e4:62:b4:89:60:90:4a:31:6b:f3:e6:aa:0d:83:27:
         36:7c:d9:7f:b6:29:4c:b7:9c:c4:5a:a8:b6:48:0f:83:b8:49:
         aa:4d:32:d7:0f:8d:f8:20:58:d8:6b:ea:25:e9:c0:5a:e6:ae:
         56:c6:06:12:57:e6:fd:bb:23:89:9d:08:09:30:b5:5a:ba:07:
         10:31:b0:97:dd:e1:bf:3d:65:5b:e8:53:75:65:59:d0:08:f0:
         ee:44:92:7a:f8:68:8f:71:04:b3:81:a6:4d:88:53:5b:57:3c:
         35:ad:8a:be:d9:8e:36:35:2e:a1:bf:df:3f:e1:ec:f7:e1:f8:
         24:8e:69:6d:51:72:a9:90:e6:5a:e0:8d:d2:ea:5e:e2:d6:09:
         83:d8:d2:8b:3e:eb:37:56:88:08:3a:72:de:89:94:6e:83:07:
         d4:d4:11:45:2f:c7:a4:d7:e0:be:3a:85:8c:9b:8f:8d:5f:46:
         ce:3b:2e:54
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx
MTY5MUExMTAvBgNVBAUTKDc0Q0I4NUE2MzQ5QzNDQTYxODRBRUNGNzBGODNBRkZE
RkNFMEE3RjcwHhcNMjYwMTA1MDUyNzM4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDDA02OTViNGJjYS1mZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjzCRpf+GS9GsSs8Bzap770VNhfkmcDvb4WX5CeEnh285IBVCOVGuGfpXTxu1
yCaNd6xO7bytzKSlCo+tNZIPjMurF+RDp7J69dHYH4oM5NB+SIHxPxxUhIgGbNfM
ClbJm6p6NG5PPWaqa9bdu4s2Z2DwPorpUeTPr+JE67xAPJCXXBcA49wwxL0iddj6
V3jm/8XUQg7/8PTSsm+zVxbX6jY5MNEkS9qfP6SSd8kb7jAWL/AotxAqL0A1aXMu
aGpob7FzWkWdvuQmZLqhyR2YkEXAMTUpC/ndWvRqv2ccINQOR+BV0AJGHcbfx7Vb
CRHtPPIEGUY60yGiwCM7F4AtPwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDiICEzU
qU7Fgrq/DLfTufMmFD2PMB8GA1UdIwQYMBaAFHTLhaY0nDymGErs9w+Dr/384Kf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjkxQS83NTFGMzFEQUEy
ODUxMUVGODQyQjk0MTBDNEY5QUUwMi9kTXVGcGpTY1BLWVlTdXozRDRPdl9memdw
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RNdUZwalNjUEtZWVN1ejNENE92X2Z6Z3BfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTY5MUEvNzUxRjMxREFBMjg1MTFFRjg0MkI5NDEwQzRGOUFFMDIvRUQ0NjYzMkFD
NzUzMTFFRkFBN0E5RTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAGg+gowDQYJKoZIhvcNAQELBQADggEBAGzPIBLRQfpuKa4y
Kb52gTnNaZYSwO1GUWApELUFGXN04Y6syuVdHha0TmUljsvRuWQxAds29E41D+tR
Y7MJioIJVophIGm5OTsIweRitIlgkEoxa/Pmqg2DJzZ82X+2KUy3nMRaqLZID4O4
SapNMtcPjfggWNhr6iXpwFrmrlbGBhJX5v27I4mdCAkwtVq6BxAxsJfd4b89ZVvo
U3VlWdAI8O5Eknr4aI9xBLOBpk2IU1tXPDWtir7ZjjY1LqG/3z/h7Pfh+CSOaW1R
cqmQ5lrgjdLqXuLWCYPY0os+6zdWiAg6ct6JlG6DB9TUEUUvx6TX4L46hYybj41f
Rs47LlQ=
-----END CERTIFICATE-----
Generated at Fri Feb 20 07:00:33 2026 by rpki-client