Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/F51AC6A6C99A11EFB5D4B020C4F9AE02.roa
File:                     F51AC6A6C99A11EFB5D4B020C4F9AE02.roa (raw, json)
Hash identifier:          yevu27JexQC1pFGY5em0jam11butIck0VftNXiMexLs=
Subject key identifier:   99:D7:EC:72:B2:8F:67:AA:F4:23:52:A1:78:C8:E2:78:0E:E1:75:EF
Certificate issuer:       /CN=A911F536/serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
Certificate serial:       E2
Authority key identifier: 2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/F51AC6A6C99A11EFB5D4B020C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:14:25 +0000
ROA not before:           Fri 11 Jul 2025 07:44:25 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141756
IP address blocks:        160.22.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl
                          rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F536, serialNumber=2AE985815A10DD6D04523FC81D8DAFD726BE7816
        Validity
            Not Before: Jul 11 07:44:25 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5a951-2737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:22:b8:30:98:a5:33:25:a6:ec:38:76:fe:
                    09:c5:32:a3:31:21:a0:99:de:24:b0:7d:30:c9:86:
                    4e:cc:bd:1a:a3:36:75:d8:ad:d4:6d:a0:7c:ad:78:
                    bb:51:84:73:07:84:b9:e8:e5:69:0d:da:f3:5f:29:
                    4d:d1:e2:1c:53:7c:4e:1c:15:1d:4f:b4:5f:23:45:
                    a9:84:92:48:06:56:59:bd:4e:83:d0:0d:b9:78:45:
                    15:52:bb:58:53:b9:75:0f:64:a9:12:1a:8c:2b:1c:
                    52:e1:b0:f5:25:20:6f:96:76:c4:96:2c:f8:22:ef:
                    d7:61:51:7d:93:11:2a:16:49:af:14:a3:3e:b9:04:
                    5f:6a:da:04:ee:8f:6b:88:5f:f1:d2:cb:75:d7:a6:
                    21:de:11:3f:51:e8:f9:98:ce:9d:dc:3b:a4:63:f9:
                    f6:20:08:b6:6d:d1:44:04:52:28:ce:54:61:21:1b:
                    f7:a0:04:67:cf:a2:e3:33:ff:6a:56:fe:6d:00:64:
                    6d:8a:b9:e1:39:2f:56:22:42:2c:03:d1:80:1d:bb:
                    df:6a:a2:8d:3b:0b:58:fb:bc:92:8d:c9:bc:67:04:
                    b5:87:e9:39:22:6c:d5:d5:a8:74:53:78:96:a4:50:
                    aa:46:a7:c1:d6:1e:3c:73:6e:12:11:84:ce:fb:94:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D7:EC:72:B2:8F:67:AA:F4:23:52:A1:78:C8:E2:78:0E:E1:75:EF
            X509v3 Authority Key Identifier:
                keyid:2A:E9:85:81:5A:10:DD:6D:04:52:3F:C8:1D:8D:AF:D7:26:BE:78:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/KumFgVoQ3W0EUj_IHY2v1ya-eBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KumFgVoQ3W0EUj_IHY2v1ya-eBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/9A86DBD0C99A11EFB4CEEF1EC4F9AE02/F51AC6A6C99A11EFB5D4B020C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:41:db:e9:7f:e2:d4:63:af:67:72:f0:a2:3b:2b:73:8b:9a:
         c3:f3:f0:4e:25:b0:ba:66:ec:e7:7e:9f:d3:71:41:1e:17:29:
         85:fa:b7:9b:e4:a9:bc:4e:cb:16:11:9f:25:94:47:d2:21:ba:
         a9:cd:13:d4:52:40:0f:31:85:84:7f:5e:bf:6e:d3:17:d6:af:
         ad:4a:53:19:6e:f5:41:94:23:f7:c6:78:05:40:4e:8f:1c:aa:
         0f:77:9a:47:6e:c7:99:9d:bf:18:8e:9f:32:16:a9:33:69:a6:
         8f:98:f1:bd:8c:91:5a:31:6f:6d:37:26:d6:d5:7b:51:d5:53:
         77:0a:32:97:54:a2:62:b0:8c:3e:82:f6:ab:d1:08:5c:20:33:
         6b:33:6c:bd:94:21:5d:0c:0d:4a:a6:02:ee:ae:00:4a:fd:d4:
         a5:ca:c8:c8:75:8e:ca:ce:52:bd:20:a5:1a:1c:1a:03:d5:2e:
         ca:05:4b:de:48:2b:c1:05:49:b6:c9:0a:33:21:8d:57:5c:05:
         b5:da:4d:55:95:a8:67:de:88:f4:6a:c9:f2:e0:0e:2a:12:82:
         77:51:40:99:43:69:05:02:ca:cc:92:49:22:42:be:22:c2:9b:
         bb:d0:af:21:82:a6:6f:d5:81:1c:69:ba:bc:54:30:e1:e8:52:
         5c:10:95:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:12 2026 by rpki-client