Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/015250F6309311F084231321C4F9AE02.roa
File:                     015250F6309311F084231321C4F9AE02.roa (raw, json)
Hash identifier:          BeulAEPDoFLGO9UYVAx1+bgz0obUOcmmrn0Kzh9wNG8=
Subject key identifier:   C9:51:85:81:06:10:80:6E:69:66:B9:BD:15:A1:EB:1A:BD:B0:8A:38
Certificate issuer:       /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial:       DE
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/015250F6309311F084231321C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:04:19 +0000
ROA not before:           Tue 23 Sep 2025 07:56:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        143.188.148.0/22 maxlen: 23
                          143.188.152.0/22 maxlen: 23
                          143.188.156.0/22 maxlen: 23
                          143.188.160.0/23 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
                          rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
        Validity
            Not Before: Sep 23 07:56:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a598e3-8991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d3:4c:11:05:d4:d1:d8:18:fb:ef:0e:b5:fe:
                    9f:54:59:8f:33:a9:3e:aa:f5:c7:12:51:ec:34:e9:
                    78:8d:77:4a:74:af:e1:02:87:b5:86:9e:97:2c:49:
                    49:49:86:da:22:88:5e:14:90:fe:67:7b:b1:fd:ba:
                    d6:b8:61:82:fe:06:90:7d:a5:1e:7c:80:e3:77:1e:
                    ce:c4:28:d1:87:ce:f8:ac:96:c8:8c:fa:29:24:d9:
                    22:82:60:b6:26:9e:0f:ae:20:07:2f:60:a6:d9:d4:
                    23:c4:22:e0:f9:19:2f:b1:89:43:e8:71:ba:9e:da:
                    7e:cc:fa:36:c9:fb:e0:76:d5:bc:cc:57:bc:c3:f6:
                    cc:8e:20:5d:2b:50:88:e6:ea:bb:f4:45:74:95:e2:
                    a1:c0:a8:42:49:71:20:3c:47:12:a7:9b:85:fb:dc:
                    73:a4:45:ac:ac:e8:a5:f5:e2:f7:d4:1d:b4:79:f1:
                    26:2d:a2:b4:9f:42:87:ec:a5:a7:be:7d:39:22:82:
                    6a:dd:11:6b:9c:02:a2:ce:c3:26:19:b8:5b:2a:56:
                    7a:3c:f5:e4:f1:ba:10:d2:25:d9:1d:d1:07:7e:7a:
                    70:66:fd:e7:d1:ec:ed:9a:04:24:96:00:e3:9e:fa:
                    17:b5:ea:90:68:59:8e:79:dc:74:79:f0:1d:75:09:
                    93:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:51:85:81:06:10:80:6E:69:66:B9:BD:15:A1:EB:1A:BD:B0:8A:38
            X509v3 Authority Key Identifier:
                keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/015250F6309311F084231321C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.188.148.0-143.188.161.255

    Signature Algorithm: sha256WithRSAEncryption
         4f:ba:de:b4:2f:23:7a:93:fc:9b:7b:36:ea:cd:11:94:5d:f0:
         5e:d2:25:89:f7:57:e9:9d:72:e8:5f:5c:10:0a:8c:72:12:fb:
         31:7e:56:7b:10:65:ff:62:b6:d7:17:a5:5f:3e:85:4c:ca:7f:
         12:dd:27:cb:a3:3e:db:52:11:81:99:14:57:e7:47:ff:c6:5c:
         8d:56:dc:75:c8:0f:c9:07:77:7b:23:b1:db:5d:9f:7d:c0:b1:
         ac:76:66:14:f8:33:84:2e:3c:4f:fe:c9:ba:3b:08:b5:c9:80:
         8d:c6:64:9f:fa:c6:ba:80:28:76:bb:1a:ed:1c:ed:60:88:58:
         e9:f4:22:c0:e6:a8:9d:57:08:3c:e7:e3:4f:f1:87:66:ea:d5:
         f9:5f:04:be:c2:59:a0:65:05:55:64:c6:78:84:56:50:b8:48:
         63:a3:a0:d1:dc:80:39:cc:92:84:b1:8e:21:8e:ef:91:5c:c7:
         58:3d:e4:cb:28:57:bf:b4:9b:54:69:bb:05:f9:09:3c:ee:99:
         27:b0:da:72:88:7f:7d:2d:f5:6c:db:f9:c9:80:b1:0a:4e:22:
         21:4e:54:48:f3:f8:36:f0:f3:02:9e:b6:4e:aa:d2:18:e4:97:
         9e:27:7c:89:bb:cd:c5:19:a1:53:48:31:0b:0a:cc:90:a4:84:
         36:a9:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:20:14 2026 by rpki-client