Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/05E4CBECB12911EF993BC12DC4F9AE02.roa
File:                     05E4CBECB12911EF993BC12DC4F9AE02.roa (raw, json)
Hash identifier:          UgNLpnpsPwAz2rvVqCqPMBi0JxC9elqJ20s+71NKi0w=
Subject key identifier:   C2:51:14:9F:87:17:ED:CC:15:C9:39:68:9A:98:64:FB:48:3E:82:A0
Certificate issuer:       /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial:       ED
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/05E4CBECB12911EF993BC12DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:49:00 +0000
ROA not before:           Sat 13 Dec 2025 05:45:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     153466
IP address blocks:        160.250.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
                          rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 06:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
        Validity
            Not Before: Dec 13 05:45:07 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4199c-a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:00:1b:08:aa:9e:e0:40:5a:3e:89:18:64:
                    0f:08:f9:d8:5a:66:88:ad:cc:c7:c2:94:6f:92:53:
                    b4:79:4e:26:d7:6d:be:5f:31:a3:fd:48:ed:a6:e2:
                    2d:9d:24:de:bb:79:8f:ce:82:36:88:bf:67:94:ff:
                    aa:0f:bd:a6:ba:97:2c:0c:90:5c:79:30:33:ae:ac:
                    7e:79:fc:8d:c7:15:be:31:5f:1c:c4:de:15:d7:aa:
                    86:09:e7:a1:88:98:1e:8d:15:06:f1:1f:0a:a3:09:
                    70:46:d5:9a:ef:44:8f:4c:c4:69:94:f2:b9:86:3f:
                    dc:27:39:51:6b:0e:f2:d2:57:73:c5:f0:fe:22:18:
                    0a:85:37:2e:f4:ed:3e:8a:76:a1:9a:e8:56:fc:4e:
                    e9:2d:da:35:82:a6:85:7e:dc:9a:cf:01:31:02:c8:
                    e5:a8:bc:4c:3c:9e:da:b8:6e:b2:3d:08:74:d3:8c:
                    cb:15:1e:9c:37:75:82:57:a5:28:af:ee:7a:54:74:
                    74:8c:68:67:25:07:55:02:40:46:21:33:52:17:21:
                    56:bd:57:84:6e:3e:c4:65:dc:67:f7:6a:08:14:2a:
                    e4:49:cd:9a:71:c2:71:53:61:d2:55:42:94:a3:63:
                    40:1c:1f:ca:cc:59:30:66:ef:da:57:4e:95:90:23:
                    8c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:51:14:9F:87:17:ED:CC:15:C9:39:68:9A:98:64:FB:48:3E:82:A0
            X509v3 Authority Key Identifier:
                keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/05E4CBECB12911EF993BC12DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:f6:5d:95:8a:f1:ff:24:96:d2:d1:6d:4f:2a:40:8c:61:
         4b:ea:0c:f8:ea:d7:3e:de:e6:24:ec:21:26:88:73:a0:1c:b4:
         ac:2e:1d:b5:81:63:de:01:a1:4e:ba:08:b2:20:d5:7c:fe:e4:
         9a:6c:3c:8f:c3:3e:6a:14:1a:dc:fb:62:d9:6c:de:6c:23:f8:
         2f:9a:11:2e:19:91:16:54:9e:48:bf:33:15:e5:09:37:3c:99:
         3e:41:18:7c:3d:21:e5:7b:96:82:5e:ab:33:29:0b:c3:29:52:
         b6:91:0b:5f:79:ab:73:0f:c5:69:b1:3d:ab:6b:40:97:74:c6:
         51:3e:c2:30:42:13:67:ac:68:b7:fe:43:b5:85:11:d6:fa:8d:
         8c:14:68:fd:9d:ea:9a:43:c6:7c:4b:5c:85:af:5f:19:fe:c4:
         31:9a:25:00:57:e6:a9:fe:c2:a3:c7:31:ec:9d:81:f3:78:df:
         16:8a:88:b6:f2:56:dd:0c:42:b8:bc:50:65:a4:64:6d:42:bc:
         31:d6:53:e9:15:4f:1e:d6:d2:28:a0:da:30:53:24:48:4b:e0:
         ff:c3:bc:37:b5:f3:0d:ae:87:3b:00:07:8c:05:ca:bb:47:1f:
         a3:a3:57:9d:d3:6c:5b:10:0d:ec:19:1f:d0:0e:37:02:4d:14:
         da:b3:c1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:03 2026 by rpki-client