Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/0FFCC5E8AFAE11EFAC818674C4F9AE02.roa
File:                     0FFCC5E8AFAE11EFAC818674C4F9AE02.roa (raw, json)
Hash identifier:          3nD9LInONQ51DGwH1Bk1CRRWQxIMYRaBTzihhmaQ14w=
Subject key identifier:   1A:EB:2A:6F:9F:55:10:D2:A1:C1:14:A1:42:64:E9:66:B2:E7:1F:28
Certificate issuer:       /CN=A9186363/serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
Certificate serial:       F3
Authority key identifier: 17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/0FFCC5E8AFAE11EFAC818674C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:50:56 +0000
ROA not before:           Sat 29 Nov 2025 04:03:19 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153470
IP address blocks:        160.250.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl
                          rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 05:59:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186363, serialNumber=171EDD3F7785E0F538556F9EF26BED71669E8D8C
        Validity
            Not Before: Nov 29 04:03:19 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5a3d0-3366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:11:72:13:12:16:44:5a:b3:2f:f1:c6:f6:
                    45:a0:f2:66:d2:a6:d5:4e:4e:a0:ff:5d:68:a1:63:
                    e6:42:b2:9e:8d:13:6f:28:b8:1f:b6:e0:a2:38:27:
                    c8:25:1d:cc:2c:f8:d7:fc:cd:1c:bb:26:7a:ac:60:
                    34:31:c8:19:2d:46:b4:d5:b1:b8:2b:6c:00:ec:77:
                    b2:8d:9d:d1:c1:bb:3f:5f:38:ff:9a:54:d0:dd:ac:
                    13:f1:f3:1f:9c:20:61:31:34:34:d9:11:d4:ab:82:
                    e9:39:53:c9:18:89:3b:d0:ce:13:ff:9f:d6:03:93:
                    65:3e:da:aa:20:51:2a:6c:58:7e:8b:3a:0d:18:e2:
                    3f:31:9d:18:63:ce:1f:11:fe:50:5d:7c:4c:76:ca:
                    e5:98:c5:44:76:1a:a0:31:ee:b8:4f:ff:86:f5:7b:
                    d2:20:07:ea:c4:93:fe:28:ce:8d:36:05:bd:b8:34:
                    c1:f9:c5:c6:68:80:5f:d0:57:37:a4:ab:ca:c5:8b:
                    49:56:b8:30:ac:ff:12:7f:cc:f6:72:d6:07:fd:96:
                    47:06:6d:96:c3:af:f5:19:03:7e:f1:95:4e:52:0f:
                    b6:01:1f:17:eb:88:ea:f9:25:05:a3:f0:12:88:c7:
                    78:1e:35:b2:47:00:b9:48:65:c9:da:9c:e3:ef:e9:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EB:2A:6F:9F:55:10:D2:A1:C1:14:A1:42:64:E9:66:B2:E7:1F:28
            X509v3 Authority Key Identifier:
                keyid:17:1E:DD:3F:77:85:E0:F5:38:55:6F:9E:F2:6B:ED:71:66:9E:8D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/Fx7dP3eF4PU4VW-e8mvtcWaejYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fx7dP3eF4PU4VW-e8mvtcWaejYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186363/B5600AECAFAC11EFB886D651C4F9AE02/0FFCC5E8AFAE11EFAC818674C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b6:f8:e4:cf:ed:c2:77:a4:f9:8e:9d:e1:93:79:36:66:5c:
         d1:a5:7d:bd:97:ff:50:fe:36:76:70:68:c1:4e:84:6e:24:b2:
         1b:71:d2:d0:8c:40:7e:b4:5b:69:e6:50:af:6a:24:49:4f:71:
         43:5c:22:fb:e1:2d:47:41:35:99:40:04:33:77:fb:c4:88:2e:
         80:17:12:0b:52:46:b4:ed:88:eb:6e:7a:98:00:57:28:30:c7:
         e9:8d:45:f1:1c:e3:0e:a7:a6:b2:65:66:a0:74:32:0c:df:88:
         fe:88:9a:ae:ec:27:b0:d8:b7:56:23:34:68:8a:f6:c6:f6:ef:
         fd:d3:54:6d:17:38:cd:0f:d7:e3:14:b7:6a:b9:d2:ac:fd:1b:
         86:39:69:58:0b:a9:fb:34:e2:3b:e4:24:93:58:26:2a:40:37:
         06:01:e2:42:6c:62:46:c6:a4:bf:88:39:66:d2:95:e6:00:4e:
         60:d2:c2:85:0e:80:cb:f9:66:b0:ba:1f:2d:22:58:68:a1:f4:
         53:81:f3:f8:d5:03:a8:12:44:28:39:1f:24:f3:ae:31:18:76:
         0a:f1:c4:05:85:5f:ca:97:3b:20:b0:bb:1f:69:2f:cf:02:3d:
         c9:3e:6e:a3:6a:49:1c:fb:2b:91:ed:0f:d5:ac:44:ca:9a:bd:
         24:27:4e:27
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYzNjMxMTAvBgNVBAUTKDE3MUVERDNGNzc4NUUwRjUzODU1NkY5RUYyNkJFRDcx
NjY5RThEOEMwHhcNMjUxMTI5MDQwMzE5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTNkMC0zMzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBQRchMSFkRasy/xxvZFoPJm0qbVTk6g/11ooWPmQrKejRNvKLgftuCiOCfI
JR3MLPjX/M0cuyZ6rGA0McgZLUa01bG4K2wA7HeyjZ3Rwbs/Xzj/mlTQ3awT8fMf
nCBhMTQ02RHUq4LpOVPJGIk70M4T/5/WA5NlPtqqIFEqbFh+izoNGOI/MZ0YY84f
Ef5QXXxMdsrlmMVEdhqgMe64T/+G9XvSIAfqxJP+KM6NNgW9uDTB+cXGaIBf0Fc3
pKvKxYtJVrgwrP8Sf8z2ctYH/ZZHBm2Ww6/1GQN+8ZVOUg+2AR8X64jq+SUFo/AS
iMd4HjWyRwC5SGXJ2pzj7+l52QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBrrKm+f
VRDSocEUoUJk6Way5x8oMB8GA1UdIwQYMBaAFBce3T93heD1OFVvnvJr7XFmno2M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjM2My9CNTYwMEFFQ0FG
QUMxMUVGQjg4NkQ2NTFDNEY5QUUwMi9GeDdkUDNlRjRQVTRWVy1lOG12dGNXYWVq
WXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Z4N2RQM2VGNFBVNFZXLWU4bXZ0Y1dhZWpZdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYzNjMvQjU2MDBBRUNBRkFDMTFFRkI4ODZENjUxQzRGOUFFMDIvMEZGQ0M1RThB
RkFFMTFFRkFDODE4Njc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoPprMA0GCSqGSIb3DQEBCwUAA4IBAQBJtvjkz+3Cd6T5jp3hk3k2
ZlzRpX29l/9Q/jZ2cGjBToRuJLIbcdLQjEB+tFtp5lCvaiRJT3FDXCL74S1HQTWZ
QAQzd/vEiC6AFxILUka07YjrbnqYAFcoMMfpjUXxHOMOp6ayZWagdDIM34j+iJqu
7Cew2LdWIzRoivbG9u/901RtFzjND9fjFLdqudKs/RuGOWlYC6n7NOI75CSTWCYq
QDcGAeJCbGJGxqS/iDlm0pXmAE5g0sKFDoDL+Wawuh8tIlhoofRTgfP41QOoEkQo
OR8k864xGHYK8cQFhV/KlzsgsLsfaS/PAj3JPm6jakkc+yuR7Q/VrETKmr0kJ04n
-----END CERTIFICATE-----
Generated at Wed Mar 4 09:43:29 2026 by rpki-client