Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FD61B47AB12411EF8CF51A7FC4F9AE02.roa
File:                     FD61B47AB12411EF8CF51A7FC4F9AE02.roa (raw, json)
Hash identifier:          hlzg/6VgRAJNNlsCepW4ghokXyuHhObPpn4HS8+jSbA=
Subject key identifier:   DB:07:50:AE:7A:74:DB:B2:56:56:6A:49:9D:68:47:6F:97:6C:92:50
Certificate issuer:       /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
Certificate serial:       213A
Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FD61B47AB12411EF8CF51A7FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:22:03 +0000
ROA not before:           Thu 28 Aug 2025 14:51:50 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153430
IP address blocks:        160.250.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 14:12:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8506 (0x213a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12
        Validity
            Not Before: Aug 28 14:51:50 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61b9b-5301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d5:fa:23:d6:50:94:c5:b9:82:63:67:ae:ba:
                    9d:aa:08:2b:d5:cc:11:46:38:df:16:1c:02:fa:69:
                    ad:d2:8e:77:fd:6f:6e:78:fc:4b:ac:b3:8a:72:db:
                    66:c5:2f:e3:d2:48:e4:21:05:01:52:82:7c:aa:90:
                    9a:11:33:6a:69:46:91:8b:d9:85:be:fd:8b:dd:2f:
                    00:75:6b:d8:6d:95:84:b3:33:13:06:9d:ae:da:03:
                    0b:58:73:e1:8a:9c:af:04:21:83:b4:5f:d7:1c:0b:
                    ea:98:0f:68:f0:3f:56:5f:02:c4:2f:20:db:aa:e1:
                    89:6e:8d:d9:69:76:0d:e6:99:b5:67:93:76:8d:7d:
                    7c:17:1c:6c:4c:20:1e:f9:60:17:41:3b:45:1a:04:
                    3a:0c:65:e2:d0:d6:65:f1:bd:ae:d6:e8:d7:4b:96:
                    83:67:b6:e7:6e:31:1f:18:73:1a:b6:94:16:c9:c9:
                    0c:43:5c:5c:cd:6c:93:f9:7c:f8:dd:04:49:dd:24:
                    de:64:2a:2f:12:34:00:8e:f5:0d:3f:f1:4a:22:fb:
                    60:e8:5a:ca:63:6b:c7:7b:76:44:e0:e7:c1:05:8a:
                    8f:a1:f1:24:78:c7:74:35:d6:39:cd:76:c3:ad:dd:
                    ad:e0:aa:f1:4a:5c:07:e2:68:a2:36:3e:54:2c:66:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:07:50:AE:7A:74:DB:B2:56:56:6A:49:9D:68:47:6F:97:6C:92:50
            X509v3 Authority Key Identifier:
                keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/FD61B47AB12411EF8CF51A7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:e8:2f:fb:46:1b:fd:3b:0a:1c:1e:c7:07:8e:84:f3:2f:
         91:f4:72:bd:73:4a:df:91:df:04:2c:b6:5f:2c:57:6e:32:f4:
         8c:48:78:8d:43:23:fb:ff:8c:2e:36:01:b2:c0:55:a9:ee:f2:
         9e:e6:64:53:71:76:4a:dd:15:b7:6a:7f:b0:55:66:51:25:9b:
         c2:51:3c:53:e0:98:0b:bb:d5:e6:7e:09:e9:e4:6c:b3:43:1f:
         1e:86:1a:51:3a:88:c9:5e:84:77:87:65:e3:bc:b9:ef:00:22:
         e8:9a:ef:13:35:09:ee:19:82:75:99:13:0f:cd:4a:d7:58:f9:
         f1:47:9c:92:ce:81:d5:b4:4a:78:93:4b:3b:5d:7f:88:3f:c5:
         90:f0:a6:a5:29:06:e8:4d:fe:76:4d:95:7a:5c:b7:ff:09:0b:
         c0:6b:63:d5:97:a4:e6:9a:1c:2d:3c:38:12:7a:5c:1d:44:73:
         8f:22:09:56:e3:59:2e:47:e3:31:f2:48:61:83:5d:3e:74:3f:
         72:15:24:50:2f:5c:49:8d:9d:80:9a:6d:bd:70:7d:4a:94:85:
         be:84:67:62:d1:75:47:cb:f6:77:e4:4e:23:3e:28:fc:b6:89:
         8b:85:d6:96:14:17:cd:62:82:70:ce:1e:c7:2d:18:c8:4a:b2:
         34:95:dc:be
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICITowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy
ODRGODBFMTIwHhcNMjUwODI4MTQ1MTUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWI5Yi01MzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2tX6I9ZQlMW5gmNnrrqdqggr1cwRRjjfFhwC+mmt0o53/W9uePxLrLOKcttm
xS/j0kjkIQUBUoJ8qpCaETNqaUaRi9mFvv2L3S8AdWvYbZWEszMTBp2u2gMLWHPh
ipyvBCGDtF/XHAvqmA9o8D9WXwLELyDbquGJbo3ZaXYN5pm1Z5N2jX18FxxsTCAe
+WAXQTtFGgQ6DGXi0NZl8b2u1ujXS5aDZ7bnbjEfGHMatpQWyckMQ1xczWyT+Xz4
3QRJ3STeZCovEjQAjvUNP/FKIvtg6FrKY2vHe3ZE4OfBBYqPofEkeMd0NdY5zXbD
rd2t4KrxSlwH4miiNj5ULGZkGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNsHUK56
dNuyVlZqSZ1oR2+XbJJQMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5
REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE
aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRkQ2MUI0N0FC
MTI0MTFFRjhDRjUxQTdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPo8MA0GCSqGSIb3DQEBCwUAA4IBAQA17egv+0Yb/TsKHB7HB46E
8y+R9HK9c0rfkd8ELLZfLFduMvSMSHiNQyP7/4wuNgGywFWp7vKe5mRTcXZK3RW3
an+wVWZRJZvCUTxT4JgLu9Xmfgnp5GyzQx8ehhpROojJXoR3h2XjvLnvACLomu8T
NQnuGYJ1mRMPzUrXWPnxR5ySzoHVtEp4k0s7XX+IP8WQ8KalKQboTf52TZV6XLf/
CQvAa2PVl6TmmhwtPDgSelwdRHOPIglW41kuR+Mx8khhg10+dD9yFSRQL1xJjZ2A
mm29cH1KlIW+hGdi0XVHy/Z35E4jPij8tomLhdaWFBfNYoJwzh7HLRjISrI0ldy+
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:52:18 2026 by rpki-client