Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/B5E94296025C11F0BDF41912C4F9AE02.roa
File:                     B5E94296025C11F0BDF41912C4F9AE02.roa (raw, json)
Hash identifier:          /YjMi8lxGGXF4c+I4EPLjThxhW4jZ0Qbd96sxIf1JkA=
Subject key identifier:   68:D5:63:CC:3B:91:75:B1:99:33:36:5F:21:99:25:E4:6E:42:19:58
Certificate issuer:       /CN=A91B38F5/serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
Certificate serial:       9F
Authority key identifier: 79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/B5E94296025C11F0BDF41912C4F9AE02.roa
Signing time:             Thu 15 Jan 2026 06:24:51 +0000
ROA not before:           Thu 15 Jan 2026 06:24:51 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133464
IP address blocks:        160.250.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl
                          rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B38F5, serialNumber=79568A38ECDB617E678C08A6CC43C4D6502CEC62
        Validity
            Not Before: Jan 15 06:24:51 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69688833-582c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:87:a4:7c:34:b1:2b:5b:aa:1b:47:52:82:
                    64:76:00:a5:37:8c:02:f4:a8:0a:26:55:ff:d9:e4:
                    b3:f0:aa:16:32:4f:bb:3a:59:2f:18:ee:56:37:87:
                    c6:9a:88:ae:8b:09:df:d7:83:d4:a3:f5:b5:b0:97:
                    a5:57:2f:d1:2c:cd:20:f1:c8:6d:f4:5e:78:32:0d:
                    3b:31:06:d0:ec:a1:3f:d4:09:63:03:58:b1:71:15:
                    1d:3c:13:d8:9a:7d:62:bd:b8:bb:95:45:e4:de:1a:
                    6e:1d:f2:ec:0e:a7:87:e1:9d:54:33:ab:c0:c1:04:
                    b2:05:aa:ba:9d:e4:d1:76:58:4c:74:d6:18:ac:7b:
                    0b:ef:10:b8:f9:7d:1a:45:f6:a3:a7:69:5e:58:39:
                    de:c5:92:7e:c4:10:88:81:62:3e:30:97:e3:bd:1a:
                    88:61:88:5f:51:61:f5:58:38:6d:9f:13:31:dd:ab:
                    57:7a:d6:74:a2:af:50:b4:24:f9:58:91:e0:5f:86:
                    b7:f3:84:12:7b:09:ae:bd:6d:a1:54:20:d7:83:92:
                    99:cb:1f:5b:b5:fd:78:3b:32:81:4b:b4:04:24:ae:
                    f9:9b:25:a8:e5:d5:ea:c2:00:69:9c:88:5b:de:76:
                    34:89:89:a0:a2:1c:df:41:fe:bd:6f:d6:75:15:a6:
                    e1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:63:CC:3B:91:75:B1:99:33:36:5F:21:99:25:E4:6E:42:19:58
            X509v3 Authority Key Identifier:
                keyid:79:56:8A:38:EC:DB:61:7E:67:8C:08:A6:CC:43:C4:D6:50:2C:EC:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/eVaKOOzbYX5njAimzEPE1lAs7GI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eVaKOOzbYX5njAimzEPE1lAs7GI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B38F5/E802819E025B11F09ACFD910C4F9AE02/B5E94296025C11F0BDF41912C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:dd:00:1f:2a:dc:f1:63:a4:09:47:a2:ca:22:c2:bc:5b:ff:
         65:c2:bd:df:51:40:5d:52:56:44:3f:a8:6b:0a:ef:f6:9c:13:
         5a:c8:0c:ab:00:ca:37:ea:50:bb:3d:22:d2:f4:37:87:9c:38:
         1d:2b:89:50:68:b3:2b:d1:7f:fc:55:4f:8d:9b:7a:5a:4f:6a:
         9f:61:6c:18:46:f1:dc:bc:20:25:60:40:8e:ea:4f:c3:70:05:
         8d:13:b2:07:da:d5:6a:9f:a0:17:62:cf:71:c5:86:a7:85:f8:
         ca:23:a3:02:52:07:8a:5a:a0:51:f1:f4:54:73:77:04:8c:48:
         2c:7d:59:93:fa:21:a9:27:eb:c3:b4:c6:2c:07:cc:87:ae:b5:
         29:5e:bb:20:60:b6:29:51:16:bf:b5:a8:8b:60:ab:48:1d:26:
         fd:b2:10:6a:84:35:03:e0:25:87:ac:fc:d9:cf:ad:b3:5f:04:
         5e:7c:d3:c4:8b:1e:bb:58:95:d9:f0:44:9b:c7:48:ce:39:40:
         61:0c:6f:d5:09:84:d1:de:a0:c9:94:3c:07:13:90:f4:04:f8:
         f8:18:e4:38:a9:4e:05:fc:19:d6:78:44:2f:8b:e1:34:f1:ff:
         00:4a:e8:6b:77:73:87:82:a8:34:60:4a:f3:5c:bc:c7:b8:11:
         d3:3d:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 04:43:14 2026 by rpki-client