Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
File:                     4DA7A7766C6611F0883DC646C4F9AE02.roa (raw, json)
Hash identifier:          eHQm9RZxCNcg7cwgpiIX3zQrXR39BEKT7FwPvpD+Hm8=
Subject key identifier:   A3:B6:53:23:DE:B8:D3:19:71:62:EA:F1:EF:8B:9F:6B:E8:71:65:10
Certificate issuer:       /CN=A91D488C/serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
Certificate serial:       8D
Authority key identifier: 10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:53:49 +0000
ROA not before:           Tue 25 Nov 2025 05:52:50 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55501
IP address blocks:        160.250.96.0/24 maxlen: 24
                          160.250.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl
                          rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 06:44:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D488C, serialNumber=100B25354664681DAAB905CEFF4A4DA749C4EB8A
        Validity
            Not Before: Nov 25 05:52:50 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5a47d-328a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:ce:1c:49:29:a3:0b:be:72:d6:9f:55:6c:
                    59:ec:35:12:e9:1f:6c:98:db:7d:e0:7b:7c:fb:97:
                    55:93:f2:3e:bd:b2:28:84:ee:96:9f:72:2a:3c:69:
                    18:4c:ed:dc:1f:6b:36:00:b8:fc:97:20:9a:df:d1:
                    1a:86:2b:62:08:81:1c:42:c3:1c:62:c0:38:7e:d9:
                    dd:bb:ea:60:7c:7c:8c:6b:29:0c:b0:aa:04:64:92:
                    29:95:60:d6:c8:62:70:a1:f9:30:c2:d9:ea:ee:88:
                    37:c4:ff:ab:a7:d2:27:4a:4a:95:b7:24:d2:e8:21:
                    9d:ac:14:e2:ff:5f:94:8e:ec:d5:51:55:d9:71:c1:
                    4e:01:f9:11:f7:38:0f:8c:ab:c4:5e:fb:01:22:7c:
                    12:19:a9:0c:13:66:50:a5:24:93:b6:42:9c:19:ca:
                    a5:df:10:ea:54:a4:92:9f:e0:b1:d0:94:73:9b:a4:
                    45:08:45:44:e2:90:e6:b2:bd:3a:8f:cb:91:41:e6:
                    81:da:7e:9e:cf:de:a3:9f:06:24:80:7d:25:ea:08:
                    b6:6d:2e:d6:e1:04:64:80:fe:36:66:80:16:e7:44:
                    9a:1c:50:ae:92:e9:a9:0f:11:44:95:4c:9d:de:71:
                    07:d8:90:86:b4:46:ee:4f:e1:17:b8:dd:8c:74:1d:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B6:53:23:DE:B8:D3:19:71:62:EA:F1:EF:8B:9F:6B:E8:71:65:10
            X509v3 Authority Key Identifier:
                keyid:10:0B:25:35:46:64:68:1D:AA:B9:05:CE:FF:4A:4D:A7:49:C4:EB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/EAslNUZkaB2quQXO_0pNp0nE64o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EAslNUZkaB2quQXO_0pNp0nE64o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D488C/46B005046B8911F095F1102BC4F9AE02/4DA7A7766C6611F0883DC646C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:75:1a:0e:da:4d:57:cc:29:79:c2:63:c9:2c:e2:3b:40:d2:
         c8:06:55:e1:d6:1e:74:da:8c:19:57:11:08:42:85:8c:03:e8:
         6e:0b:ae:ed:ce:ac:ea:23:87:fa:49:6f:87:b0:d6:f3:e6:2c:
         64:c2:90:6a:9a:36:33:76:59:2b:6a:d2:77:80:58:2e:2e:95:
         af:74:1d:69:b7:89:71:05:0c:6c:3e:72:de:79:e4:52:c7:30:
         35:99:72:71:10:ce:14:8f:10:3d:59:8c:94:12:68:d7:e3:0f:
         dc:54:78:36:de:d1:e4:05:9e:a8:dd:cc:ff:22:89:41:b0:50:
         14:70:26:69:6c:f8:cc:1b:fc:25:de:d8:f1:c8:91:9f:84:e0:
         2f:d6:a2:b2:c8:2d:9d:64:78:51:33:d6:42:bf:9d:4b:c5:d6:
         6c:00:ec:55:4c:0b:fe:21:83:8d:48:26:d9:6b:e1:04:f4:f4:
         2e:0c:8b:a7:8a:7c:f4:bf:ed:a4:b3:8c:a7:ad:18:a7:ca:84:
         ae:98:14:82:04:b8:61:25:7f:f7:64:46:a7:53:2a:25:86:3c:
         b2:a7:08:20:70:dd:09:90:70:10:79:da:b7:a0:d3:cc:29:81:
         37:08:9e:95:b4:9d:2e:37:1c:6b:c8:56:c6:54:b4:d8:01:a5:
         ae:4c:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 01:48:04 2026 by rpki-client