Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa
File:                     6241069011E111EFBBB70B32C4F9AE02.roa (raw, json)
Hash identifier:          SoGKG5lRlJDmBi3+hkgBMlRuJcm8XEuk0vZ81unwhDg=
Subject key identifier:   8B:4F:DC:24:21:6F:A5:DD:C2:A0:0F:3A:A9:7F:B2:60:B2:A3:4F:F1
Certificate issuer:       /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
Certificate serial:       019B
Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:08:56 +0000
ROA not before:           Thu 13 Feb 2025 07:08:09 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152339
IP address blocks:        157.10.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D
        Validity
            Not Before: Feb 13 07:08:09 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a599f8-82bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:2a:6e:be:31:d0:dc:70:6b:d6:2b:76:6d:
                    c9:58:30:1c:33:8a:7e:b8:38:9e:f0:11:73:c2:68:
                    a2:64:b4:47:16:0f:55:0d:89:60:56:dc:4c:b0:ec:
                    13:e1:df:1b:16:34:92:3a:f7:1e:b9:5b:ab:5d:e0:
                    27:4f:7b:08:5e:31:58:75:b4:97:aa:5f:82:4e:cc:
                    90:9a:93:4d:bf:f4:a7:1b:3b:6b:0c:b4:fe:80:2f:
                    9d:33:1e:aa:5a:36:71:57:14:28:dd:3d:33:7c:dc:
                    58:29:29:48:91:de:b4:cf:de:cd:5e:0b:55:34:d9:
                    06:19:b3:7f:fa:a0:00:7f:6b:a0:18:97:17:90:17:
                    4f:16:3b:8c:d8:a1:1f:d2:cb:43:0a:57:05:ec:ab:
                    70:f9:25:f2:05:bc:e3:4f:88:20:28:e3:9d:d5:5d:
                    fe:9d:25:27:58:1d:cd:27:9b:aa:bf:ca:57:1f:2e:
                    31:2d:53:02:06:ec:8e:86:c0:d8:53:0b:d1:29:fd:
                    70:61:a0:74:c4:95:1b:0c:08:0e:40:c7:15:99:7c:
                    80:f2:74:93:91:45:8e:5c:c9:3c:75:79:34:7f:86:
                    bb:ac:49:af:b5:c5:09:38:36:29:7e:c1:99:60:ce:
                    53:4f:9d:7f:df:40:7a:be:48:b3:e4:29:e4:ed:7c:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4F:DC:24:21:6F:A5:DD:C2:A0:0F:3A:A9:7F:B2:60:B2:A3:4F:F1
            X509v3 Authority Key Identifier:
                keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:8e:4e:76:6d:be:75:fe:97:3f:4b:f5:66:26:1d:2d:a1:
         c2:06:0c:32:57:6f:f6:51:c9:c8:c8:47:17:f4:51:c8:ed:a8:
         f7:1b:93:22:d1:0a:9e:cd:59:94:d3:f4:57:a7:32:f3:26:3b:
         6b:8c:f6:eb:26:cf:b7:f2:3e:52:98:66:79:2f:08:4b:2e:f3:
         02:e4:f1:b3:fb:71:1e:bd:63:dd:d1:0c:23:b2:62:b4:a1:52:
         9c:35:75:9c:9b:5d:9c:7f:4a:7b:83:df:90:72:2b:d6:77:d4:
         59:54:21:6d:45:7b:8f:ef:ea:ca:1f:6b:a1:8c:b5:a3:7a:b1:
         16:9d:65:7d:d7:6e:4a:39:73:c9:c2:1a:53:80:70:a5:10:16:
         8f:de:27:33:a9:2f:64:c3:47:59:95:d8:83:60:d6:9a:4a:0b:
         7a:37:73:4f:07:ed:e7:04:a2:83:05:8f:d5:23:a4:f8:23:66:
         46:ca:a6:88:3b:6d:bf:b0:aa:2b:95:7c:b6:04:d5:76:f5:65:
         29:8d:8e:01:eb:e0:c1:de:0c:4f:21:d0:ff:4e:fa:18:e9:7a:
         92:5d:e8:15:53:43:ff:4e:18:02:88:42:1b:0f:3c:27:07:65:
         32:a2:c0:85:0e:76:a3:63:2f:f5:37:40:ac:e2:1a:9e:ae:6d:
         be:14:17:db
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDYzQUYxMTAvBgNVBAUTKDM0NzRDMjUzOTg2MTEwMEFGRDk2M0ExNjNDODAyRDAy
NjRGOEVDN0QwHhcNMjUwMjEzMDcwODA5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTlmOC04MmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAne0qbr4x0Nxwa9Yrdm3JWDAcM4p+uDie8BFzwmiiZLRHFg9VDYlgVtxMsOwT
4d8bFjSSOvceuVurXeAnT3sIXjFYdbSXql+CTsyQmpNNv/SnGztrDLT+gC+dMx6q
WjZxVxQo3T0zfNxYKSlIkd60z97NXgtVNNkGGbN/+qAAf2ugGJcXkBdPFjuM2KEf
0stDClcF7Ktw+SXyBbzjT4ggKOOd1V3+nSUnWB3NJ5uqv8pXHy4xLVMCBuyOhsDY
UwvRKf1wYaB0xJUbDAgOQMcVmXyA8nSTkUWOXMk8dXk0f4a7rEmvtcUJODYpfsGZ
YM5TT51/30B6vkiz5Cnk7XwVbQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFItP3CQh
b6XdwqAPOql/smCyo0/xMB8GA1UdIwQYMBaAFDR0wlOYYRAK/ZY6FjyALQJk+Ox9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi80REZFNjgyNEI2
QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVBcjlsam9XUElBdEFtVDQ3
SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdIMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDYzQUYvNERGRTY4MjRCNkI3MTFFRUE5RDdGQzNBQzRGOUFFMDIvNjI0MTA2OTAx
MUUxMTFFRkJCQjcwQjMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnQr6MA0GCSqGSIb3DQEBCwUAA4IBAQAuRo5Odm2+df6XP0v1ZiYd
LaHCBgwyV2/2UcnIyEcX9FHI7aj3G5Mi0QqezVmU0/RXpzLzJjtrjPbrJs+38j5S
mGZ5LwhLLvMC5PGz+3EevWPd0QwjsmK0oVKcNXWcm12cf0p7g9+QcivWd9RZVCFt
RXuP7+rKH2uhjLWjerEWnWV9125KOXPJwhpTgHClEBaP3iczqS9kw0dZldiDYNaa
Sgt6N3NPB+3nBKKDBY/VI6T4I2ZGyqaIO22/sKorlXy2BNV29WUpjY4B6+DB3gxP
IdD/TvoY6XqSXegVU0P/ThgCiEIbDzwnB2UyosCFDnajYy/1N0Cs4hqerm2+FBfb
-----END CERTIFICATE-----
Generated at Wed Mar 4 10:09:18 2026 by rpki-client