Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/A22E9E42CF3D11EFB2075D13C4F9AE02.roa
File:                     A22E9E42CF3D11EFB2075D13C4F9AE02.roa (raw, json)
Hash identifier:          x28Oj7X+ym9PTtSgpQ2J6HOcFV8oNcxzJtpKw77hGpU=
Subject key identifier:   02:18:63:E9:AF:63:AA:78:0B:37:25:48:68:24:52:A0:A4:2B:EE:01
Certificate issuer:       /CN=A91F0578/serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
Certificate serial:       FB
Authority key identifier: 1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/A22E9E42CF3D11EFB2075D13C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 06:40:21 +0000
ROA not before:           Fri 03 Apr 2026 06:40:21 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     153516
IP address blocks:        161.248.154.0/23 maxlen: 23
                          161.248.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl
                          rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0578, serialNumber=1D3DAEF7D2788373EDDFCB1AD5C4C2356C57ADED
        Validity
            Not Before: Apr  3 06:40:21 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf60d5-7c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2e:57:d4:8f:74:9b:c0:01:c9:e5:1e:0b:a2:
                    5d:39:71:4f:14:cc:36:7a:2f:98:67:a4:1e:67:41:
                    4a:11:14:64:19:f7:a8:aa:07:11:27:8f:6b:a9:91:
                    66:c8:5d:73:ba:f7:87:8a:cb:a3:74:ae:3b:02:7a:
                    32:1a:bf:61:d7:71:0b:d8:5b:a0:d6:75:48:2e:eb:
                    64:cf:84:37:4f:32:f4:6d:e0:90:3b:a1:c8:ed:e0:
                    32:42:8f:4b:94:cc:60:91:79:cd:aa:e3:03:a4:b0:
                    c0:a3:3a:95:08:be:7a:31:31:5f:3b:7b:3c:8c:19:
                    1d:c0:a3:e2:db:fb:17:1c:2e:ea:dd:46:64:30:58:
                    d4:45:f4:17:44:03:9a:06:f3:a9:f0:04:11:21:83:
                    4e:ef:d8:c7:1d:0a:39:2b:51:64:cc:87:b8:f0:1e:
                    b0:9d:39:c4:b5:d2:8b:ee:1e:a1:c8:25:e8:1d:d2:
                    67:eb:09:dc:a6:e8:23:05:b8:80:8e:55:23:a0:1c:
                    43:af:29:bd:b0:54:4e:3d:71:02:e2:d6:bf:6c:4b:
                    2e:d0:6a:b7:0e:3c:5f:8e:2b:cc:4c:45:7e:ee:47:
                    03:f6:14:e1:95:50:a6:1f:43:4b:2b:b2:cd:78:be:
                    19:06:2b:8d:18:9a:9e:25:4b:7d:d8:06:cc:04:05:
                    ed:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:18:63:E9:AF:63:AA:78:0B:37:25:48:68:24:52:A0:A4:2B:EE:01
            X509v3 Authority Key Identifier:
                keyid:1D:3D:AE:F7:D2:78:83:73:ED:DF:CB:1A:D5:C4:C2:35:6C:57:AD:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/HT2u99J4g3Pt38sa1cTCNWxXre0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HT2u99J4g3Pt38sa1cTCNWxXre0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0578/003A79DACF3D11EF91380E11C4F9AE02/A22E9E42CF3D11EFB2075D13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:0f:0a:54:6c:1a:43:57:d9:b6:be:d6:63:2c:b8:19:5f:69:
         82:76:b8:50:a6:03:d7:4d:1c:28:5a:4b:fa:6c:72:13:e9:83:
         1c:85:ba:ec:f2:87:75:1b:f0:96:79:bb:69:d2:ea:09:75:e7:
         7f:9c:9a:c3:d7:7f:fa:7a:11:02:19:72:94:74:64:d0:3f:bf:
         8d:72:3d:bd:a9:b3:f1:0e:d9:a6:4d:86:46:a7:52:d8:9b:a7:
         81:f3:9b:dd:b5:26:7e:2a:07:00:30:13:59:75:6c:3e:55:10:
         d6:1d:fd:eb:8c:b7:7e:5f:8a:fe:af:58:aa:99:7b:ce:4c:1d:
         12:8b:ed:05:bc:99:7e:53:6e:97:c0:30:bb:e7:3e:2e:70:2c:
         69:c9:46:15:f6:68:8d:fe:58:4d:c0:2e:b3:6c:c1:3c:9a:e7:
         ab:d2:07:c5:f1:62:3f:96:8e:47:32:30:31:4c:a6:d0:74:ce:
         4f:d8:f6:37:c3:17:60:bd:14:b1:a3:59:3b:97:2c:5d:87:90:
         61:b4:5c:c8:5f:b7:da:a7:58:e5:7f:d9:9a:5a:66:31:7f:d0:
         38:cf:4a:f7:e4:d4:b2:1f:05:3f:48:25:fd:1f:9f:45:e0:a1:
         fe:34:ea:b6:90:c1:a5:ff:7e:aa:41:19:30:29:69:33:2b:9f:
         9e:98:ad:2f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjA1NzgxMTAvBgNVBAUTKDFEM0RBRUY3RDI3ODgzNzNFRERGQ0IxQUQ1QzRDMjM1
NkM1N0FERUQwHhcNMjYwNDAzMDY0MDIxWhcNMjYwODAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmNjBkNS03YzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzS5X1I90m8AByeUeC6JdOXFPFMw2ei+YZ6QeZ0FKERRkGfeoqgcRJ49rqZFm
yF1zuveHisujdK47AnoyGr9h13EL2Fug1nVILutkz4Q3TzL0beCQO6HI7eAyQo9L
lMxgkXnNquMDpLDAozqVCL56MTFfO3s8jBkdwKPi2/sXHC7q3UZkMFjURfQXRAOa
BvOp8AQRIYNO79jHHQo5K1FkzIe48B6wnTnEtdKL7h6hyCXoHdJn6wncpugjBbiA
jlUjoBxDrym9sFROPXEC4ta/bEsu0Gq3DjxfjivMTEV+7kcD9hThlVCmH0NLK7LN
eL4ZBiuNGJqeJUt92AbMBAXtcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAIYY+mv
Y6p4CzclSGgkUqCkK+4BMB8GA1UdIwQYMBaAFB09rvfSeINz7d/LGtXEwjVsV63t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDU3OC8wMDNBNzlEQUNG
M0QxMUVGOTEzODBFMTFDNEY5QUUwMi9IVDJ1OTlKNGczUHQzOHNhMWNUQ05XeFhy
ZTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0hUMnU5OUo0ZzNQdDM4c2ExY1RDTld4WHJlMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjA1NzgvMDAzQTc5REFDRjNEMTFFRjkxMzgwRTExQzRGOUFFMDIvQTIyRTlFNDJD
RjNEMTFFRkIyMDc1RDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofiaMA0GCSqGSIb3DQEBCwUAA4IBAQC2DwpUbBpDV9m2vtZjLLgZ
X2mCdrhQpgPXTRwoWkv6bHIT6YMchbrs8od1G/CWebtp0uoJded/nJrD13/6ehEC
GXKUdGTQP7+Ncj29qbPxDtmmTYZGp1LYm6eB85vdtSZ+KgcAMBNZdWw+VRDWHf3r
jLd+X4r+r1iqmXvOTB0Si+0FvJl+U26XwDC75z4ucCxpyUYV9miN/lhNwC6zbME8
muer0gfF8WI/lo5HMjAxTKbQdM5P2PY3wxdgvRSxo1k7lyxdh5BhtFzIX7fap1jl
f9maWmYxf9A4z0r35NSyHwU/SCX9H59F4KH+NOq2kMGl/36qQRkwKWkzK5+emK0v
-----END CERTIFICATE-----
Generated at Sat Apr 18 22:27:07 2026 by rpki-client