Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/90C06632E59811F0B79FD920496F56BC.roa
File:                     90C06632E59811F0B79FD920496F56BC.roa (raw, json)
Hash identifier:          Z/MTCzTXGo9DzTVFAZ1qXdgIiz2vNTTF/MPMd5PghNY=
Subject key identifier:   0B:22:20:46:E2:1F:2F:23:57:A6:A5:55:AE:F4:2E:57:9E:9D:CF:08
Certificate issuer:       /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
Certificate serial:       0128
Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/90C06632E59811F0B79FD920496F56BC.roa
Signing time:             Sun 01 Mar 2026 18:19:42 +0000
ROA not before:           Fri 30 Jan 2026 19:22:10 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     151133
IP address blocks:        160.191.184.0/23 maxlen: 23
                          160.191.184.0/24 maxlen: 24
                          160.191.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl
                          rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0
        Validity
            Not Before: Jan 30 19:22:10 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4833d-64c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8d:25:50:5e:ff:fa:0d:03:18:25:e3:ba:b6:
                    33:14:6d:c0:a1:d9:f3:61:61:3e:5c:f5:59:5f:86:
                    bf:e7:35:76:70:99:47:b4:02:37:38:26:4a:cd:9e:
                    4c:4f:8b:74:d6:d6:29:73:d6:9b:ee:b2:57:1c:4a:
                    31:e1:bf:23:03:ca:30:e6:ec:8b:33:1b:60:13:40:
                    a4:39:93:04:8f:91:b2:d1:11:9e:4b:d2:0e:8c:70:
                    f7:76:3b:ec:87:bf:3f:fc:c4:22:fe:29:25:b2:29:
                    f3:ef:db:b5:f7:0d:dc:46:bf:3a:c8:35:3a:87:78:
                    a6:9a:71:47:c9:4c:8c:00:eb:93:23:b7:02:23:f0:
                    e7:4d:c7:ce:e7:63:31:9e:5c:0a:20:59:e2:dd:ce:
                    61:07:0d:a0:0e:95:96:0f:c1:9d:3f:67:c6:aa:e8:
                    ac:43:93:b5:0a:6d:fe:1a:35:b8:f7:fb:e6:0c:64:
                    06:0d:73:5a:8f:4f:6a:67:1a:b8:50:a1:97:70:67:
                    a9:6d:ce:4c:0b:b2:5c:3b:0f:b0:4a:45:11:5f:a1:
                    17:f4:3b:d5:70:0c:dc:23:62:70:46:0b:7f:b3:8f:
                    c8:8e:f9:c8:60:da:88:5a:14:3b:f5:69:9c:a1:4f:
                    cf:43:f0:78:0c:d0:a0:7b:0e:d9:81:df:aa:5b:0d:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:22:20:46:E2:1F:2F:23:57:A6:A5:55:AE:F4:2E:57:9E:9D:CF:08
            X509v3 Authority Key Identifier:
                keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/90C06632E59811F0B79FD920496F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:97:e6:0f:6c:fc:4f:2f:07:dc:e7:3c:e8:9a:31:07:22:76:
         1b:f2:0f:b6:29:9f:db:52:66:4a:16:85:42:b4:d4:aa:07:13:
         6e:74:ee:d1:87:bb:d2:b0:52:20:51:01:5a:69:42:29:a8:94:
         31:d8:e3:ad:a5:21:b8:71:4b:4f:81:17:74:f0:63:60:55:9a:
         19:f7:ee:f9:55:f3:78:8b:75:67:c5:18:20:dd:f6:12:1a:13:
         9f:91:9f:ff:9d:f9:1d:17:33:13:4e:94:3e:08:e8:8e:21:7f:
         2a:b5:8f:42:bb:8c:65:86:78:f4:2e:9b:f6:e6:7e:6c:65:60:
         29:1b:fe:e4:66:d0:28:ea:3f:ab:55:3f:d5:dd:06:c0:97:c9:
         09:73:54:1b:dd:63:74:45:b4:63:99:e7:3e:cd:1b:ce:a0:ad:
         c5:88:c8:dd:84:1b:d7:d0:80:2f:92:c2:90:1b:2f:93:3a:89:
         09:84:c0:18:d3:3d:1a:be:f3:90:3e:e1:51:77:83:9d:bd:be:
         df:56:52:bd:0d:7f:0f:33:33:5f:00:11:03:54:5d:ba:2e:ed:
         a0:7a:ab:01:9e:03:7a:e7:60:e7:6b:cd:51:53:58:09:25:82:
         e8:06:5e:82:77:e7:96:69:13:37:94:39:6a:6e:4e:a9:b7:e9:
         bd:26:fc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:02:09 2026 by rpki-client