Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/BBE075C6906911EF97FA0D58C4F9AE02.roa
File:                     BBE075C6906911EF97FA0D58C4F9AE02.roa (raw, json)
Hash identifier:          fxW0qCMKHp/bOTohRMniz3GJ3Xchjt8XUqA1xNmri5g=
Subject key identifier:   00:01:2A:13:36:AC:50:20:1F:79:3A:75:FF:3E:34:3C:64:EC:69:F7
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0EE3
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/BBE075C6906911EF97FA0D58C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:43:10 +0000
ROA not before:           Wed 31 Dec 2025 18:15:04 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150342
IP address blocks:        203.90.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3811 (0xee3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Dec 31 18:15:04 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46c9e-a77e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:61:c8:fb:15:a2:d2:ae:a1:f2:75:0a:15:
                    bd:60:d9:1d:c1:82:2f:ab:93:dc:e9:80:9e:5b:1f:
                    13:a6:6e:e1:f5:fe:9d:94:5e:c4:2b:db:5a:56:bd:
                    04:2f:2e:a2:0e:62:f9:c1:78:5f:91:e1:5b:72:96:
                    b8:c9:c4:56:e3:0a:2a:91:c5:e4:bf:2b:4f:ec:dd:
                    60:46:c4:6b:a5:97:ed:31:4e:fa:df:3f:e9:4d:ff:
                    0e:86:7f:25:11:13:e0:71:74:1d:c3:6a:69:fa:45:
                    a0:27:23:69:a4:80:ba:7b:14:76:66:3d:07:1c:c8:
                    ce:43:a2:44:3a:2f:5d:ee:d1:8d:e6:f4:8b:93:27:
                    1a:a3:bd:e9:62:0f:e4:d4:14:15:6e:65:af:ec:d5:
                    1b:b5:5c:47:b1:fa:1f:2f:4d:61:c0:28:69:b0:96:
                    c1:12:a9:55:b1:89:5c:91:15:41:04:16:1e:3b:ad:
                    4a:6f:53:11:b8:b7:73:65:8b:f3:bd:fc:34:d9:f8:
                    f5:2c:4b:85:8e:eb:be:b3:50:e1:cf:e2:59:92:b0:
                    44:37:0e:67:b7:e5:7e:06:3e:a1:cd:30:81:74:99:
                    95:ce:81:7e:ff:07:38:cf:e6:fe:18:99:3a:1d:36:
                    28:f4:84:a1:1a:d7:39:fa:57:01:9d:1d:ec:a2:f2:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:01:2A:13:36:AC:50:20:1F:79:3A:75:FF:3E:34:3C:64:EC:69:F7
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/BBE075C6906911EF97FA0D58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.90.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:91:45:72:ca:a9:bb:4f:c8:0e:a8:d1:47:9f:84:63:6b:e7:
         66:37:a7:2e:31:69:ac:b6:09:ea:b3:d9:7a:e7:a0:b0:b8:fd:
         aa:ba:ae:8c:b1:c1:40:7c:47:52:65:bc:8d:38:ad:b1:e7:8b:
         89:df:ac:ae:9b:ec:b8:99:e3:d1:cd:ad:eb:be:45:a1:61:56:
         7b:3e:aa:02:20:9f:f8:77:7f:5a:93:d7:c6:42:4e:4b:f3:53:
         ee:37:30:58:62:29:a8:65:c8:07:1a:66:c0:f4:6d:39:77:bf:
         c4:a6:2d:8a:04:ad:4e:ca:89:93:0b:50:75:1f:a4:ed:5b:ce:
         fa:8f:d4:08:a4:ad:3c:b9:0e:f9:27:02:cc:57:14:2b:38:83:
         66:40:c7:bb:eb:69:13:41:ff:30:a0:8c:24:6d:aa:f2:73:01:
         1a:cb:84:02:68:14:41:b4:c0:0f:45:c6:a2:c9:ef:44:54:c0:
         bb:33:eb:fc:cb:94:ef:4b:69:28:53:aa:ff:a1:e9:37:da:92:
         07:b3:35:e8:d2:52:99:aa:1e:ed:4d:ff:14:e2:7b:a0:7e:c1:
         86:e3:ed:32:53:78:9b:52:f2:e7:c3:41:b1:67:13:07:ac:0e:
         1b:4c:d8:8f:7e:88:00:ab:10:70:f2:eb:ad:11:3c:41:6c:a3:
         d9:9c:8a:07
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICDuMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4
OEE0QTk5REEwHhcNMjUxMjMxMTgxNTA0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmM5ZS1hNzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPdhyPsVotKuofJ1ChW9YNkdwYIvq5Pc6YCeWx8Tpm7h9f6dlF7EK9taVr0E
Ly6iDmL5wXhfkeFbcpa4ycRW4woqkcXkvytP7N1gRsRrpZftMU763z/pTf8Ohn8l
ERPgcXQdw2pp+kWgJyNppIC6exR2Zj0HHMjOQ6JEOi9d7tGN5vSLkycao73pYg/k
1BQVbmWv7NUbtVxHsfofL01hwChpsJbBEqlVsYlckRVBBBYeO61Kb1MRuLdzZYvz
vfw02fj1LEuFjuu+s1Dhz+JZkrBENw5nt+V+Bj6hzTCBdJmVzoF+/wc4z+b+GJk6
HTYo9IShGtc5+lcBnR3sovJffwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAABKhM2
rFAgH3k6df8+NDxk7Gn3MB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2
QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlBREEvRkYzMjAxQ0VBNkIyMTFFOThEMkIxODYwQzRGOUFFMDIvQkJFMDc1QzY5
MDY5MTFFRjk3RkEwRDU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy1r9MA0GCSqGSIb3DQEBCwUAA4IBAQAskUVyyqm7T8gOqNFHn4Rj
a+dmN6cuMWmstgnqs9l656CwuP2quq6MscFAfEdSZbyNOK2x54uJ36yum+y4mePR
za3rvkWhYVZ7PqoCIJ/4d39ak9fGQk5L81PuNzBYYimoZcgHGmbA9G05d7/Epi2K
BK1OyomTC1B1H6TtW876j9QIpK08uQ75JwLMVxQrOINmQMe762kTQf8woIwkbary
cwEay4QCaBRBtMAPRcaiye9EVMC7M+v8y5TvS2koU6r/oek32pIHszXo0lKZqh7t
Tf8U4nugfsGG4+0yU3ibUvLnw0GxZxMHrA4bTNiPfogAqxBw8uutETxBbKPZnIoH
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:34 2026 by rpki-client