Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/F99F89E2AAC211EABF603A0BC4F9AE02.roa
File:                     F99F89E2AAC211EABF603A0BC4F9AE02.roa (raw, json)
Hash identifier:          PQw146eyKjPqxP/GNGS/hIkUi+lf/ZqFvVQElnQS1VQ=
Subject key identifier:   C5:6E:4E:98:A2:8D:E6:E3:4D:08:58:64:53:BC:D2:5F:57:42:23:17
Certificate issuer:       /CN=A91866D6/serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
Certificate serial:       0998
Authority key identifier: AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/F99F89E2AAC211EABF603A0BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:01:37 +0000
ROA not before:           Thu 22 Jan 2026 20:16:44 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55581
IP address blocks:        203.90.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl
                          rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:13:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91866D6, serialNumber=AE00C1A2C0342A715283544ED65B46186582F26C
        Validity
            Not Before: Jan 22 20:16:44 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a462e0-0156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b1:ba:21:1e:71:37:4c:dd:86:e5:cf:09:72:
                    67:1f:5f:2f:56:75:40:54:9e:15:aa:3e:05:e6:89:
                    3e:a9:c1:6b:5f:05:c4:1a:f1:cb:cb:69:4c:65:d3:
                    10:be:ec:17:64:0f:4e:38:0d:8b:9d:18:75:76:3b:
                    0f:a5:db:16:8b:51:c2:26:99:75:df:f5:7d:e1:73:
                    5a:03:e9:34:58:8e:52:24:7d:40:6f:5d:2d:57:22:
                    e7:89:e4:99:88:dd:09:69:e8:1e:8b:47:ff:52:75:
                    1e:fd:34:1c:32:a9:69:24:3f:ba:b6:cb:ab:4b:b0:
                    36:d5:0c:b0:76:d9:dd:d0:9f:c6:ea:f2:6d:e7:c8:
                    c5:6f:fb:b0:43:f6:07:50:e7:8d:ed:ff:4e:87:10:
                    3a:f8:97:89:e3:63:d8:17:84:79:74:68:6c:9f:1b:
                    f5:17:92:a9:c9:d4:08:87:be:37:c0:51:ec:fb:09:
                    ae:34:46:e7:66:c4:9b:0e:94:e7:91:e2:9c:9c:0d:
                    36:95:dd:72:39:d5:87:30:6d:33:41:63:49:94:9c:
                    0f:47:91:d2:99:08:4b:7f:a8:f7:df:e6:99:d1:fb:
                    65:f3:b8:7c:cb:e6:41:d5:88:fd:d6:10:d8:a8:ce:
                    e5:ff:b1:00:db:17:31:57:1d:9d:a1:8b:4a:ca:e5:
                    8e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6E:4E:98:A2:8D:E6:E3:4D:08:58:64:53:BC:D2:5F:57:42:23:17
            X509v3 Authority Key Identifier:
                keyid:AE:00:C1:A2:C0:34:2A:71:52:83:54:4E:D6:5B:46:18:65:82:F2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/rgDBosA0KnFSg1RO1ltGGGWC8mw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rgDBosA0KnFSg1RO1ltGGGWC8mw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91866D6/9A56CC2EAAB911EA94D6816BC4F9AE02/F99F89E2AAC211EABF603A0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.90.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:8d:88:f3:3d:3b:71:b4:5b:65:30:71:6a:66:7b:6b:22:
         15:08:d5:75:5f:5d:29:97:9b:03:41:3d:41:86:0c:65:41:02:
         9c:c4:83:c6:67:5a:a5:c3:b5:a9:fc:64:ea:0d:13:bd:38:e4:
         ce:5f:0e:fd:33:72:b4:98:e1:02:2b:b5:cc:00:6b:28:fc:53:
         1d:54:90:a8:e0:0a:e6:5b:91:e4:e0:dc:45:05:f6:0e:e7:0b:
         3c:7a:3d:7d:b7:0c:9f:8c:f1:4f:81:6a:3a:ec:b0:7f:bc:96:
         41:8b:fe:00:a0:e5:3b:5c:4b:45:53:95:4f:9c:22:87:8c:cf:
         ed:62:99:3a:a3:59:b2:0e:1d:83:a6:4a:eb:e8:8a:4b:f4:23:
         c0:22:be:c4:3a:27:f3:97:a8:cc:a4:81:0c:2e:8e:76:bb:31:
         1c:30:24:2a:d0:4e:97:6d:4c:ec:fd:9d:7a:5a:11:75:53:dd:
         e4:b2:db:a9:05:0e:5f:42:99:1a:2f:76:c8:a8:66:d1:d8:f4:
         6f:96:1e:a3:bf:b6:74:5b:bf:a7:55:8a:d0:e3:ab:b1:b8:76:
         de:92:63:70:1e:13:e6:74:09:ce:90:a5:95:00:26:4b:e7:77:
         3c:2b:c7:2e:b6:11:b7:ae:5a:d1:d6:d4:c0:0c:f1:27:ce:f9:
         5f:b7:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:45 2026 by rpki-client