Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/167FCE12844B11EA91F6956BC4F9AE02.roa
File:                     167FCE12844B11EA91F6956BC4F9AE02.roa (raw, json)
Hash identifier:          DKaRWb4HqD7WcaW5EDSzWhkJLODkBMCYiSZPO6Xa9Ro=
Subject key identifier:   02:D3:01:3B:59:71:74:A4:1A:D5:45:A7:24:7F:6F:BB:4E:3B:A2:03
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37A2
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/167FCE12844B11EA91F6956BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:28:57 +0000
ROA not before:           Sat 22 Mar 2025 15:01:22 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     9260
IP address blocks:        182.190.88.0/24 maxlen: 24
                          182.190.89.0/24 maxlen: 24
                          182.190.252.0/24 maxlen: 24
                          182.190.253.0/24 maxlen: 24
                          182.190.254.0/24 maxlen: 24
                          182.190.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14242 (0x37a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:01:22 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48568-e2d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:84:b6:0a:63:0b:74:b9:a6:d5:71:72:4b:
                    00:f6:73:e2:dc:17:83:d7:da:e1:fd:92:9d:c8:e1:
                    c6:26:b7:9e:03:1e:c4:1f:5e:29:98:00:4b:f6:0c:
                    99:5a:9b:3b:cd:77:0b:c6:1a:83:fc:1b:75:93:41:
                    50:f3:6b:81:65:48:57:9a:19:4c:f9:3e:68:a6:9a:
                    a5:a9:79:ec:98:d5:f2:f9:88:2d:51:35:88:83:c6:
                    07:2e:69:74:b5:08:b5:04:25:85:b5:6f:6c:1e:61:
                    db:5d:be:68:be:eb:ef:95:1d:1e:49:7e:b4:9d:99:
                    fa:ca:9c:ae:77:d1:78:3e:1d:70:27:56:2b:44:8d:
                    b8:48:a9:54:84:22:cc:63:38:aa:ac:a7:78:76:2b:
                    80:20:1d:ac:95:5f:1a:32:30:23:28:85:d4:a1:59:
                    31:51:88:7b:00:d5:01:31:a3:9e:09:54:d6:98:da:
                    bd:22:c2:67:3d:e4:26:b1:37:3b:f1:28:27:58:c1:
                    98:bb:59:40:69:72:d7:26:f5:ac:97:a9:8b:be:6c:
                    55:66:d4:33:8b:1f:44:ff:95:ef:88:54:bb:bf:9f:
                    a5:1e:61:18:3c:0d:dd:c1:ba:15:60:66:74:f0:64:
                    8a:2b:ef:a8:b8:6c:12:9f:82:ad:1c:95:e0:4f:e5:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D3:01:3B:59:71:74:A4:1A:D5:45:A7:24:7F:6F:BB:4E:3B:A2:03
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/167FCE12844B11EA91F6956BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.190.88.0/23
                  182.190.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:f3:92:6d:5c:18:ac:4b:4f:bd:38:51:79:95:d5:a6:59:ac:
         75:70:72:15:58:7f:d4:9f:ff:83:dc:55:30:19:db:17:46:cc:
         dc:ef:1e:33:79:1e:4e:5f:d3:ea:02:ad:cb:00:fe:80:52:6a:
         b9:c3:d7:ca:d9:b7:2a:91:ea:72:13:82:75:7b:cf:63:c3:4d:
         6a:af:e9:f2:38:42:21:e4:24:df:a6:38:f5:09:a3:c5:b6:57:
         b5:6e:c9:f9:1b:08:82:ae:40:99:54:66:95:21:6e:9f:6c:65:
         48:0c:c4:7e:8c:8e:b1:f1:fc:22:85:dd:d6:49:6f:70:ea:ae:
         d5:9c:93:64:fe:fd:e4:4a:79:da:1a:02:b0:9d:34:55:6d:2c:
         01:ba:88:98:67:19:45:2e:22:13:3d:c3:94:a9:76:82:0f:3c:
         dc:1a:87:a7:c0:95:d5:96:85:9a:bb:83:24:7b:67:88:99:77:
         8c:ff:65:89:c2:d7:94:3d:1f:e3:d1:d0:ef:31:f1:61:af:f9:
         93:6d:93:ec:3c:92:87:47:2f:df:13:5a:3a:02:2d:ae:4f:39:
         91:aa:c4:ed:c9:59:f4:c7:a1:c7:f9:d7:aa:fa:dd:5b:73:59:
         d6:83:50:d0:a8:e0:30:61:45:7e:51:a7:6e:03:6c:61:b9:b7:
         c7:a0:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:28 2026 by rpki-client