Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa
File:                     BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (raw, json)
Hash identifier:          9Vskvqmdmvz+Aot+UciMJyoJ7hB1RWrR9/LyiS2Awus=
Subject key identifier:   01:37:91:E1:04:70:1B:DD:E2:C5:B5:FF:1F:5A:6A:22:9E:27:3A:8B
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3799
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:28:49 +0000
ROA not before:           Sat 22 Mar 2025 15:01:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149844
IP address blocks:        182.189.92.0/24 maxlen: 24
                          182.189.93.0/24 maxlen: 24
                          182.189.94.0/24 maxlen: 24
                          182.189.95.0/24 maxlen: 24
                          182.189.96.0/24 maxlen: 24
                          182.189.97.0/24 maxlen: 24
                          182.189.98.0/24 maxlen: 24
                          182.189.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14233 (0x3799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:01:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48560-9e04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e2:76:40:de:37:d1:d8:c0:61:7f:de:43:e4:
                    d3:12:ce:98:ef:a3:b6:c9:d6:cf:ca:e4:65:7a:5a:
                    d5:44:45:62:b3:f6:8c:a7:7b:5a:a9:05:b8:e5:79:
                    0f:78:64:33:6a:ca:ee:39:f8:c0:62:7e:8e:b7:a9:
                    b0:51:ba:7f:0e:a3:67:fc:20:3a:42:35:2d:ac:47:
                    3c:d5:07:bb:e9:ed:a6:2f:ad:fe:4e:ea:b6:80:a3:
                    07:e7:1a:c9:71:60:e2:e8:4d:79:2f:32:1f:10:d9:
                    a5:4c:8d:a2:05:de:4c:2f:ee:71:e9:67:d3:7a:64:
                    97:3e:96:61:fd:e9:18:30:6d:82:79:e1:2f:fc:ca:
                    aa:74:99:73:91:3b:7a:02:1a:40:7c:ff:b7:05:ac:
                    7d:bb:ce:6d:f8:14:d0:dd:ea:81:a4:e0:86:cd:2e:
                    0c:3d:1b:51:92:fa:7c:26:46:fe:87:13:11:46:1c:
                    40:71:a4:ce:f2:2d:f2:b2:e3:1c:59:cb:62:d3:42:
                    0b:d5:97:b2:c9:0c:24:a3:b5:3d:7a:41:45:bb:40:
                    d6:7e:02:9c:b4:84:51:91:d5:c9:2e:1e:7c:c4:7f:
                    8b:23:f5:c0:6e:9f:fd:3c:7a:c4:42:69:69:c4:1c:
                    4b:6b:90:6e:85:73:2e:3d:6a:53:93:a6:16:94:e4:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:37:91:E1:04:70:1B:DD:E2:C5:B5:FF:1F:5A:6A:22:9E:27:3A:8B
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.189.92.0-182.189.99.255

    Signature Algorithm: sha256WithRSAEncryption
         a7:43:1c:db:8a:54:ed:8d:e9:ec:eb:41:95:90:4a:2e:fd:e1:
         fb:e0:fb:ad:5a:40:ab:54:8a:ba:b5:58:f8:1b:ad:18:4f:78:
         04:c4:7b:81:19:4d:9e:50:45:b6:e7:da:8a:08:f9:e0:8b:4c:
         c8:a0:eb:dd:b6:ea:a2:84:86:c0:0f:66:96:7e:96:45:16:7b:
         1d:ec:10:02:16:00:24:20:e0:00:6a:e8:a0:fe:3c:d2:f7:35:
         f5:c2:5b:f7:58:9d:1f:17:71:46:14:70:9a:99:95:d7:c1:5e:
         ec:5c:f8:5d:45:f2:0a:ec:23:6b:58:84:dd:76:37:81:43:d2:
         89:40:e3:40:a0:01:b8:4d:da:1a:a1:5c:26:d9:2b:fc:5d:f1:
         fa:71:03:f2:4e:19:8d:35:c4:b7:cd:44:f3:14:5d:d9:1c:bd:
         e2:00:cc:28:9b:8f:a9:37:d1:cf:1b:dc:83:e1:07:c6:6e:d6:
         cf:64:e0:ec:bb:e9:85:23:10:67:cb:6e:b9:f8:9a:1e:b4:3c:
         38:8b:a5:b4:ec:53:95:9d:52:bb:9f:94:23:cc:de:fa:86:31:
         60:86:5b:a9:d7:1e:22:d3:94:eb:fc:63:13:96:9f:a9:df:d3:
         74:50:09:a0:43:9e:06:ef:5d:d2:ad:cc:50:f9:f9:d6:d2:95:
         7d:70:b7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:14:12 2026 by rpki-client