Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa
File:                     BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (raw, json)
Hash identifier:          4+fNNlvJO8/zUbQ29LqDl04P63xI45pAflNJ0VsGVsA=
Subject key identifier:   DC:8D:09:83:BE:02:C3:61:09:A1:D9:B4:A5:98:75:D5:5E:0E:4E:7A
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       37DD
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa
Signing time:             Thu 16 Apr 2026 15:14:46 +0000
ROA not before:           Thu 16 Apr 2026 15:14:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     149844
IP address blocks:        182.189.92.0/24 maxlen: 24
                          182.189.93.0/24 maxlen: 24
                          182.189.94.0/24 maxlen: 24
                          182.189.95.0/24 maxlen: 24
                          182.189.96.0/24 maxlen: 24
                          182.189.97.0/24 maxlen: 24
                          182.189.98.0/24 maxlen: 24
                          182.189.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:15:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14301 (0x37dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Apr 16 15:14:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e0fce6-e3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:ee:7d:4c:65:0f:13:95:86:01:bd:51:f9:
                    df:7a:e1:86:fe:da:e9:c4:c6:98:d8:80:dc:09:e6:
                    3b:13:75:62:9e:01:a2:cf:96:db:8e:0a:5b:c7:55:
                    d7:23:25:8c:6f:5f:b5:d5:b3:a1:f8:ef:23:b5:4c:
                    af:bc:41:f8:42:67:e5:d0:80:88:66:3f:5a:56:a0:
                    db:93:74:fe:4e:1f:23:de:90:ac:ec:0b:ff:13:59:
                    fd:90:19:1d:88:60:0a:3c:99:90:f4:9a:54:ec:08:
                    02:aa:3e:ff:3c:1e:04:1f:5f:f8:0c:90:cf:f3:ed:
                    a7:5f:c7:71:51:ee:e3:85:4c:61:02:73:8d:10:7f:
                    6e:94:f6:91:5a:ef:08:68:79:44:15:94:ef:44:f1:
                    8f:06:8b:ef:a1:17:f7:d6:2a:ac:a0:23:d4:49:79:
                    a9:56:36:78:85:99:1e:fa:ab:d3:a1:8b:13:5c:b8:
                    df:bd:90:50:f5:6b:e1:e1:4e:17:36:55:c6:82:91:
                    2a:92:7b:8c:a9:a4:47:81:54:75:e6:c8:75:40:31:
                    e5:0a:8d:15:7c:27:58:97:1b:31:4f:c3:2e:ee:0e:
                    23:7d:6c:e6:df:be:06:ca:5f:36:e1:cf:f7:5f:99:
                    95:ce:22:8c:75:1a:ab:fa:de:dd:b8:39:14:1e:12:
                    0d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:09:83:BE:02:C3:61:09:A1:D9:B4:A5:98:75:D5:5E:0E:4E:7A
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.189.92.0-182.189.99.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:19:90:af:a1:47:5d:72:14:00:4b:6e:b0:ed:4d:05:ee:b1:
         48:4d:2b:00:0c:81:89:87:b0:1c:76:cc:0b:4a:dd:27:da:b1:
         0b:ec:6a:00:75:89:72:d0:85:a4:39:1f:bd:fb:66:fe:a6:d5:
         ae:08:8b:ea:45:01:11:48:65:16:b2:78:71:13:d0:36:8b:8b:
         73:a1:10:98:77:d2:00:a7:7f:71:e2:09:23:13:46:1d:51:2b:
         93:b3:55:70:b9:96:04:31:d7:80:48:2e:b5:4c:3a:08:6a:4b:
         7d:2a:72:6f:80:31:58:81:5c:53:a9:b1:4f:d7:e7:bc:28:c4:
         21:91:0d:03:79:58:16:54:e3:d7:1a:b9:43:6f:6a:57:46:63:
         b0:0b:fc:2c:91:b7:d0:c8:95:56:d5:a4:ed:ba:b2:2f:99:11:
         01:a8:79:90:84:af:a8:3d:e9:bd:40:44:1e:ab:aa:80:e7:db:
         8f:1c:94:f0:12:06:02:08:12:b6:7a:ce:8a:49:5e:d2:3a:70:
         fe:10:d0:f4:e8:0e:95:64:f9:a6:43:a5:12:aa:05:e2:c1:3f:
         ea:4f:84:fc:88:18:28:a1:ea:88:54:42:8d:62:66:4d:13:bc:
         9a:08:dd:7e:bc:0e:ea:2f:3a:05:5f:b5:3e:a8:21:89:b1:4e:
         60:86:c9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:50:05 2026 by rpki-client