Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa
File:                     EE8CD88EEA5A11EF922B276DC4F9AE02.roa (raw, json)
Hash identifier:          hBcnC5PFlnMmxlDxFJ5KaA+un9OP3sAitrTcxqtGxZY=
Subject key identifier:   21:A4:37:BC:FC:23:04:CA:E5:E1:4A:DE:FB:5F:A8:AA:49:5D:CB:20
Certificate issuer:       /CN=A91A91CB/serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
Certificate serial:       C9
Authority key identifier: 56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:16:33 +0000
ROA not before:           Wed 21 Jan 2026 05:25:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        160.250.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=56520FA1D76E95F0819B6DDD4967B4550469869D
        Validity
            Not Before: Jan 21 05:25:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a42011-bd23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:8a:71:69:11:b2:26:cf:8c:ea:9b:25:9c:
                    83:84:94:75:22:9d:05:15:42:74:6e:d5:cd:9a:f5:
                    fd:e9:c4:f5:ef:93:6d:28:33:76:fe:75:d8:a2:c3:
                    16:a9:40:be:a3:58:a6:a4:a3:8d:de:09:cb:d2:ec:
                    dd:2a:15:42:2c:98:36:0b:b6:c0:ff:b5:cc:e8:3a:
                    d1:9a:57:d0:4f:3e:20:d2:00:b6:c1:0f:e6:84:5f:
                    3e:10:bc:18:37:cf:9e:3c:dd:7e:85:06:c1:c3:8c:
                    6c:c1:55:d1:d7:2a:0c:d5:9f:a6:ec:0a:3e:e4:83:
                    aa:bb:71:26:d9:ce:94:77:6e:88:69:2f:05:58:61:
                    95:65:97:50:92:b6:f5:c5:c6:0a:e0:a1:8b:37:75:
                    43:d1:93:68:ab:18:b3:7a:ca:0b:df:ce:f0:6b:06:
                    23:da:03:1f:db:ae:22:7a:15:4a:9e:9b:b1:b3:2d:
                    15:8f:e4:da:be:f0:75:f2:88:0d:e6:47:60:19:c5:
                    ba:ff:30:61:6a:0a:9d:a4:6e:00:ce:2a:98:29:ab:
                    b3:7f:e9:bb:4f:80:af:ef:0f:eb:35:f3:67:ca:df:
                    a7:2e:d7:bc:50:89:d1:12:e8:7b:0d:27:c9:b1:63:
                    ce:cf:f5:8a:2a:f6:a0:95:54:52:69:00:bf:e4:0d:
                    86:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A4:37:BC:FC:23:04:CA:E5:E1:4A:DE:FB:5F:A8:AA:49:5D:CB:20
            X509v3 Authority Key Identifier:
                keyid:56:52:0F:A1:D7:6E:95:F0:81:9B:6D:DD:49:67:B4:55:04:69:86:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/VlIPoddulfCBm23dSWe0VQRphp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VlIPoddulfCBm23dSWe0VQRphp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/5B6FA360EA5A11EFB84AE468C4F9AE02/EE8CD88EEA5A11EF922B276DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:94:d4:3e:73:d0:53:13:a7:c3:d7:9d:06:59:94:4e:25:33:
         57:db:b2:94:36:3e:78:c8:aa:32:df:9f:58:5a:dc:6b:62:f3:
         7e:0a:64:27:9b:31:99:5d:04:be:f0:9b:e4:85:d7:04:f7:e6:
         28:1f:08:14:8a:0f:86:f3:20:8c:7d:37:fd:cc:f5:6f:94:da:
         57:9b:57:ef:5f:cf:c4:5e:1a:20:48:23:4e:8b:c1:eb:8b:81:
         3e:d9:70:7c:38:95:c8:06:d9:93:b9:d8:af:f7:74:e7:b1:31:
         03:5d:69:54:76:0c:7b:d5:d6:85:3f:c0:1c:c0:20:55:75:5a:
         3f:32:42:1c:73:68:e9:1d:35:5e:1c:09:97:f6:ec:cc:2c:a7:
         8f:f5:29:7a:b1:9b:36:5c:52:1b:fa:47:2d:06:a3:c0:9a:65:
         2a:c4:e8:39:c8:a0:60:c8:29:0c:e4:72:74:64:ac:7c:e4:55:
         9d:91:2e:02:2e:22:39:92:71:4e:f4:f8:08:03:56:04:6f:e1:
         50:c3:7d:a2:e6:5a:84:e0:cf:62:bd:39:f2:9e:af:f9:ba:6c:
         5e:53:d9:65:29:36:4e:e5:62:97:ba:53:8d:4c:bd:65:e8:f7:
         f7:62:18:4c:6c:09:7b:45:40:9e:7a:f3:6c:78:87:8e:0e:ff:
         4e:19:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:32 2026 by rpki-client