Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/682B76C05BB211E9BF474F16C4F9AE02.roa
File:                     682B76C05BB211E9BF474F16C4F9AE02.roa (raw, json)
Hash identifier:          3anwlMDODfaf5MLIS0BHlj7UtjNrSBoXQfLZ1YBXx/w=
Subject key identifier:   80:84:6A:65:19:F7:80:FA:48:30:28:F6:F3:49:12:AF:D6:18:26:4C
Certificate issuer:       /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
Certificate serial:       103D
Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/682B76C05BB211E9BF474F16C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:35:44 +0000
ROA not before:           Tue 06 May 2025 17:56:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     1828
IP address blocks:        69.94.96.0/24 maxlen: 24
                          69.94.97.0/24 maxlen: 24
                          69.94.98.0/24 maxlen: 24
                          69.94.99.0/24 maxlen: 24
                          69.94.100.0/22 maxlen: 24
                          69.94.104.0/22 maxlen: 24
                          69.94.108.0/22 maxlen: 24
                          207.189.168.0/24 maxlen: 24
                          207.189.169.0/24 maxlen: 24
                          207.189.170.0/24 maxlen: 24
                          207.189.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4157 (0x103d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254
        Validity
            Not Before: May  6 17:56:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42490-0681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:73:c9:34:58:ab:26:1c:b1:88:b8:38:a2:
                    b7:d8:52:b6:6d:b3:bc:56:14:92:9b:fd:4a:c5:bb:
                    d2:fa:59:ae:fc:fd:7d:18:31:49:f9:68:df:b8:bc:
                    27:4b:4d:3f:ad:a8:ef:3f:4f:a4:ab:88:84:1a:cc:
                    4d:74:46:0c:50:26:d7:da:59:59:eb:56:2e:71:4a:
                    8b:57:e7:4e:a2:aa:2a:f5:89:b3:50:41:84:54:1c:
                    e1:ec:eb:01:85:ee:3b:8a:1c:29:eb:2a:3c:2e:6b:
                    d9:2c:2b:cc:94:55:8e:5b:5b:a6:b5:6e:b1:fa:23:
                    bc:0b:0a:da:cd:b4:77:d7:be:7b:03:18:13:92:94:
                    09:f7:06:1b:30:24:b5:7c:25:07:56:fa:66:66:7e:
                    a8:4b:cc:6c:57:10:08:34:ce:ff:d4:ec:e1:22:07:
                    c0:ea:5e:bf:82:ae:24:97:c1:04:cb:eb:08:31:ac:
                    a7:00:de:6f:5a:cd:64:30:62:c8:4c:45:53:5f:d7:
                    27:3d:47:94:fc:d0:d3:61:66:e7:56:c6:b3:08:67:
                    0b:d7:b7:fe:cc:86:d6:1e:37:b9:72:cd:56:65:43:
                    98:86:c4:a4:dc:d7:7e:a1:b5:f4:38:d9:38:c1:55:
                    a2:8d:2a:5e:b2:28:b5:19:79:1c:f0:93:f9:05:fd:
                    ab:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:84:6A:65:19:F7:80:FA:48:30:28:F6:F3:49:12:AF:D6:18:26:4C
            X509v3 Authority Key Identifier:
                keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/682B76C05BB211E9BF474F16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.94.96.0/20
                  207.189.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:5c:aa:da:c1:f7:8d:52:a7:81:dd:e0:c1:8f:c1:d7:70:85:
         43:b1:71:27:89:dd:ae:43:29:be:9c:54:9b:03:3a:b4:05:aa:
         cf:5b:7f:72:9f:be:49:53:3b:69:86:39:42:6e:d0:5a:70:e7:
         89:68:75:cf:1c:5f:5a:36:01:a8:70:e3:eb:d6:36:3b:64:ef:
         ba:c1:55:63:13:2d:1f:fa:ee:3e:34:b1:17:cd:22:37:c8:3a:
         b0:44:7d:cc:d1:1f:9a:51:3c:9b:d4:5d:50:b9:3e:c1:5a:00:
         03:2e:01:c3:55:bc:3c:8d:57:1d:c3:f9:a2:0c:04:a0:ef:c1:
         37:fc:5f:92:bc:04:39:fe:ba:f5:a7:2a:90:46:8f:6c:d5:41:
         0f:78:00:30:cf:51:c2:9c:73:32:ab:89:2f:78:67:62:3a:b9:
         a8:43:1e:96:83:da:4e:d6:4d:1d:7b:08:4a:02:bc:de:db:f1:
         92:e7:e8:f4:5b:5f:df:c5:94:93:8d:fd:43:77:2a:13:cf:a9:
         ed:80:6e:a5:f8:fe:4d:bd:92:64:78:13:24:d0:e4:f5:11:bd:
         d7:33:64:12:a2:f7:1e:7f:a1:c5:d4:d0:c3:a4:14:82:69:83:
         92:05:f5:98:f3:ce:ef:37:bc:ff:4f:06:d1:81:a5:1d:a5:8e:
         30:94:1e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:57 2026 by rpki-client