Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D166652A072211EF9AC24D5BC4F9AE02.roa
File:                     D166652A072211EF9AC24D5BC4F9AE02.roa (raw, json)
Hash identifier:          zxbZTAwiDX/b2GO6W1+ev4fZzno5bblpI3qcle69OTA=
Subject key identifier:   50:D8:51:81:DB:3F:D4:30:E1:43:75:21:3C:91:6A:ED:4B:5F:1A:BD
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       36F5
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D166652A072211EF9AC24D5BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:44:00 +0000
ROA not before:           Thu 26 Feb 2026 07:57:25 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150750
IP address blocks:        116.90.119.0/24 maxlen: 24
                          116.90.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:42:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14069 (0x36f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Feb 26 07:57:25 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a488f0-0e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:58:00:d2:b5:38:7b:cc:41:9e:f1:80:14:
                    a4:1a:c8:d3:51:87:20:7a:eb:99:ce:47:56:65:7a:
                    a7:84:f3:96:6a:22:eb:63:08:0b:68:51:b1:7f:08:
                    75:f4:3e:77:af:09:d1:37:24:37:3d:bc:84:21:12:
                    16:ff:c3:23:b0:ec:a8:56:33:89:3c:e8:f7:c9:77:
                    76:a6:03:61:ff:00:71:64:1c:10:ba:15:8b:dc:28:
                    b3:16:ac:d6:85:16:be:c6:ac:8b:2a:83:67:19:60:
                    23:5c:a0:ff:aa:d4:37:91:48:1d:33:69:78:06:33:
                    47:29:d8:15:09:d1:b0:05:5d:a3:1e:22:64:67:e1:
                    86:b2:c4:f7:6b:ca:04:e3:1e:15:d7:f5:d5:9e:7e:
                    01:0f:5e:f3:74:9c:ea:a1:44:21:ef:45:3a:e5:85:
                    05:f6:ee:b3:a9:ee:32:7a:d3:f1:8b:67:0e:a2:c5:
                    b3:7e:8a:c0:56:d6:22:57:25:3e:2e:55:1a:d9:9a:
                    1a:9c:a5:fc:e3:45:0c:5e:a0:8e:12:b3:b9:46:3d:
                    cd:04:5b:be:bb:7f:f5:c6:cc:2f:77:36:2b:cb:c3:
                    6d:d4:af:e2:19:2b:cf:12:25:b5:93:0d:a4:2f:18:
                    d2:5d:fd:10:0d:8c:0a:cf:22:27:3e:4f:24:24:aa:
                    66:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D8:51:81:DB:3F:D4:30:E1:43:75:21:3C:91:6A:ED:4B:5F:1A:BD
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/D166652A072211EF9AC24D5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.119.0/24
                  116.90.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:68:38:2e:59:9e:0c:35:41:cd:67:32:8c:ab:32:e2:62:d3:
         c8:09:f4:e8:0e:ac:ed:c5:8c:32:84:bf:58:4a:85:cb:05:1e:
         28:6a:c6:a3:70:2b:9a:e6:6d:93:30:09:d7:bd:19:01:ed:ee:
         65:05:5c:38:57:f3:98:06:cf:1a:51:f0:d9:9d:e2:24:ca:b3:
         c3:71:d7:f0:4c:21:14:fe:54:c1:ea:bd:d6:0d:d5:61:15:16:
         dc:70:d5:4c:c5:d7:16:4c:a5:cf:ff:27:0e:e2:91:44:7a:dd:
         07:93:7b:fb:55:20:f6:ec:92:39:6c:9e:32:18:25:3a:fb:49:
         ad:9e:91:4f:16:cc:a9:f5:38:1a:cc:60:2c:f6:49:c2:c2:5e:
         77:0f:9b:ff:99:af:bd:f3:8f:94:70:0a:ba:d7:2d:96:cc:21:
         2d:36:54:24:55:79:5a:99:a8:fe:fd:30:d9:fb:ab:19:8c:24:
         06:21:c0:61:02:5b:9c:99:99:ba:a8:f1:d6:96:de:69:42:aa:
         43:34:87:ea:d4:dc:f7:8e:2c:7f:5d:43:e4:da:11:c8:be:ec:
         af:54:e7:ae:4f:0b:3e:95:96:3c:b4:10:3a:3a:eb:21:ba:8a:
         04:02:e5:64:9e:e4:6d:03:b1:3a:6a:61:75:b0:0e:20:c2:77:
         4d:48:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:05 2026 by rpki-client