Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/30CB9694A28911ECBC355360C4F9AE02.roa
File:                     30CB9694A28911ECBC355360C4F9AE02.roa (raw, json)
Hash identifier:          23FlzfUUG2o+yV463/MzqJtyKQ1WBczJHj5IsGh6xFI=
Subject key identifier:   BA:B1:61:A4:2C:69:9D:62:EC:60:92:44:25:F0:49:E0:DD:B2:DF:4E
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       0806
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/30CB9694A28911ECBC355360C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:26 +0000
ROA not before:           Wed 28 Jan 2026 22:18:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     4755
IP address blocks:        166.81.51.0/24 maxlen: 24
                          166.81.52.0/24 maxlen: 24
                          166.81.54.0/24 maxlen: 24
                          166.81.55.0/24 maxlen: 24
                          166.81.56.0/24 maxlen: 24
                          166.81.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 28 22:18:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a484d2-1c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:9a:52:09:3b:2b:45:cf:7b:b8:3c:1c:07:
                    31:a7:72:4f:7b:7c:fe:b8:92:94:38:34:b8:52:16:
                    ac:19:c0:cc:dd:e9:37:f3:55:b9:7c:d9:75:54:b1:
                    d8:e0:fe:dc:b3:7b:3f:93:71:0a:c4:f6:77:7f:89:
                    fa:99:b8:43:48:fd:93:64:19:d8:ad:6e:2d:f2:f7:
                    56:61:fc:ca:84:c0:38:35:29:fb:0b:78:36:ad:c0:
                    d1:88:63:37:58:4b:ea:17:05:e8:98:cc:9d:87:e7:
                    8f:e8:4d:a6:72:4f:77:4f:f2:02:4e:70:a7:49:16:
                    3a:3c:cd:a5:03:71:3a:f5:be:d3:69:bd:d0:cf:a7:
                    5c:ca:f1:97:b1:90:ea:b3:76:b2:05:82:e1:c0:ec:
                    18:fe:a8:4b:15:98:07:d8:2d:73:1e:07:cf:d3:62:
                    94:e1:f6:81:06:62:a0:13:02:f5:39:2c:b6:e1:e9:
                    05:00:0d:b3:d3:ce:33:0a:72:e8:ea:24:be:ab:a5:
                    51:07:79:b8:a1:f9:97:91:26:55:07:e6:a3:81:8a:
                    a1:4f:27:d1:66:29:42:ce:da:c0:e1:47:0d:e8:fc:
                    84:c1:2a:85:70:f4:f8:38:49:11:3e:be:90:6d:04:
                    03:66:3a:81:84:0f:b0:fc:08:68:e2:4a:ef:5f:5e:
                    a4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B1:61:A4:2C:69:9D:62:EC:60:92:44:25:F0:49:E0:DD:B2:DF:4E
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/30CB9694A28911ECBC355360C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.51.0-166.81.52.255
                  166.81.54.0-166.81.57.255

    Signature Algorithm: sha256WithRSAEncryption
         7e:ba:55:c4:a1:04:b8:6b:37:28:d7:99:9a:4d:40:c1:19:39:
         59:62:a8:76:45:b9:ed:71:1a:67:49:76:13:16:75:a1:9b:5a:
         fd:23:23:29:f8:de:ba:26:ec:95:f9:c6:52:3d:71:1f:d1:52:
         36:2d:73:4b:ab:af:cb:16:21:61:18:da:1e:5a:9f:4d:b5:2f:
         3a:1c:c1:a4:c0:98:e4:e9:cc:85:74:dc:14:84:31:7d:dd:d9:
         67:c5:fb:ce:b2:cb:44:6e:5a:95:50:e3:a3:c8:60:12:c2:62:
         92:94:1e:b8:fb:77:c9:54:0d:72:94:6e:3d:4a:c7:ad:45:36:
         e9:bd:ad:5a:be:41:e6:d5:fa:8c:b5:08:dd:80:f7:47:e7:e4:
         93:ce:3a:51:67:b3:2b:da:6c:1b:5f:1d:59:6b:d1:62:f6:e4:
         b0:88:83:2b:dc:17:ed:f6:7f:22:32:a8:20:80:34:1a:f3:b5:
         66:be:42:f6:c7:d2:d5:b5:db:ef:1b:ff:b7:24:0c:e9:0a:4e:
         64:ff:e3:11:b7:bc:09:ab:d5:8d:3a:59:12:8e:3f:84:5c:eb:
         8c:19:45:4a:a1:7e:73:a3:53:b3:4b:98:36:92:6c:a6:bd:35:
         00:ff:29:93:ea:3f:64:85:f5:a3:69:95:d5:9d:7b:79:7c:55:
         34:a1:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:23 2026 by rpki-client