Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
File:                     BB9C14F6AA5511EB86F34077C4F9AE02.roa (raw, json)
Hash identifier:          n0M+4sPO2I1QxTqzwDfkxMGQeXxQFFjm9haxwLReuy4=
Subject key identifier:   F4:A4:61:3B:FF:A1:CA:F4:40:DB:F2:C8:12:48:2E:87:4F:C3:BD:8E
Certificate issuer:       /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
Certificate serial:       0803
Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:23 +0000
ROA not before:           Wed 28 Jan 2026 22:18:36 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24112
IP address blocks:        166.81.6.0/24 maxlen: 24
                          166.81.62.0/24 maxlen: 24
                          166.81.63.0/24 maxlen: 24
                          166.81.83.0/24 maxlen: 24
                          166.81.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl
                          rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8
        Validity
            Not Before: Jan 28 22:18:36 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a484cf-eb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:74:98:02:bf:4b:0e:e9:e7:a2:a2:88:6e:70:
                    d0:88:53:df:54:85:1d:24:51:52:87:b7:60:bc:0a:
                    6b:bc:a0:df:08:04:54:2a:4b:cc:aa:b7:19:98:70:
                    ca:17:68:34:8d:5c:e5:ad:db:8f:72:5b:0b:0a:d4:
                    bd:b9:6e:c0:d6:33:2c:7c:b8:dd:5c:dd:42:6e:bf:
                    3b:c7:c7:b7:c1:ef:a6:e4:f5:e4:c3:63:68:ae:31:
                    55:33:1c:cb:99:9e:0a:f6:43:99:1e:0b:c9:1a:69:
                    36:eb:44:bd:cb:d8:f2:9b:35:e0:9b:58:d0:9e:cd:
                    be:92:ae:8e:ec:f0:c1:04:93:09:7e:24:66:7f:b4:
                    44:ba:ba:6a:f2:12:30:4d:22:7f:81:09:a5:be:39:
                    28:d0:f8:4c:e6:28:9f:85:76:02:3f:ef:0a:ff:95:
                    ab:e1:a4:cb:e0:46:3a:19:25:a0:c1:0a:3b:24:70:
                    5e:5d:8b:8f:71:ae:c8:0b:30:32:2c:d9:97:7f:b3:
                    fc:71:73:fb:c5:38:36:85:f6:f5:76:d7:6c:5f:90:
                    cf:1d:14:3d:a2:6a:aa:78:d6:f7:1c:3d:81:8a:d4:
                    78:d4:19:e1:f5:26:1c:fc:bd:40:b1:4d:2e:7c:8b:
                    56:76:ed:bb:3d:7a:42:3a:14:79:b2:66:0a:a9:8b:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:61:3B:FF:A1:CA:F4:40:DB:F2:C8:12:48:2E:87:4F:C3:BD:8E
            X509v3 Authority Key Identifier:
                keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/BB9C14F6AA5511EB86F34077C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.81.6.0/24
                  166.81.62.0/23
                  166.81.83.0-166.81.84.255

    Signature Algorithm: sha256WithRSAEncryption
         40:1e:44:7d:23:9d:8c:5e:4e:17:1f:fc:8a:1d:d6:58:19:03:
         a8:2a:8c:8e:7f:dd:6f:77:93:b2:65:16:3d:49:b4:1b:00:7b:
         08:a0:26:9c:91:e3:0c:3b:95:df:f9:cf:26:f9:c3:cc:4f:95:
         95:58:03:41:0a:57:f0:1f:9f:43:23:d6:c7:55:4a:b4:01:6d:
         c6:48:c9:ca:2a:74:f3:83:af:a1:de:c0:fd:55:9a:58:cd:12:
         49:04:95:ef:b7:50:02:28:c0:2e:c7:96:35:8f:7f:cd:7e:ec:
         f8:e4:f7:d7:a2:64:32:83:f5:33:5e:02:a1:93:47:c6:32:c8:
         83:42:d2:5b:60:6f:1f:08:56:12:7b:e2:40:7c:c0:9a:e6:9b:
         7b:91:fa:d4:c0:72:f9:47:28:54:77:5c:4e:33:d2:9f:27:11:
         ec:45:c7:b1:f9:fe:7e:ae:60:15:6f:0e:5b:e2:f8:e4:86:0f:
         7e:5b:bd:34:0b:ae:51:c4:d3:2c:9d:a1:8b:5e:3f:95:8d:a6:
         dc:88:fc:6e:17:0f:d5:15:3a:fa:6f:e1:f6:52:eb:3e:1e:83:
         07:26:9e:5e:5c:d9:c6:ab:44:4d:c0:6a:ff:26:a0:6d:79:55:
         ab:0e:6d:a9:ed:a8:77:8d:a1:c3:93:8b:92:e3:fa:5a:7c:5e:
         4a:b3:c6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:23 2026 by rpki-client