Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
File:                     2764AC08003111F18836FC08486F56BC.roa (raw, json)
Hash identifier:          yELvoRc3S+vHFcCwKMNPwYPmKbFYr2Z48ucu1l1HAEs=
Subject key identifier:   9F:62:E4:8B:C7:31:05:62:1C:E7:D9:22:25:DD:3D:F2:3A:17:EE:06
Certificate issuer:       /CN=A91DC897/serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
Certificate serial:       14
Authority key identifier: 6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa
Signing time:             Sun 01 Mar 2026 05:39:46 +0000
ROA not before:           Mon 02 Feb 2026 12:17:34 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     197569
IP address blocks:        151.158.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:34:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC897, serialNumber=6FBD05F630BE4410A9512CDB69A85CA37CE8C739
        Validity
            Not Before: Feb  2 12:17:34 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d121-95b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:61:0d:1b:1d:1e:95:43:20:45:8e:94:46:52:
                    ae:0e:d0:cc:7a:50:e2:02:72:04:cb:09:48:08:4c:
                    b7:b2:96:c9:c2:25:7e:19:fc:4a:ce:ef:0f:38:07:
                    29:3f:1d:53:6b:a3:6a:b0:c1:a1:7e:bc:a1:3a:d5:
                    f3:24:66:46:a7:06:a5:17:35:8c:fd:a9:84:10:38:
                    53:7b:41:10:37:e4:38:7d:9c:95:10:c7:a2:e1:8c:
                    ca:0a:80:68:08:67:fa:d0:67:d4:e1:d4:19:e1:8d:
                    11:96:c7:6d:5c:f3:85:f7:da:37:57:54:b5:48:65:
                    c1:3c:03:b4:9d:ab:c4:0a:10:6e:a0:05:66:e7:17:
                    18:05:f3:d1:c1:97:6c:b7:cf:c1:0f:a1:a7:14:e7:
                    17:e5:e8:97:de:e7:0e:85:06:c5:60:39:26:85:1c:
                    41:33:1f:8f:48:64:8d:f6:79:e0:f6:21:84:33:96:
                    f8:89:ba:53:c9:cc:52:8a:a1:a0:c1:a5:b3:e7:b0:
                    cd:dd:e8:e9:08:6a:0d:37:cd:b9:eb:00:ef:97:94:
                    96:1d:34:74:83:fd:8d:5c:d0:8e:30:0b:8b:35:c4:
                    3c:3e:59:19:2a:a6:0a:44:2c:cd:21:58:19:f3:83:
                    3e:88:be:f7:a8:2f:a6:19:8d:62:38:e4:9f:54:e7:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:62:E4:8B:C7:31:05:62:1C:E7:D9:22:25:DD:3D:F2:3A:17:EE:06
            X509v3 Authority Key Identifier:
                keyid:6F:BD:05:F6:30:BE:44:10:A9:51:2C:DB:69:A8:5C:A3:7C:E8:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/b70F9jC-RBCpUSzbaahco3zoxzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/b70F9jC-RBCpUSzbaahco3zoxzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC897/7F4E63EC003011F194A257AB476F56BC/2764AC08003111F18836FC08486F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.158.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:43:af:df:3c:b4:c6:6c:59:2a:67:4e:f1:0f:bf:91:7e:37:
         e5:11:07:e9:2f:3c:5d:1e:96:4e:2b:97:c2:e3:10:f8:3e:76:
         97:fc:eb:89:09:c9:79:73:2a:30:a7:25:a5:8e:55:db:9e:18:
         79:bc:cb:79:79:aa:5a:21:81:3d:c7:49:59:ba:c1:6c:8e:d1:
         cd:f5:20:a2:d1:a5:3e:af:5a:bc:c9:4c:2a:95:69:16:31:2b:
         8e:35:9a:58:ce:63:35:b0:aa:13:0d:69:9b:07:80:20:c6:9b:
         37:cb:d0:7d:45:89:01:3a:f5:93:d9:b4:25:5c:18:5c:20:ca:
         02:ee:84:e0:a2:dc:30:09:19:96:c7:e6:e6:b7:71:b6:a5:42:
         4c:18:e5:f5:90:3b:44:53:3a:34:71:e9:d5:6a:c1:c1:5a:0e:
         52:99:ff:eb:6b:e7:c7:2c:d1:5a:63:87:17:fe:32:63:13:44:
         b3:b9:8e:e9:25:ac:54:1b:94:fd:7e:95:0d:9a:5a:64:b4:6b:
         d3:35:df:aa:c4:76:06:02:92:2e:80:74:37:48:14:8e:1f:8a:
         30:2d:ef:a9:9b:14:7f:df:01:bc:bc:10:cb:ad:e0:72:8c:f6:
         8c:69:ae:94:ee:98:0c:93:55:d2:dd:ae:59:fb:11:06:f3:26:
         0b:46:77:5f
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
Qzg5NzExMC8GA1UEBRMoNkZCRDA1RjYzMEJFNDQxMEE5NTEyQ0RCNjlBODVDQTM3
Q0U4QzczOTAeFw0yNjAyMDIxMjE3MzRaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNkMTIxLTk1YjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCIYQ0bHR6VQyBFjpRGUq4O0Mx6UOICcgTLCUgITLeylsnCJX4Z/ErO7w84Byk/
HVNro2qwwaF+vKE61fMkZkanBqUXNYz9qYQQOFN7QRA35Dh9nJUQx6LhjMoKgGgI
Z/rQZ9Th1BnhjRGWx21c84X32jdXVLVIZcE8A7Sdq8QKEG6gBWbnFxgF89HBl2y3
z8EPoacU5xfl6Jfe5w6FBsVgOSaFHEEzH49IZI32eeD2IYQzlviJulPJzFKKoaDB
pbPnsM3d6OkIag03zbnrAO+XlJYdNHSD/Y1c0I4wC4s1xDw+WRkqpgpELM0hWBnz
gz6IvveoL6YZjWI45J9U5/ahAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUn2Lki8cx
BWIc59kiJd098joX7gYwHwYDVR0jBBgwFoAUb70F9jC+RBCpUSzbaahco3zoxzkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURDODk3LzdGNEU2M0VDMDAz
MDExRjE5NEEyNTdBQjQ3NkY1NkJDL2I3MEY5akMtUkJDcFVTemJhYWhjbzN6b3h6
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvYjcwRjlqQy1SQkNwVVN6YmFhaGNvM3pveHprLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Qzg5Ny83RjRFNjNFQzAwMzAxMUYxOTRBMjU3QUI0NzZGNTZCQy8yNzY0QUMwODAw
MzExMUYxODgzNkZDMDg0ODZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACXnlowDQYJKoZIhvcNAQELBQADggEBALdDr988tMZsWSpnTvEPv5F+
N+URB+kvPF0elk4rl8LjEPg+dpf864kJyXlzKjCnJaWOVdueGHm8y3l5qlohgT3H
SVm6wWyO0c31IKLRpT6vWrzJTCqVaRYxK441mljOYzWwqhMNaZsHgCDGmzfL0H1F
iQE69ZPZtCVcGFwgygLuhOCi3DAJGZbH5ua3cbalQkwY5fWQO0RTOjRx6dVqwcFa
DlKZ/+tr58cs0Vpjhxf+MmMTRLO5juklrFQblP1+lQ2aWmS0a9M136rEdgYCki6A
dDdIFI4fijAt76mbFH/fAby8EMut4HKM9oxprpTumAyTVdLdrln7EQbzJgtGd18=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:12:14 2026 by rpki-client