Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/3698C9BA484A11F0B96B9D10C4F9AE02.roa
File:                     3698C9BA484A11F0B96B9D10C4F9AE02.roa (raw, json)
Hash identifier:          0vz5hH8Qi0mQ8l4HL29D2PA4e6vODvqozBm3+6JiuQo=
Subject key identifier:   F1:BB:43:44:CE:DE:E8:28:91:84:3A:48:F6:B2:4D:1E:5A:65:E2:08
Certificate issuer:       /CN=A91E2EFF/serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
Certificate serial:       87
Authority key identifier: 06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/3698C9BA484A11F0B96B9D10C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:08:16 +0000
ROA not before:           Fri 13 Jun 2025 11:33:23 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     147180
IP address blocks:        165.99.184.0/24 maxlen: 24
                          165.99.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:55:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EFF, serialNumber=06CB48F57D543A9782D8A7C96DA4E1DEDBC3C30B
        Validity
            Not Before: Jun 13 11:33:23 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3e5e0-38a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:59:a5:9d:4b:cb:d8:3f:ce:b6:fd:29:85:
                    ce:5d:7a:51:02:b4:c0:c8:14:f8:ef:bc:39:0e:37:
                    4d:7f:ad:3e:e1:92:51:46:7a:86:54:a5:0c:e0:3e:
                    f3:a9:1c:3c:e2:03:46:e0:35:22:4d:04:df:f2:2c:
                    87:0c:17:7b:7a:45:7a:a5:88:ff:26:2c:00:1a:4f:
                    47:ac:0d:8c:24:4f:6a:27:28:e6:63:63:ba:6b:f1:
                    3a:60:06:8d:6e:aa:b8:ce:9f:04:04:df:41:62:4c:
                    09:d4:59:3e:4d:b8:69:8c:e6:99:20:e0:92:bd:63:
                    b5:83:34:6d:c7:9a:44:59:6b:9d:09:da:ec:fd:99:
                    25:1c:eb:ee:0a:f8:7b:41:67:2f:5c:10:6a:1a:53:
                    29:f7:bd:89:02:26:70:0d:22:62:15:76:77:93:60:
                    b7:11:d9:d5:e7:d9:73:e3:98:ce:4c:62:ab:48:4c:
                    ef:f6:7d:b4:14:9e:c3:c4:36:7e:28:6d:49:30:d9:
                    24:80:42:f3:4d:bc:42:7a:85:75:03:7e:79:ce:0e:
                    81:76:b9:de:31:4d:f9:d5:da:ad:44:e8:40:86:c9:
                    66:e6:15:b3:2b:3a:76:35:43:5a:5e:ef:6e:15:3d:
                    ef:ae:b5:6d:83:8f:7d:18:a0:71:00:ea:ed:5e:5a:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BB:43:44:CE:DE:E8:28:91:84:3A:48:F6:B2:4D:1E:5A:65:E2:08
            X509v3 Authority Key Identifier:
                keyid:06:CB:48:F5:7D:54:3A:97:82:D8:A7:C9:6D:A4:E1:DE:DB:C3:C3:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/BstI9X1UOpeC2KfJbaTh3tvDwws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BstI9X1UOpeC2KfJbaTh3tvDwws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/A314847C484911F0BF070370C4F9AE02/3698C9BA484A11F0B96B9D10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:6c:0f:3c:9c:ab:de:cd:4e:a3:7c:8a:e4:38:81:71:a0:
         fa:02:57:33:1c:86:ad:0f:a0:44:3f:e5:85:4c:ca:df:de:9a:
         ff:37:4e:36:db:85:bd:e9:fc:26:48:94:5a:29:ec:83:53:06:
         11:a6:77:0e:5f:53:2f:a5:47:59:a1:e6:2c:5f:5d:f6:55:9f:
         1f:ce:e2:b3:56:3a:bb:a7:86:8f:66:39:8f:d5:5a:bb:d3:63:
         2b:35:78:8c:22:11:d9:b3:01:99:05:8a:80:0c:c6:89:15:b0:
         05:d7:58:d0:3d:5c:59:7e:e9:3e:83:a5:60:ce:0a:4a:ba:e2:
         e9:31:81:71:72:c6:2e:d3:8b:fd:66:67:76:40:f0:2a:9e:65:
         95:20:0c:5b:e9:b6:f0:54:f7:eb:62:d4:58:27:bf:5d:5d:88:
         d1:3a:7f:0e:c9:8b:96:cd:d5:53:a1:f7:68:ef:6a:ba:0d:f2:
         65:8a:74:d9:46:fd:23:29:a7:03:6f:9b:ac:eb:0d:29:50:5a:
         e0:6c:6d:2a:ba:17:e6:1a:f9:ff:b1:c1:82:5e:6b:7f:61:c0:
         5a:46:ad:49:cf:2a:dd:f2:b2:2b:34:05:4f:1c:59:81:fe:57:
         4f:d9:72:4f:c0:6d:79:be:33:a3:97:f8:3b:8f:28:92:98:71:
         83:01:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:00 2026 by rpki-client