Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/6A3BD41C38DF11F09B694578C4F9AE02.roa
File:                     6A3BD41C38DF11F09B694578C4F9AE02.roa (raw, json)
Hash identifier:          FSkjWAWTa54qCMggaTkYI4c6Mh5lfB4HTHFZ2BdMRV0=
Subject key identifier:   53:0C:6D:DF:18:89:54:D5:5D:31:E4:0F:7E:94:6B:C8:FC:83:09:FB
Certificate issuer:       /CN=A91F1962/serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
Certificate serial:       92
Authority key identifier: 87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/6A3BD41C38DF11F09B694578C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:06:30 +0000
ROA not before:           Sat 24 May 2025 20:41:06 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153902
IP address blocks:        165.99.88.0/24 maxlen: 24
                          165.99.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl
                          rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:47:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1962, serialNumber=87FA484489DAED7DCEE660C78D87BA2CC1ADAA62
        Validity
            Not Before: May 24 20:41:06 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3e576-bbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:23:44:ab:b0:fc:f9:f5:c2:f1:f5:96:bb:61:
                    52:c9:ab:c1:1e:b2:49:cc:6b:23:b2:4d:d4:4e:92:
                    c8:68:78:d2:31:10:bc:1d:05:af:c4:69:d2:1b:49:
                    73:8d:8c:3f:53:15:ee:35:3c:95:94:97:26:04:48:
                    aa:2f:6b:03:33:b8:93:b6:b7:af:a3:60:8d:c2:98:
                    aa:7c:0c:36:bb:55:c4:56:d0:ba:da:94:a2:65:ca:
                    20:2b:a4:0e:be:1b:d5:4c:dd:6c:03:24:31:ce:6f:
                    d7:8b:ef:af:62:9b:69:11:32:e8:c9:6a:0e:9d:19:
                    90:7e:2e:26:de:bf:b2:cb:70:0c:ed:95:b5:bf:1b:
                    28:6a:c2:10:dc:4c:c1:8b:78:9c:25:f9:2e:6d:4d:
                    d7:36:73:b6:9a:fc:af:d9:1f:09:95:03:6a:85:bc:
                    90:e3:c3:23:43:85:5c:48:06:89:47:4d:43:8a:36:
                    2d:ed:36:55:13:31:13:c4:44:7e:f7:87:6f:3c:e8:
                    05:1e:cc:95:9f:f3:71:4f:9d:df:bf:51:4d:fb:f4:
                    e1:1c:a6:cd:14:d3:d1:83:e6:2a:70:a5:1f:5e:eb:
                    29:bd:76:f4:ab:e4:38:61:d4:e6:10:88:e7:75:61:
                    c1:f8:66:66:67:60:d8:96:2f:b7:74:d0:9d:61:60:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0C:6D:DF:18:89:54:D5:5D:31:E4:0F:7E:94:6B:C8:FC:83:09:FB
            X509v3 Authority Key Identifier:
                keyid:87:FA:48:44:89:DA:ED:7D:CE:E6:60:C7:8D:87:BA:2C:C1:AD:AA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/h_pIRIna7X3O5mDHjYe6LMGtqmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/h_pIRIna7X3O5mDHjYe6LMGtqmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1962/AEBC08FA371311F0AB0D9E4EC4F9AE02/6A3BD41C38DF11F09B694578C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:b4:57:10:0b:9e:2a:35:69:e6:4c:c5:07:25:3b:4d:c7:3b:
         77:5a:1d:cb:66:2e:9c:3f:3d:f4:f7:50:16:53:d9:14:9e:fa:
         af:04:ae:18:f6:81:ae:36:a7:92:cc:db:ec:7f:3b:72:51:bf:
         7b:5e:ac:8c:5f:e5:e5:52:1a:3e:b1:77:80:24:f4:27:a7:8b:
         32:5a:48:2c:78:f7:99:bc:3d:7b:b9:57:21:f8:d3:f8:26:ff:
         8c:9e:3b:58:fd:7d:92:c2:c3:44:3a:b2:6f:c2:74:a1:6e:84:
         3f:99:40:3a:b1:05:ff:56:51:4e:e6:13:54:60:54:be:21:f8:
         f3:2c:53:7e:b6:24:99:f2:fb:42:87:e4:81:5e:44:f7:bd:21:
         d8:5a:08:bc:5d:e3:ec:30:ca:16:52:75:0e:d3:cb:ab:11:af:
         dd:2d:2d:01:33:23:ec:a2:00:59:32:19:d0:50:35:7b:6b:0a:
         ab:f8:9f:db:3d:5d:43:48:73:f6:0f:c5:08:0d:70:0b:2c:5a:
         aa:63:3b:72:eb:c0:b4:d1:d4:04:86:6d:fb:00:b1:dc:71:3c:
         9a:c3:24:d8:21:05:a7:8d:f0:10:00:f8:00:2a:1b:de:7a:53:
         cb:22:68:95:97:29:bf:51:c4:20:ba:ea:77:26:9a:1f:d5:3a:
         c3:2e:2b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:11 2026 by rpki-client