Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/BEE96BA212A811F1A54B75AE3D3D8C67.roa
File:                     BEE96BA212A811F1A54B75AE3D3D8C67.roa (raw, json)
Hash identifier:          2OPbIxJPP3QdP40uaL9nt4U7I7ob6dcMhXvbzSuIwBE=
Subject key identifier:   51:93:C5:31:13:63:A5:5D:BD:2E:96:13:BA:05:E0:91:0D:E4:BB:6B
Certificate issuer:       /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial:       02E4
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/BEE96BA212A811F1A54B75AE3D3D8C67.roa
Signing time:             Sun 01 Mar 2026 15:51:29 +0000
ROA not before:           Thu 26 Feb 2026 00:18:59 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150673
IP address blocks:        166.120.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
        Validity
            Not Before: Feb 26 00:18:59 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a46081-7b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6b:c8:fc:64:26:ea:4c:3f:ec:5b:1c:fd:bb:
                    c7:96:e3:bc:fa:0b:4c:2c:e1:68:e1:34:3a:83:aa:
                    f7:92:cb:6a:0a:2f:33:62:95:0f:0d:19:d4:5e:ce:
                    da:d7:02:65:9f:6d:2e:91:ba:7e:f4:3e:a4:e3:96:
                    2c:63:3b:35:35:06:11:05:f9:a9:f0:3f:b3:86:c1:
                    42:8a:65:07:f4:d9:46:33:85:e0:ba:ed:e3:64:a0:
                    db:6b:65:84:21:e7:2b:d1:8a:0b:b3:b3:54:19:9c:
                    b7:75:ec:ca:ce:40:67:16:6a:2f:32:d5:86:62:f8:
                    3d:b9:09:37:b5:5d:8e:a3:99:03:c7:83:3b:3e:a5:
                    05:5d:dd:3f:72:9c:5b:2a:15:6a:36:8a:fe:3c:d8:
                    03:e4:07:37:96:e7:b1:4d:26:ab:ff:dd:99:d4:d1:
                    82:6f:5d:ca:90:2c:d1:7d:10:46:9d:2c:08:da:3f:
                    4d:e1:7f:7d:1b:e1:bb:d7:c1:87:76:7c:f3:86:5e:
                    65:8e:ad:78:b1:c9:d4:81:2a:2c:c8:9a:e4:61:9b:
                    49:60:de:4f:f9:c6:42:5a:96:5d:0d:99:b2:69:dd:
                    bb:5a:c2:f7:46:99:bd:ca:26:25:df:11:ac:81:67:
                    d1:40:6d:37:39:25:35:1d:4c:20:4c:7b:54:a2:d7:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:C5:31:13:63:A5:5D:BD:2E:96:13:BA:05:E0:91:0D:E4:BB:6B
            X509v3 Authority Key Identifier:
                keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/BEE96BA212A811F1A54B75AE3D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.120.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:46:79:44:24:b1:11:c2:fc:dd:fb:c0:11:ac:03:82:1e:18:
         5b:75:db:03:3e:77:72:c0:b1:23:a0:94:ae:7b:f4:43:c8:67:
         f8:e1:8c:d5:34:04:21:15:ed:ae:48:4c:35:59:fe:8f:8e:7f:
         ba:8f:26:b8:b1:e5:50:4c:10:a3:6e:fc:12:98:80:62:27:d1:
         3f:87:dc:43:15:00:9c:49:9d:f3:47:dc:6f:a7:2b:c7:60:e9:
         f5:bf:9a:55:9e:60:9e:ab:0c:29:e5:76:c0:58:58:2a:16:e3:
         a3:99:dd:9a:e9:aa:d6:35:65:9c:f8:20:f3:b9:f5:bd:71:bb:
         54:9c:e3:00:61:5f:b2:c2:44:13:e4:39:51:23:53:56:bd:cc:
         d7:c9:20:4d:37:66:5c:f5:4a:58:78:6f:02:a3:83:ba:ba:d5:
         0c:4e:26:68:f4:65:de:36:a2:e0:66:9a:9e:00:f5:15:a5:7a:
         1c:2b:74:3a:a8:a5:e8:44:bb:00:a6:bc:50:94:dc:20:61:4e:
         6c:ae:eb:f2:bf:a3:f2:0b:14:08:ee:01:45:ea:f4:86:da:39:
         79:11:14:c0:c1:07:77:4f:18:f2:f4:b5:6b:11:4b:64:62:8d:
         d1:d6:23:b9:cd:9f:6d:37:ad:00:a0:0e:36:fe:79:06:eb:36:
         a8:9c:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:53:48 2026 by rpki-client