Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa
File:                     F88154843B9D11F091B39D67C4F9AE02.roa (raw, json)
Hash identifier:          wMwLSmFRfR346APII8vghU3TqvB3B1WbFWhhmiBY1Cg=
Subject key identifier:   95:48:07:FD:7D:8B:BB:45:F9:E8:8C:1E:30:B7:AF:AF:2B:03:5D:88
Certificate issuer:       /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial:       87
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa
Signing time:             Thu 05 Feb 2026 16:26:28 +0000
ROA not before:           Thu 05 Feb 2026 16:26:28 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     399861
IP address blocks:        161.248.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
        Validity
            Not Before: Feb  5 16:26:28 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6984c4b4-713b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:a8:b8:88:91:92:15:97:da:14:a2:47:e3:
                    f9:cd:ac:25:85:3f:53:34:83:4b:16:b2:18:f5:32:
                    ca:be:56:fb:5c:9e:4b:d3:9d:75:fa:6d:df:24:be:
                    cf:1d:1b:30:66:6c:5a:aa:20:b9:73:f1:f8:0b:f1:
                    29:73:21:8a:29:74:34:95:1b:f3:bf:02:9b:fd:09:
                    74:c3:ea:fd:cd:d6:4b:b2:f4:28:b4:51:c2:72:ce:
                    d7:2a:a2:e4:6e:a9:cf:62:a3:19:13:1c:40:68:ae:
                    45:ef:fa:be:d5:b4:81:57:9b:2c:9c:12:f6:b8:d0:
                    08:73:46:1f:9e:fe:af:57:38:2c:89:9a:05:14:7f:
                    fd:7c:0c:81:6c:72:ef:dd:8c:09:7b:9f:a5:b0:0e:
                    00:03:b9:28:2d:a7:b8:aa:de:78:48:29:6e:fe:9a:
                    22:d6:8c:01:21:63:fa:0c:5f:b9:1f:94:53:0f:16:
                    4f:96:84:a0:57:3d:6e:2b:04:10:a7:fe:41:e4:c1:
                    60:52:e9:b6:10:b5:5e:06:d3:b1:15:87:d2:dc:4e:
                    cb:76:09:3f:15:d8:5c:36:ae:6d:e7:4f:32:6c:44:
                    ce:73:49:39:cd:aa:0f:43:5c:ab:52:12:1d:c0:b8:
                    a7:6c:1c:19:13:cb:a1:07:29:b9:26:30:ae:a7:dc:
                    e3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:07:FD:7D:8B:BB:45:F9:E8:8C:1E:30:B7:AF:AF:2B:03:5D:88
            X509v3 Authority Key Identifier:
                keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:7f:f5:46:c0:fb:da:ad:21:4b:79:10:02:f4:97:3e:06:
         51:d2:30:0c:16:3a:f7:e9:79:31:96:dc:dd:38:ee:1d:25:21:
         55:7b:3a:8a:dc:c0:05:b7:29:e0:0f:18:5e:42:83:6c:69:d2:
         84:9f:75:3e:f0:0e:0b:a0:61:f4:91:2b:7e:38:8f:36:79:67:
         9f:45:a6:d5:d9:c5:d0:0b:9c:3d:bc:32:61:e9:cc:a3:d6:09:
         02:a6:e9:55:54:bf:f6:ef:ea:4f:1e:b1:81:37:97:f3:d9:ce:
         d2:eb:4d:b0:0f:07:69:66:4d:5a:cc:17:c2:2c:78:18:cb:82:
         d0:54:68:9e:45:c8:ed:66:3b:ab:ce:5e:f9:10:f1:19:5a:0b:
         82:86:13:87:68:d4:92:cc:81:2a:60:a8:5c:eb:11:e6:55:9e:
         d2:8b:af:62:91:72:be:6b:3a:61:24:a5:ca:52:ec:1a:1e:4e:
         04:41:35:21:31:af:13:5a:97:89:53:d6:e7:c9:e1:09:b7:67:
         53:a3:37:85:49:1d:68:c6:4b:c0:01:ea:c9:79:a0:92:3c:35:
         eb:e4:9e:81:51:0e:24:21:5a:98:97:a7:b3:27:34:65:a6:d1:
         01:a4:ba:2c:33:37:f3:74:a6:e4:ed:e1:00:92:7e:f8:d3:d1:
         29:ad:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:10 2026 by rpki-client