Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
File:                     12316BAEE42C11EF9066AE3AC4F9AE02.roa (raw, json)
Hash identifier:          xr9/YLZZZddR2k/EaGhggZjEJrXppAW3beM8PZT9L+Y=
Subject key identifier:   21:D1:B5:19:39:2F:4A:EC:E4:B8:63:6A:33:29:2C:79:C2:89:2E:2E
Certificate issuer:       /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial:       EA
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:07:16 +0000
ROA not before:           Wed 07 May 2025 07:14:03 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55020
IP address blocks:        183.90.186.0/23 maxlen: 23
                          183.90.186.0/24 maxlen: 24
                          183.90.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
        Validity
            Not Before: May  7 07:14:03 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a7a4-58f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:09:47:d3:97:d7:93:44:80:35:c1:e4:03:
                    ee:0e:b3:02:cb:73:21:c3:4d:7d:7a:ad:16:f7:66:
                    67:db:8b:65:6d:62:f3:bf:9e:0c:d2:b0:c9:9a:4b:
                    2f:d4:5b:5d:c6:25:1a:17:78:18:c0:a1:91:e2:9a:
                    fc:a4:44:14:fb:22:6b:c5:64:2e:19:c9:ea:bf:d8:
                    3a:8c:02:a9:82:1f:16:e9:eb:9b:08:2a:1a:6a:c3:
                    87:28:4b:85:05:97:51:10:5b:bf:fc:eb:95:3b:ea:
                    91:ad:21:57:4d:89:d5:5f:af:96:b1:02:83:1d:c7:
                    36:67:3e:4a:6e:54:1b:4d:20:08:0f:75:b6:b6:92:
                    0e:d5:2a:ba:29:99:7b:f7:be:ec:1d:99:a3:30:98:
                    67:85:15:d6:28:5d:02:d9:3e:14:d0:bd:7d:4f:37:
                    64:9e:d3:d3:74:ce:1a:4a:ce:62:d4:0e:3e:e9:35:
                    43:d0:35:8f:b7:86:f1:bd:92:8c:6a:b5:8b:7f:d1:
                    a2:78:a4:0f:47:8f:a1:b9:01:3f:dc:6f:6b:0e:b5:
                    a7:0e:62:fd:26:53:90:56:85:96:01:29:76:17:a6:
                    fb:fa:c1:c3:24:1e:fa:04:e8:6b:16:5a:a7:3a:ef:
                    13:01:96:71:7f:ce:7f:ae:ab:da:d6:88:1e:f7:68:
                    04:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D1:B5:19:39:2F:4A:EC:E4:B8:63:6A:33:29:2C:79:C2:89:2E:2E
            X509v3 Authority Key Identifier:
                keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:2e:87:be:20:48:b4:7a:c9:c3:ee:f6:f1:35:56:5f:fe:
         54:eb:4e:39:35:cb:20:98:78:79:06:bc:4e:2b:9b:ef:2f:fb:
         30:02:e9:6e:2a:22:b9:30:0e:54:67:cc:ef:c6:44:d8:30:4b:
         6d:25:4b:be:9e:cb:b0:f4:b7:b6:5d:0f:3b:0e:94:cc:0c:7b:
         a2:f0:8e:08:2a:67:b7:dc:f9:ac:83:e3:07:41:fb:b5:21:da:
         90:35:17:5b:05:32:ed:ac:5a:46:fc:a1:8c:e1:f2:a0:ee:7a:
         74:e1:55:95:07:a3:4a:65:07:b2:ea:c5:f9:3e:a2:83:ae:1c:
         cf:63:37:80:8b:2a:01:24:72:9e:fd:14:72:1b:5e:77:85:12:
         c9:6d:db:a3:bf:a1:81:4c:ec:fa:60:25:b4:bf:22:31:a5:14:
         d6:ac:7e:82:77:f7:f2:86:8d:c4:9f:72:f2:8e:d3:77:ce:ec:
         f5:5d:9d:ea:59:ee:da:32:fe:9d:1f:e4:d7:a6:82:02:da:a5:
         49:06:72:6b:a0:73:78:bb:07:f9:12:f3:a0:fa:9f:65:34:85:
         fd:3f:f8:7f:3c:9c:3c:96:d1:1a:7d:4f:54:b0:92:0b:25:c7:
         0d:db:06:c6:2f:73:95:ec:d8:75:88:04:48:d8:95:6d:7f:5c:
         c5:44:8d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:00 2026 by rpki-client