Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
File:                     12316BAEE42C11EF9066AE3AC4F9AE02.roa (raw, json)
Hash identifier:          HPGKnyw+NQfTj/X7e3fKlZ3w6KRta5tZp8o8op8pTBo=
Subject key identifier:   84:81:BE:74:41:37:13:A2:84:64:A0:5D:4A:C3:98:B5:DD:87:56:C9
Certificate issuer:       /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial:       0114
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa
Signing time:             Mon 11 May 2026 06:39:23 +0000
ROA not before:           Mon 11 May 2026 06:39:23 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     55020
IP address blocks:        183.90.186.0/23 maxlen: 23
                          183.90.186.0/24 maxlen: 24
                          183.90.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
        Validity
            Not Before: May 11 06:39:23 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a01799a-480d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:72:26:b8:6a:47:66:ed:51:56:14:2b:c8:
                    ed:b6:27:09:ff:13:74:de:42:de:73:36:9f:df:06:
                    52:1f:9e:6d:36:58:aa:a6:9c:d0:16:a8:15:b1:e2:
                    3a:64:0e:24:59:6c:5a:38:50:30:1e:a4:f8:59:2c:
                    2e:97:59:7e:bf:4e:ab:eb:4f:4f:82:c6:ab:9a:d6:
                    9c:08:67:c4:19:8e:8b:91:0d:7e:ad:18:24:4b:81:
                    c6:73:4c:fa:d2:3a:26:4e:f8:1d:35:52:2a:5f:ee:
                    a9:0d:c8:ff:0c:fc:9c:97:5a:d0:45:27:fc:89:d4:
                    46:35:ba:b6:c4:5f:42:34:d4:f7:3c:ce:2e:55:d8:
                    b5:c0:94:c3:10:36:dc:24:f9:d3:6e:25:f6:65:07:
                    86:ec:41:79:c1:59:dd:74:fb:1b:eb:66:69:9c:fe:
                    9c:fd:19:32:80:00:f8:d1:9f:e6:2b:91:ae:fd:64:
                    cd:10:48:11:ea:36:1c:6d:bb:3a:de:be:b6:bb:92:
                    5c:87:36:63:55:bc:f1:ef:f4:6b:23:ff:9a:78:09:
                    bb:83:0d:30:c4:98:55:29:b4:c7:17:bb:3a:4f:c2:
                    18:22:d4:8d:e8:be:5b:3f:f3:2f:be:77:bb:34:a4:
                    1b:a6:9c:a2:77:11:51:54:cd:4c:6c:20:93:c1:a5:
                    ab:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:81:BE:74:41:37:13:A2:84:64:A0:5D:4A:C3:98:B5:DD:87:56:C9
            X509v3 Authority Key Identifier:
                keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/12316BAEE42C11EF9066AE3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:24:bc:0b:30:c2:ec:93:b7:78:64:6a:cb:07:43:2b:67:2b:
         f1:61:a9:b0:ec:bf:d2:ab:f0:31:45:fb:fc:a9:9a:a4:ac:e2:
         45:72:0d:99:c6:b6:a8:54:1a:d4:38:fc:40:77:42:2a:88:52:
         5e:16:22:48:e7:ae:93:4d:a1:09:74:e4:bd:f8:4f:59:ce:02:
         d0:dd:c1:fd:3d:65:a7:f8:00:a3:3e:85:a1:0d:77:db:9a:39:
         bc:87:47:62:f2:53:cd:f1:aa:86:3f:85:06:88:99:85:9f:de:
         e8:ac:2b:17:12:5e:c7:96:5f:02:f0:38:c7:fe:3e:69:03:e0:
         fa:70:07:82:d3:a9:23:53:98:c8:03:18:18:dc:af:6e:55:00:
         51:e9:73:38:e6:03:10:c7:7a:8d:ed:e1:b4:49:80:e7:46:24:
         5e:a1:6e:be:53:4e:fb:ad:fc:67:92:36:d5:92:5c:be:89:ac:
         8f:6b:e0:7c:45:74:1f:4b:2d:de:93:98:97:24:b7:62:d2:55:
         8d:c6:95:33:13:b5:a6:0c:03:90:5f:aa:26:c7:7b:7c:60:1b:
         16:f3:ed:1b:b9:d8:2f:b2:4b:cb:f1:a8:83:ca:8c:23:e0:55:
         18:7b:3f:f0:8b:9f:a2:73:cf:48:2a:f5:98:3f:5f:53:73:17:
         f2:a5:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:39 2026 by rpki-client