Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/F971AC8CE42B11EFACAC6F3AC4F9AE02.roa
File:                     F971AC8CE42B11EFACAC6F3AC4F9AE02.roa (raw, json)
Hash identifier:          u8Fyj1tWcsm/7xrez2wrKB0N+SmqsPV3ABuiDRjPFkw=
Subject key identifier:   67:7D:70:7F:50:C5:72:07:F7:D3:CD:AD:F1:9C:7D:20:78:C0:5A:0C
Certificate issuer:       /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial:       E9
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/F971AC8CE42B11EFACAC6F3AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:07:16 +0000
ROA not before:           Wed 07 May 2025 07:14:02 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     400619
IP address blocks:        183.90.186.0/23 maxlen: 23
                          183.90.186.0/24 maxlen: 24
                          183.90.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
        Validity
            Not Before: May  7 07:14:02 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a7a3-5f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:55:97:79:63:14:f4:40:16:1a:e6:48:e9:
                    11:32:06:b1:3e:4f:1a:7f:07:1b:9d:5d:53:60:75:
                    87:c2:93:74:a3:08:09:49:07:54:e3:f2:6b:ae:58:
                    4d:0d:73:be:8c:97:79:9f:1e:bc:da:93:d6:e9:20:
                    92:8a:c9:dd:c6:ae:1d:15:72:63:2b:2f:32:40:58:
                    ef:55:d1:72:ee:e3:1e:e0:ad:ba:a5:0b:46:a8:44:
                    2d:bf:ee:76:bd:17:1d:6d:75:2c:c5:cb:01:0c:d6:
                    b0:e2:5e:b5:b9:39:6e:e5:ed:a0:26:ae:27:8a:8d:
                    1d:ff:23:c1:7c:fa:4b:d9:0c:82:8f:47:fd:bc:68:
                    27:fa:58:62:e9:e5:ae:f8:4d:8d:aa:a3:4d:2b:17:
                    a7:eb:1b:4d:b2:5b:7d:78:26:1a:ae:23:aa:c7:d7:
                    ee:72:f1:32:65:dc:51:48:85:6b:99:3c:3b:13:b2:
                    62:e2:b8:37:8d:68:60:16:be:59:d9:27:ea:95:fa:
                    08:c3:91:85:cb:d8:cd:2d:9d:2f:18:05:77:97:5f:
                    5e:02:db:26:6c:53:eb:5a:c7:b6:38:f3:eb:9c:24:
                    c4:b0:e6:b0:05:e6:4c:cd:74:10:e3:2d:c8:36:03:
                    27:98:bd:41:d8:9d:38:32:4a:6a:02:7d:42:3f:6f:
                    e4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:70:7F:50:C5:72:07:F7:D3:CD:AD:F1:9C:7D:20:78:C0:5A:0C
            X509v3 Authority Key Identifier:
                keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/F971AC8CE42B11EFACAC6F3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:38:27:13:e7:31:1b:f4:83:17:d4:6a:02:b7:36:8d:2d:10:
         71:84:15:5a:cb:d3:59:4f:a2:a5:5c:8a:f0:3a:e7:11:36:c7:
         ab:b3:7b:b9:32:1e:c4:c5:04:e3:e1:23:b2:c7:07:e3:6a:68:
         61:d3:64:08:0c:29:bb:9d:52:7d:27:83:09:14:40:b6:bc:57:
         47:02:93:8a:46:fd:d4:bb:cb:da:1a:77:f1:d7:81:a8:9d:7c:
         f4:fd:57:55:3e:5f:6c:ee:03:cf:84:d8:66:e9:07:cf:81:cc:
         e6:f2:ca:b9:b3:b3:63:f3:a7:28:10:05:b5:25:ae:df:63:f4:
         b9:92:0f:cc:6f:6c:28:1f:2e:fc:07:23:b1:e7:97:04:9f:d0:
         c0:75:5a:03:aa:d7:04:9e:3f:cb:e9:8c:27:66:39:6e:58:25:
         57:95:89:13:2a:7e:cf:f4:a9:5e:98:5b:03:fa:e5:14:1c:78:
         89:8f:52:b7:7d:b8:58:55:70:74:29:cb:61:17:eb:c5:2b:31:
         ee:e4:ff:89:5d:06:2e:6d:8a:96:89:ca:e8:5d:fa:da:21:70:
         00:b3:16:08:33:57:a6:33:9e:c3:c7:b7:76:49:2c:e8:0c:fd:
         fa:2e:7b:cc:87:69:11:79:56:a0:2a:67:77:dc:f3:c6:2b:08:
         1e:d8:dc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:45 2026 by rpki-client