Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/FFE0419EB92511F0BA672039C4F9AE02.roa
File:                     FFE0419EB92511F0BA672039C4F9AE02.roa (raw, json)
Hash identifier:          VNERl1muN5PbZXadClI72yukZOY4i+Lm6o/me+GY2qQ=
Subject key identifier:   C2:87:D1:51:BC:29:1F:E9:BF:6C:6B:30:46:8D:11:37:41:03:9F:15
Certificate issuer:       /CN=A91BB7DE/serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
Certificate serial:       EB
Authority key identifier: 57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/FFE0419EB92511F0BA672039C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:07:17 +0000
ROA not before:           Tue 04 Nov 2025 02:28:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     329611
IP address blocks:        183.90.186.0/23 maxlen: 23
                          183.90.186.0/24 maxlen: 24
                          183.90.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB7DE, serialNumber=57C58161BDEC4DC79EF48E205F2B8D12028F0AEA
        Validity
            Not Before: Nov  4 02:28:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a7a5-faea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8e:18:7f:4e:c0:e8:ea:97:61:4d:1d:07:bc:
                    09:e4:ed:77:b3:35:3f:5a:e8:89:74:a2:cd:65:5b:
                    0c:94:10:8c:fe:14:bd:c0:b9:11:85:cc:6e:69:4c:
                    23:c2:8d:67:cd:f4:21:ca:7b:49:09:5e:d2:09:5a:
                    c1:8b:65:10:b1:0d:5e:ef:01:16:20:80:02:d8:fc:
                    33:b2:78:6e:9d:72:6c:2d:54:ef:73:6e:c6:cb:36:
                    a4:91:13:4e:8c:19:95:73:38:62:89:e1:55:08:f9:
                    cf:ed:06:37:b6:f6:86:7a:bf:ec:05:d8:2f:cb:8c:
                    49:08:c1:16:d2:5b:24:1b:52:77:38:04:80:84:7b:
                    8e:b2:30:51:33:e8:02:e1:2d:8a:56:71:45:9a:4a:
                    e3:c1:47:10:1c:fd:02:ef:5a:79:97:6d:11:af:68:
                    50:c3:0c:93:7f:2b:7e:a3:30:5f:7f:12:a8:db:2e:
                    5e:42:00:d2:fa:2d:ba:e1:72:53:51:50:af:d3:5e:
                    2f:b4:f8:83:73:f9:4c:21:ff:66:5c:9d:48:16:c3:
                    61:a1:2a:84:99:54:5f:55:ec:25:73:3f:d5:7b:57:
                    99:6c:35:10:06:66:73:50:58:d7:f0:5f:21:14:03:
                    7f:b1:1c:a5:a6:1e:b0:3b:d1:7f:a9:57:b3:31:e2:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:D1:51:BC:29:1F:E9:BF:6C:6B:30:46:8D:11:37:41:03:9F:15
            X509v3 Authority Key Identifier:
                keyid:57:C5:81:61:BD:EC:4D:C7:9E:F4:8E:20:5F:2B:8D:12:02:8F:0A:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/V8WBYb3sTcee9I4gXyuNEgKPCuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V8WBYb3sTcee9I4gXyuNEgKPCuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB7DE/6CE6B404E13F11EFAF18841FC4F9AE02/FFE0419EB92511F0BA672039C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:b5:c1:3e:68:08:d4:a9:3a:c9:2f:f1:11:11:96:ee:4d:31:
         20:26:01:c9:f3:29:c3:1b:16:8e:e6:38:4c:ee:de:47:44:f0:
         1b:04:b1:1e:60:38:62:e7:62:64:6b:98:fa:aa:89:cb:2f:25:
         5a:1b:c9:0e:da:e3:96:16:73:21:f9:de:1d:84:9d:8f:22:08:
         0b:0a:c0:cb:af:6b:44:44:6c:df:07:ee:f0:77:83:28:aa:65:
         f6:c1:ad:c3:59:59:16:b7:58:9f:df:8a:16:6f:22:c1:d3:45:
         4a:e9:9f:83:68:c0:d9:f0:84:d5:33:b8:08:5a:64:ce:68:9a:
         6c:3e:e9:e9:46:ae:53:79:16:c6:9b:ef:a2:a0:f4:f7:5b:f4:
         06:d8:f3:14:2a:5c:40:09:fe:c5:59:4e:fe:6b:28:4b:2e:35:
         62:05:a9:28:72:0b:a0:0e:49:14:c3:aa:0e:de:df:4f:88:59:
         b2:2f:3f:56:27:45:96:77:41:dc:9b:18:0a:ea:34:64:ca:bd:
         f6:c0:3e:ca:59:e8:10:b9:bc:ee:57:86:f6:c9:99:65:3c:fe:
         f5:8c:16:77:ff:b7:42:db:39:65:9b:ff:9a:d8:7c:9a:88:af:
         0c:d2:f7:3b:9d:f4:2c:76:e8:93:79:39:c6:20:2a:ab:2b:8b:
         29:09:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:24 2026 by rpki-client