Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa
File:                     A16366C6FDF811EEA4D57274C4F9AE02.roa (raw, json)
Hash identifier:          d03oC9NyvqRx8U/l5SE7fqdhkjTewkYgCSF6lgvXCMc=
Subject key identifier:   F6:82:A0:D0:EE:D1:8A:4A:EA:10:F7:CD:B8:FE:6F:2D:F5:80:9A:17
Certificate issuer:       /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
Certificate serial:       0215
Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:30 +0000
ROA not before:           Sun 29 Jun 2025 02:50:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        217.10.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:14:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 533 (0x215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE
        Validity
            Not Before: Jun 29 02:50:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4386e-32f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7c:ac:33:8d:eb:ba:eb:b1:ba:34:75:97:8c:
                    74:8b:c5:25:2a:02:51:e0:8c:d1:ca:20:43:a3:84:
                    36:9b:42:5b:e1:67:36:5f:03:72:26:db:bb:f5:e8:
                    b2:db:19:bb:ee:5d:21:99:77:fe:f1:f9:c5:7f:b7:
                    0d:ff:64:ed:15:95:27:2b:04:d3:14:d6:20:43:75:
                    84:8e:63:d7:d5:ed:9e:d7:39:9d:10:84:e7:49:fa:
                    b0:0f:4e:77:c2:89:3e:60:25:4b:ce:ca:96:32:98:
                    84:fb:08:23:34:4d:e1:0b:56:f6:9b:b9:25:17:f9:
                    7e:67:c6:9e:a4:82:ac:2e:97:de:8b:af:5c:58:06:
                    c9:4a:14:c7:1c:eb:f5:b0:de:5c:38:82:d3:d3:e1:
                    c7:45:54:7a:ff:c3:ff:27:ab:dd:16:94:16:3c:74:
                    f5:29:ff:35:e3:34:ce:7a:13:d5:4e:12:20:24:2e:
                    e8:ab:2f:e8:5f:82:5f:fc:eb:b3:6d:d6:33:1a:4f:
                    ce:c6:d2:20:25:64:eb:61:d3:39:63:1e:60:dc:47:
                    2c:74:ee:0b:b9:de:89:c9:5c:6c:64:34:be:f1:63:
                    18:a8:6e:00:03:36:79:40:0f:e7:1e:13:1e:f0:4f:
                    13:23:52:5c:4d:f2:b9:c2:44:0e:16:e0:28:7c:d3:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:82:A0:D0:EE:D1:8A:4A:EA:10:F7:CD:B8:FE:6F:2D:F5:80:9A:17
            X509v3 Authority Key Identifier:
                keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A16366C6FDF811EEA4D57274C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.10.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c1:e3:03:80:a4:30:5c:21:ce:dd:6b:15:3f:22:c4:db:fd:
         95:ca:9b:38:9d:3c:f6:44:61:f6:e7:cf:5d:19:33:d3:7f:de:
         77:14:d7:0a:b3:8d:4f:a9:62:9a:4d:a1:60:b0:ab:ed:d7:d1:
         7d:45:41:82:73:aa:4a:83:3a:22:84:08:c7:78:47:5e:ed:40:
         0e:4c:d5:b3:ad:14:34:5b:cb:73:6f:72:9e:60:c1:77:aa:b3:
         bf:87:ae:d8:72:c4:f8:ff:0f:a0:71:b9:42:9c:78:e9:5c:11:
         f3:59:ed:bf:02:b8:cb:38:ab:d5:b7:ed:5d:21:8e:4e:aa:b1:
         16:94:c7:54:58:d0:3e:b2:4d:12:ad:01:e8:21:b9:89:d6:1d:
         99:71:74:86:d0:a2:b7:f7:bd:bb:58:14:23:a7:27:3a:28:cc:
         fb:71:82:57:3e:e1:f9:4b:3a:e3:f8:6b:fa:e5:4c:1d:5a:88:
         22:3f:e4:8c:b7:4f:a8:a1:70:09:4d:76:1b:92:95:ef:7a:6e:
         b1:ef:c7:fa:c3:3a:7b:ea:eb:30:27:34:3e:75:be:20:f6:be:
         54:ad:4f:ec:4a:2d:9c:b6:1e:68:c5:0b:cf:59:5a:5d:f5:2b:
         5b:99:45:56:86:d0:9a:fa:0b:be:28:2d:45:00:7b:df:1d:87:
         8a:b8:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:56 2026 by rpki-client