Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
File:                     90269D3A716611ED9D80F448C4F9AE02.roa (raw, json)
Hash identifier:          ogU/j3OOcAMtUhqvFDXyTh+nM/5Ri8VmgPSxYiiE5to=
Subject key identifier:   AB:CA:E6:EC:DE:94:47:82:0F:14:C1:8E:57:B4:FD:D0:F4:97:25:73
Certificate issuer:       /CN=A91F134A/serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
Certificate serial:       026B
Authority key identifier: B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:24:54 +0000
ROA not before:           Wed 03 Dec 2025 00:59:48 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     150458
IP address blocks:        103.167.58.0/23 maxlen: 23
                          103.167.58.0/24 maxlen: 24
                          103.167.59.0/24 maxlen: 24
                          2001:df1:b1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl
                          rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619 (0x26b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F134A, serialNumber=B8DF43EEEB35469BB2CC0BA5212D1BFF268A7B6E
        Validity
            Not Before: Dec  3 00:59:48 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a58fa6-3870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2f:c3:a4:ad:16:7d:fc:40:75:2f:7e:dd:b9:
                    bf:9c:49:48:c2:24:0e:48:b5:14:a2:eb:cd:ea:4f:
                    3b:fa:a3:ae:f5:19:53:b8:8a:9e:8e:20:c2:6d:40:
                    c8:b3:64:84:c4:19:33:e5:ea:dd:ef:d4:3b:72:ae:
                    fd:fe:f1:1a:b5:0e:32:30:c3:c3:4d:bd:41:d9:ce:
                    01:e2:50:bd:a3:f5:47:94:30:3d:72:cd:63:09:cc:
                    19:eb:df:d1:d7:1e:d9:cb:56:09:ea:24:8e:ca:db:
                    c9:4d:5b:5b:94:58:d0:97:1f:7f:fc:d6:d0:61:00:
                    ac:f3:13:34:05:08:92:0e:f7:be:e5:bf:6f:96:6d:
                    03:d1:4f:a6:bf:4d:92:8c:1f:ab:7d:3a:bd:9c:41:
                    81:b7:47:00:44:45:40:6b:85:fc:dc:2e:2b:35:93:
                    9f:f5:50:85:dd:e5:4b:9e:01:c6:8a:4e:0b:0a:3a:
                    2a:05:19:24:a2:e3:4a:96:7d:78:3e:6a:29:a8:ee:
                    2e:9e:3e:3f:c0:c0:df:e7:b1:6c:2e:61:7d:9a:66:
                    07:f3:e4:5b:de:43:b3:dc:11:f6:b8:bd:b5:7e:28:
                    ad:24:35:19:7d:7a:69:f8:62:5d:fb:ec:16:c7:88:
                    44:a5:9f:1f:8f:55:82:fa:6b:6b:77:42:56:84:de:
                    8d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CA:E6:EC:DE:94:47:82:0F:14:C1:8E:57:B4:FD:D0:F4:97:25:73
            X509v3 Authority Key Identifier:
                keyid:B8:DF:43:EE:EB:35:46:9B:B2:CC:0B:A5:21:2D:1B:FF:26:8A:7B:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/uN9D7us1RpuyzAulIS0b_yaKe24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uN9D7us1RpuyzAulIS0b_yaKe24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F134A/F976BFDA716211ED88931331C4F9AE02/90269D3A716611ED9D80F448C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.58.0/23
                IPv6:
                  2001:df1:b1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:99:7f:db:79:cb:b0:69:1d:c9:0e:21:a4:47:3a:52:45:
         47:ed:9c:8b:11:35:d6:4c:ea:99:8c:04:8d:df:ea:29:56:19:
         2e:fb:00:d9:31:de:9e:c1:78:7a:2b:da:bc:bc:82:38:8c:3e:
         e4:db:78:ed:50:1e:9b:74:ed:68:a6:59:05:c6:d7:46:7e:cb:
         3b:99:64:96:07:d2:e3:dd:66:1d:e5:db:00:a1:47:5f:df:3b:
         ca:2c:3b:ee:25:4f:13:e4:23:fc:d0:52:91:40:cb:6b:00:0a:
         9e:95:85:25:d4:31:04:a5:02:45:dd:00:05:9d:3c:f1:07:50:
         93:e0:6a:2d:fe:5a:61:2d:f4:25:61:11:13:72:ee:10:48:11:
         8e:25:e5:fb:12:4b:53:31:e7:60:51:26:ca:de:2a:db:36:4c:
         50:18:b2:7c:5a:7e:64:84:a2:56:8f:61:2c:c4:02:1c:d0:bb:
         65:5c:38:1a:b0:69:eb:23:37:5a:73:f2:0f:a4:46:60:ce:d1:
         bb:dd:62:ec:d6:ac:e2:84:20:96:d0:09:92:f7:b0:dc:56:a7:
         35:e7:90:15:92:c0:b9:93:45:50:c2:92:a1:d3:85:9e:fd:59:
         bc:d7:41:86:06:22:fe:8f:6d:f6:7a:53:c2:89:e8:41:68:4b:
         e3:78:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:47 2026 by rpki-client