Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A108D60CF92E11EA8946AD6AC4F9AE02.roa
File:                     A108D60CF92E11EA8946AD6AC4F9AE02.roa (raw, json)
Hash identifier:          imiT+W8/s1mg77SmRNb+Kx8sox1CDXbEL2YtpMvUGKA=
Subject key identifier:   EE:57:E9:47:5D:02:6D:7C:C6:CC:19:E7:C4:4D:E3:47:00:81:4D:94
Certificate issuer:       /CN=A916B33E/serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
Certificate serial:       1946
Authority key identifier: D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A108D60CF92E11EA8946AD6AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:32:44 +0000
ROA not before:           Wed 30 Jul 2025 16:55:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        116.90.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl
                          rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 16:21:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6470 (0x1946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B33E, serialNumber=D0072EDEB67E1752AB752263A4FD9450DD3A33EC
        Validity
            Not Before: Jul 30 16:55:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5917c-b457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4e:09:78:13:70:2a:0f:e9:27:aa:54:16:a0:
                    5b:9e:45:58:22:b6:fb:6a:ca:55:c3:f5:56:bf:4b:
                    2c:42:c7:c0:f3:c6:1a:6c:58:d0:81:98:4b:f3:ba:
                    2b:e4:62:cf:12:b8:13:e2:79:16:fd:05:fd:5c:b8:
                    7a:8c:f6:aa:19:eb:33:9d:ad:e4:c3:92:4e:08:75:
                    ed:b7:29:03:60:57:f8:6a:04:82:06:fb:28:22:e8:
                    ec:da:bf:2e:2f:a5:35:0d:c7:b2:f1:ed:c9:60:ce:
                    9e:24:bd:39:44:a9:61:7b:07:a3:73:99:4c:a0:0d:
                    d5:d2:80:5d:de:f4:35:7c:05:7c:aa:09:50:61:61:
                    fd:6d:5e:8a:e9:92:54:0b:0e:86:fb:8a:33:7a:51:
                    65:ab:7c:8d:ab:12:fb:ea:3a:97:d0:75:65:44:b0:
                    42:24:64:02:eb:23:eb:ae:4a:ba:3e:51:8f:61:c1:
                    a9:82:ff:59:ca:c0:e9:10:18:f3:4b:6b:6e:66:a3:
                    6a:b3:6e:b2:94:c2:79:e1:66:cb:5b:a6:6e:00:1b:
                    c3:16:ad:a1:de:56:81:2a:fe:41:e7:0a:ba:fb:fa:
                    9c:08:29:5c:95:80:b6:71:f8:f7:1d:d8:a0:26:ed:
                    87:6d:b3:38:13:be:25:f6:d7:90:b0:63:c7:f2:ca:
                    c9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:57:E9:47:5D:02:6D:7C:C6:CC:19:E7:C4:4D:E3:47:00:81:4D:94
            X509v3 Authority Key Identifier:
                keyid:D0:07:2E:DE:B6:7E:17:52:AB:75:22:63:A4:FD:94:50:DD:3A:33:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/0Acu3rZ-F1KrdSJjpP2UUN06M-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Acu3rZ-F1KrdSJjpP2UUN06M-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B33E/2F66B57AB83E11E7A01D6650C4F9AE02/A108D60CF92E11EA8946AD6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         16:65:5a:e5:99:85:a2:91:f1:40:8b:c2:08:52:bb:b4:ee:04:
         a0:54:f0:c5:63:22:81:2a:41:ea:35:d6:0c:c7:cb:1f:d1:9d:
         c2:11:40:41:c9:c1:15:6b:6d:eb:84:bb:94:c1:85:ad:ef:ff:
         84:63:4c:e2:2c:02:a8:08:ab:92:45:68:78:0d:ca:44:00:38:
         18:71:b3:62:ee:85:7a:30:be:9f:fe:a7:f6:c3:2f:23:09:5b:
         3a:1d:1a:56:ff:58:bf:25:58:ff:77:e4:2a:b4:37:51:e0:e8:
         e5:ef:0e:84:79:c6:63:e8:36:17:b1:7c:3c:a6:de:2a:f6:67:
         43:3d:6f:20:15:3b:e7:a6:1a:1b:95:10:ce:b1:99:2c:ff:88:
         e8:58:43:ab:fe:49:e2:3d:61:d6:1b:d4:b2:28:40:47:4c:ed:
         3b:04:d2:69:52:8c:65:9d:51:57:54:b6:9b:56:2b:ed:21:07:
         96:2b:ac:6f:93:43:a3:24:24:75:b4:89:00:59:34:ec:40:63:
         03:da:35:4f:4b:a6:ee:de:26:02:fa:c2:94:c6:19:c0:08:ee:
         6d:b5:2c:ab:11:9b:59:be:9c:04:04:68:77:1c:be:45:07:6e:
         f9:81:03:6b:e5:c9:7a:d5:76:c5:86:13:a8:7e:10:87:19:a7:
         a5:ad:49:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 14:56:16 2026 by rpki-client