Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4DC27210558111EF880A8679C4F9AE02.roa
File:                     4DC27210558111EF880A8679C4F9AE02.roa (raw, json)
Hash identifier:          CxrN5BIIQrkUc76Mjxuam5mtgMFBui6ZyXEwqKxcF3s=
Subject key identifier:   64:07:49:98:7B:6D:58:70:0A:49:7C:2D:CB:74:8B:EC:57:6A:82:FF
Certificate issuer:       /CN=A91B5D7E/serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
Certificate serial:       36E7
Authority key identifier: 4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4DC27210558111EF880A8679C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:43:48 +0000
ROA not before:           Fri 12 Dec 2025 14:30:34 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        116.90.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14055 (0x36e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5D7E, serialNumber=4CAE3AEFB1AC8ABDDB99BCCEE4FA5A916D157B34
        Validity
            Not Before: Dec 12 14:30:34 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a488e4-7adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:94:59:91:b2:e0:5f:ee:dd:fb:a5:34:4d:
                    40:79:66:e0:24:0b:d5:47:35:16:eb:1f:2c:00:b5:
                    5f:2d:99:51:ca:22:25:3e:7c:29:fc:12:32:a0:9b:
                    9d:f1:59:1c:f1:7c:13:3f:64:af:1f:07:f5:eb:1b:
                    e4:45:f6:48:da:3c:bf:3d:00:a3:ff:d7:57:48:07:
                    71:13:99:9c:80:49:e2:32:8b:c9:5c:5d:c5:54:8a:
                    18:ad:a5:ec:9d:a0:27:a2:03:87:c9:98:16:2e:7c:
                    c1:7d:64:26:61:fa:8e:9e:60:18:c4:78:3e:a8:8c:
                    ab:66:43:35:b4:ab:40:4c:14:40:a4:d2:3a:24:8f:
                    41:30:1e:b9:f6:6a:8a:25:14:38:92:3f:59:67:a0:
                    b9:c5:de:6a:7a:59:e1:7b:0d:94:8f:90:94:ed:5e:
                    f4:dd:78:c4:08:db:f3:ab:8c:c6:6c:cd:77:5b:e4:
                    a1:3c:6f:c3:c3:0e:ff:1f:fa:4d:97:75:0c:8d:a8:
                    3f:73:d3:e6:58:a5:c4:9c:4c:ca:28:3c:da:69:c6:
                    66:e9:c7:ec:c0:36:4e:76:8b:19:a4:64:66:28:86:
                    b7:04:71:49:47:50:9d:3a:85:0e:b9:93:d3:22:89:
                    0b:cb:7d:78:80:0e:6c:4c:5f:98:17:03:d9:d6:62:
                    12:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:07:49:98:7B:6D:58:70:0A:49:7C:2D:CB:74:8B:EC:57:6A:82:FF
            X509v3 Authority Key Identifier:
                keyid:4C:AE:3A:EF:B1:AC:8A:BD:DB:99:BC:CE:E4:FA:5A:91:6D:15:7B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/TK4677Gsir3bmbzO5PpakW0VezQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TK4677Gsir3bmbzO5PpakW0VezQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5D7E/ECA682341D8711E298322DE008B02CD2/4DC27210558111EF880A8679C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:08:fc:6d:35:d9:67:3f:88:e2:80:ee:2e:47:7c:9a:63:7d:
         ac:2d:16:99:df:4f:49:73:4e:24:cb:31:13:01:7d:69:c1:c4:
         c2:c1:75:de:70:b3:47:0f:f9:ae:90:a5:08:87:da:31:65:d1:
         15:de:2c:0a:1f:22:36:41:40:52:8b:25:07:2a:73:d9:33:a4:
         df:71:2d:b4:f8:d3:e7:3d:54:d1:e5:d8:b3:46:d1:79:4e:aa:
         6a:cf:c7:11:db:1e:fd:28:4c:70:08:d3:a3:ca:53:23:c3:65:
         a8:06:e4:fa:cf:e1:9f:7a:6f:8e:e3:eb:89:9e:4f:db:8a:83:
         e9:13:83:df:b5:0e:3c:d7:0a:6e:20:38:f2:2a:ba:84:e5:d6:
         6e:50:a6:42:b4:7a:2f:42:51:e2:45:a2:14:2d:22:78:45:a4:
         0e:ee:c3:28:10:1c:77:39:fd:38:a9:b3:d7:2f:f4:bd:d9:a0:
         3c:89:d9:93:72:e6:a0:b5:1c:6a:8b:91:2f:ea:7b:88:9a:2e:
         c2:2d:d4:c2:fb:6c:52:eb:d6:c4:48:8f:8b:a0:51:19:f3:20:
         5d:54:ab:1f:7b:1b:04:61:13:3b:8b:dc:34:1a:d8:08:30:e1:
         bf:bd:2d:ba:0c:64:a5:44:5d:4b:10:f5:4d:c0:01:9e:60:63:
         2f:66:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 22:16:12 2026 by rpki-client