Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa
File:                     C98708BE477711EBB4044E31C4F9AE02.roa (raw, json)
Hash identifier:          rfB6cKoGstk7sIp1asdLZKTU/mLRnkq24gAeVkCxYNw=
Subject key identifier:   25:A2:63:24:F5:E2:A7:E7:6F:09:20:69:E0:23:F8:6B:B1:60:01:1B
Certificate issuer:       /CN=A91BAEDC/serialNumber=AD059592223E816AC53C433B965846F79D305234
Certificate serial:       1C16
Authority key identifier: AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa
Signing time:             Mon 02 Feb 2026 16:13:54 +0000
ROA not before:           Mon 02 Feb 2026 16:13:53 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     24220
IP address blocks:        116.66.160.0/20 maxlen: 20
                          116.66.160.0/20 maxlen: 24
                          116.66.160.0/23 maxlen: 24
                          116.66.162.0/23 maxlen: 24
                          116.66.164.0/22 maxlen: 24
                          116.66.168.0/23 maxlen: 24
                          116.66.170.0/23 maxlen: 24
                          116.66.172.0/23 maxlen: 24
                          116.66.174.0/23 maxlen: 24
                          2402:d800::/32 maxlen: 33
                          2402:d800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7190 (0x1c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BAEDC, serialNumber=AD059592223E816AC53C433B965846F79D305234
        Validity
            Not Before: Feb  2 16:13:53 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6980cd41-86de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:21:c2:bc:06:7a:a9:e4:cd:f7:45:e2:fa:8f:
                    a9:d6:9a:58:bd:c4:94:0b:7e:e1:c7:94:35:ec:06:
                    41:c6:c0:47:fe:8a:38:1a:15:ed:45:c4:0a:41:a5:
                    dd:1f:70:50:ab:b8:8e:df:44:4e:38:a2:95:c9:1d:
                    97:cd:0b:31:55:2f:7a:e2:b6:37:45:36:20:e8:45:
                    75:99:e9:c5:c0:14:61:f6:23:d0:dd:b7:59:74:74:
                    ed:4d:ae:f7:87:4f:45:f1:8b:e0:fa:e8:d7:84:4c:
                    c7:f0:57:03:ea:83:c5:88:cf:9d:5b:da:7a:8d:44:
                    25:83:98:1a:a4:67:b2:02:6a:d9:f4:cd:dc:c7:76:
                    01:ae:65:97:7e:04:9d:e4:44:cb:ba:bf:cb:25:8b:
                    68:e0:38:93:45:48:16:f7:a8:08:9a:3f:17:ea:43:
                    35:9a:3a:ca:04:48:4a:56:20:7f:79:6f:01:b2:37:
                    a8:78:a3:a8:ff:e6:2c:c3:84:39:47:94:5d:10:d9:
                    7a:e8:ac:90:fc:c8:be:18:ef:fe:a0:2b:aa:42:a8:
                    21:4a:a0:0f:69:48:9b:cb:86:f0:ca:43:9a:00:6e:
                    74:aa:fb:87:f2:8b:4e:e5:d3:a3:7b:41:98:e4:80:
                    94:bb:84:01:80:bc:5b:d1:20:ba:73:35:ee:a2:f9:
                    94:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A2:63:24:F5:E2:A7:E7:6F:09:20:69:E0:23:F8:6B:B1:60:01:1B
            X509v3 Authority Key Identifier:
                keyid:AD:05:95:92:22:3E:81:6A:C5:3C:43:3B:96:58:46:F7:9D:30:52:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/rQWVkiI-gWrFPEM7llhG950wUjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rQWVkiI-gWrFPEM7llhG950wUjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAEDC/2DC1BAF2098511E7B1FFC23FC4F9AE02/C98708BE477711EBB4044E31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.66.160.0/20
                IPv6:
                  2402:d800::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:9e:2f:ed:c8:f4:aa:95:a0:6c:6d:eb:06:8d:de:a7:ab:48:
         78:65:35:ef:94:10:0c:23:41:f0:14:4c:9d:02:00:10:d9:f2:
         77:8f:26:96:05:00:63:61:52:a5:b4:1d:76:46:e3:5e:ff:e2:
         98:7d:dd:db:40:ef:35:ec:b1:06:6a:90:f2:40:12:dc:3d:82:
         9e:7a:03:17:0d:6c:b5:cd:00:1c:36:9d:9e:aa:dc:e0:1f:22:
         88:81:d9:ce:be:8b:94:92:f3:20:38:26:0e:06:44:d1:4b:bf:
         f3:4f:3f:67:30:c0:ab:3c:fd:27:3e:75:d1:ea:90:db:6c:f9:
         6e:7b:73:35:11:c3:a9:d8:b7:6f:cd:1b:d4:c6:88:f4:d4:51:
         3b:ef:c6:e6:70:b8:3c:d4:df:13:d1:c3:7c:4b:5a:25:28:45:
         3f:91:32:f8:cf:5f:14:1f:80:b6:71:3d:35:82:57:dd:66:d5:
         1e:26:3b:a2:03:cd:f4:25:cc:d8:32:a7:6b:0f:fc:0f:94:4c:
         f4:a1:e8:e5:c2:1e:b1:fb:d9:65:25:73:40:91:51:d2:1a:3f:
         21:04:e5:33:7f:fe:a1:0a:86:2e:d2:cb:4d:44:f1:1b:c4:6d:
         d1:88:4c:f7:c0:b1:ca:92:34:bd:d1:af:75:7c:ca:37:36:8a:
         df:27:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 00:11:42 2026 by rpki-client