Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B90F319AC84211F09A0BE068C4F9AE02.roa
File:                     B90F319AC84211F09A0BE068C4F9AE02.roa (raw, json)
Hash identifier:          0oflx8PpfYumWtaDNjRKvV2EgmoaxGKFDbpGgqR6stI=
Subject key identifier:   09:33:65:99:CE:5D:0A:1D:AB:9D:B8:3B:70:EF:3C:88:23:65:9F:D2
Certificate issuer:       /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial:       3D
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B90F319AC84211F09A0BE068C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:59:25 +0000
ROA not before:           Sun 23 Nov 2025 08:02:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     401696
IP address blocks:        82.158.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
        Validity
            Not Before: Nov 23 08:02:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a589ad-f1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:4b:ed:87:88:9f:3e:ed:07:1e:5f:e1:05:
                    f8:06:48:1f:03:ea:c5:01:df:c2:14:50:e0:59:86:
                    a0:25:f0:1a:b1:20:ab:09:a9:01:ff:a0:82:57:9f:
                    2e:3e:d4:71:17:9b:f6:a6:21:e8:4a:d1:df:69:b0:
                    d4:23:17:54:eb:d5:09:d0:47:9d:45:d9:fb:f9:5b:
                    f3:ad:95:88:78:d5:22:33:d7:91:8a:14:12:06:73:
                    7b:c0:0e:48:02:69:89:1e:e1:ee:e9:92:21:bb:65:
                    f0:6d:9f:39:c4:03:5e:a4:89:5d:ff:ea:3b:8b:b1:
                    96:af:a3:ea:05:7a:1a:9a:c6:b2:71:97:93:0e:af:
                    4d:f8:77:6f:f8:63:a2:ed:6d:28:09:49:36:1d:92:
                    39:a8:33:e0:a7:9b:95:bd:dd:82:38:51:47:1f:04:
                    95:61:87:b2:e3:ad:fe:3f:7f:0b:40:ed:40:b9:da:
                    53:2c:4c:e5:ce:75:c0:f7:9d:d8:15:6d:39:94:a3:
                    05:da:9a:26:32:24:fe:03:8b:10:59:61:b1:29:cf:
                    a0:5b:35:63:67:f5:8d:28:77:2c:fb:3d:4a:3e:40:
                    d3:41:19:bd:5b:db:1c:32:2d:4f:a1:05:30:89:06:
                    15:3e:90:17:72:77:73:38:92:b5:82:04:67:88:28:
                    bb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:65:99:CE:5D:0A:1D:AB:9D:B8:3B:70:EF:3C:88:23:65:9F:D2
            X509v3 Authority Key Identifier:
                keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B90F319AC84211F09A0BE068C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.158.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:5e:d3:b0:48:3d:47:1e:37:c0:ec:8a:1a:28:e0:8e:3b:
         e4:bd:dd:00:07:f7:95:d6:8d:bf:17:52:2c:67:8f:69:20:b4:
         11:da:e0:69:d7:1c:87:08:52:44:92:ae:1a:6c:b3:f2:c9:5f:
         e4:15:f6:65:72:0a:3d:62:6e:4b:57:2d:91:54:5d:44:93:a6:
         f2:df:44:d5:c7:74:1b:35:97:f5:a8:fb:26:a4:38:b6:44:ca:
         cb:e3:3a:3e:07:23:92:6c:fc:08:c6:5e:23:97:4f:f4:c9:9e:
         5c:56:48:f5:8a:5d:ba:cd:c2:f4:3a:16:26:59:6b:e4:26:f3:
         94:db:9e:c2:93:27:e3:24:b2:f5:ff:26:b6:44:a2:cf:47:f1:
         54:c9:e1:83:82:b0:aa:4a:1f:7a:9d:bd:ff:4f:b2:4d:b2:3d:
         cb:4c:64:6e:df:70:fc:77:60:70:c4:d6:d5:2c:3a:24:9b:af:
         74:26:81:02:c0:e0:24:67:ac:63:4a:47:2b:3a:d6:43:a1:4a:
         94:b0:1d:be:d7:d6:73:06:08:84:8c:69:b3:90:0f:82:63:25:
         7b:88:df:e9:98:54:a5:7e:8e:80:66:0c:65:2f:c1:63:13:60:
         9b:b8:58:0e:cd:23:c5:72:ea:ba:84:57:69:59:8b:7c:09:0e:
         c0:7d:e1:2c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:22:26 2026 by rpki-client