Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
File:                     B97B11B2C84211F0A053E068C4F9AE02.roa (raw, json)
Hash identifier:          4qRFCjnxENmZCJsvaf8pCtTsmkbUQtbzT+9x0GNwtBg=
Subject key identifier:   B8:1E:F0:79:1E:C0:46:0D:B2:A5:F6:4B:9D:21:C9:26:63:72:D0:52
Certificate issuer:       /CN=A91CCDAE/serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
Certificate serial:       3E
Authority key identifier: 2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:59:26 +0000
ROA not before:           Sun 23 Nov 2025 08:02:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     401701
IP address blocks:        82.158.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDAE, serialNumber=2DBFC7B28615B1FF78D7CF46886AF92139FF968A
        Validity
            Not Before: Nov 23 08:02:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a589ae-2094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:19:12:8e:82:7c:40:39:2a:b6:cf:83:0a:
                    e0:bd:4e:d9:c4:9a:5b:0c:2c:61:f9:de:d2:a8:e3:
                    33:f8:de:38:16:ca:87:e9:a4:82:62:6f:26:e9:fa:
                    ec:34:dd:06:18:3c:a8:9a:95:8f:79:d1:9b:4e:31:
                    d2:34:03:d1:09:08:b3:a8:51:a7:5b:7d:b0:31:e2:
                    0e:5f:db:d3:74:32:41:21:ee:ac:68:a5:03:51:ba:
                    d6:9f:e1:ea:5b:5d:9d:66:e2:63:b5:d4:7a:a4:6b:
                    d7:6d:6c:60:cb:ac:58:2e:47:37:81:56:43:24:63:
                    45:1a:f4:b7:cf:88:84:62:78:72:bb:66:82:8b:50:
                    9d:c6:32:b7:c0:d4:1f:84:b0:10:58:89:7b:a3:c6:
                    ee:b8:c1:4b:4e:7c:b1:2b:e1:9a:dc:b5:e3:0f:d5:
                    70:5a:e6:96:5f:f9:b6:98:53:d2:0e:67:a3:38:bc:
                    d5:8d:a3:be:13:a0:49:59:1d:2e:f4:cd:e0:ed:48:
                    5f:95:ec:b4:8a:cb:01:4f:c1:40:eb:10:1c:f3:a5:
                    cd:fe:05:e9:19:b5:f4:ba:08:79:90:0d:7a:18:68:
                    c7:ed:8d:b5:d3:61:2e:47:54:a8:e1:67:1c:66:33:
                    c9:79:d5:75:9c:aa:63:f2:d6:fb:e3:dc:69:a1:c7:
                    c1:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:F0:79:1E:C0:46:0D:B2:A5:F6:4B:9D:21:C9:26:63:72:D0:52
            X509v3 Authority Key Identifier:
                keyid:2D:BF:C7:B2:86:15:B1:FF:78:D7:CF:46:88:6A:F9:21:39:FF:96:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/Lb_HsoYVsf94189GiGr5ITn_loo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Lb_HsoYVsf94189GiGr5ITn_loo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDAE/2FBEA402C84211F0A33E9A7EC4F9AE02/B97B11B2C84211F0A053E068C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.158.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:3a:19:d5:6c:b3:60:79:7d:99:5f:4f:a6:16:48:98:ea:
         72:09:7e:62:25:0b:18:c6:82:d3:9f:6e:31:db:6a:64:bf:cd:
         08:a8:7c:9c:db:8e:10:5a:c7:89:21:11:dc:5d:65:de:9f:07:
         6a:11:57:20:1c:1c:40:03:2d:08:05:00:78:e9:9c:10:1e:02:
         51:a2:33:51:2b:28:29:97:fe:40:c4:46:a0:b2:f3:6b:4c:eb:
         20:7e:8f:09:51:c2:59:86:ec:d7:9c:60:98:94:48:7d:e0:6d:
         90:dd:a6:40:e9:f4:73:c1:ee:48:d6:5e:eb:9d:ca:b1:27:10:
         50:30:9a:1d:b8:ab:7f:32:1e:b7:0b:2c:58:38:0f:23:79:a1:
         9b:65:f8:24:2e:f0:4f:29:bf:42:3a:75:4d:72:8f:98:51:68:
         ba:aa:73:f0:cd:1b:b2:58:d6:cc:c6:66:d4:c7:d2:38:5d:ad:
         8a:0b:bb:23:80:15:ba:fb:46:66:b2:f7:ed:e4:42:b6:44:db:
         d4:aa:47:e9:6e:3b:8a:c6:72:80:7d:36:d8:97:c7:ca:92:7e:
         4e:3f:eb:79:de:ea:7b:35:53:1d:54:b0:33:f5:82:00:ec:43:
         60:33:39:4e:f7:35:76:73:1f:5e:ec:8b:ca:56:f1:89:fc:22:
         39:53:d3:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Mar 4 17:28:36 2026 by rpki-client