Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/39E9F1A41E0111E9A590C837C4F9AE02.roa
File:                     39E9F1A41E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          gLTfbNy13k/VivIIP17Bah9QX8h9jdIfv3vuvSDhmbI=
Subject key identifier:   1B:9C:E5:14:64:E7:46:4C:D5:61:BD:61:2E:17:A1:B9:E8:A6:62:F8
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3BEB
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/39E9F1A41E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:11:13 +0000
ROA not before:           Mon 06 Jul 2026 15:11:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     136579
IP address blocks:        61.90.212.0/24 maxlen: 24
                          61.90.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15339 (0x3beb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:11:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc591-9118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f0:ec:70:2c:ce:c6:16:2a:b9:de:b8:fd:6b:
                    be:8e:6c:0d:57:70:bc:4e:10:01:0b:39:f5:6e:6d:
                    40:e3:33:38:b6:5d:7b:8b:d8:86:ea:9b:55:7c:82:
                    43:58:67:63:a6:d2:ad:3c:73:26:a3:43:75:1a:47:
                    c2:23:bd:3d:5d:82:46:aa:99:2e:77:7a:39:ea:07:
                    cf:d9:9f:83:c7:ce:bb:79:31:cf:f4:ef:04:46:65:
                    14:cb:1f:a1:c4:41:c6:f1:80:87:01:0d:88:ec:00:
                    16:30:4a:92:1f:61:e2:3d:24:ac:c0:bf:24:c7:99:
                    e4:9a:cc:28:44:fa:88:9d:ab:f1:6b:a3:7a:23:f0:
                    76:c6:84:c9:1d:33:34:5d:7f:b7:65:9a:9b:d5:4a:
                    0a:82:6c:8e:05:72:3b:d5:ba:0a:4b:67:88:be:58:
                    72:09:3a:9d:7a:1e:78:28:88:e2:ad:3a:bc:85:9d:
                    b2:ea:96:a9:9c:a3:fb:d7:68:ae:cd:95:b9:48:e1:
                    29:fa:52:ba:61:f2:bf:22:27:0f:20:1d:3a:03:a9:
                    ff:32:b0:81:d4:e9:a7:55:97:0f:ad:ea:5d:6b:f4:
                    f2:2f:82:56:a6:59:55:45:2f:1d:70:88:95:7c:17:
                    fb:38:db:97:f3:d2:9e:b5:ea:91:28:cb:9b:04:99:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9C:E5:14:64:E7:46:4C:D5:61:BD:61:2E:17:A1:B9:E8:A6:62:F8
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/39E9F1A41E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.90.212.0/24
                  61.90.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c9:6e:d4:39:9a:66:38:3e:c6:01:13:67:a8:ae:d5:12:76:
         1c:b5:56:5c:b8:42:52:80:eb:ea:cf:58:44:2c:74:75:ef:c7:
         18:97:9e:ff:a8:fb:b7:9c:40:72:5c:fb:d3:d2:74:d8:12:aa:
         c6:b1:1a:14:6f:a2:97:f7:b5:ca:ed:d4:03:b7:e3:72:e1:b9:
         c9:a6:da:5a:10:9e:ae:36:f8:9b:23:9c:d6:f6:44:32:29:c4:
         6a:1e:ab:c6:71:73:b4:62:e4:99:f4:79:8f:57:ab:27:28:d2:
         20:e0:62:1c:8e:84:9d:c3:94:98:da:a5:a8:9f:49:7b:b7:5e:
         0a:dc:c0:dc:0f:fa:2b:4f:ab:7d:84:76:05:b5:12:32:c5:06:
         4d:f1:6f:84:2b:a1:2f:91:a0:74:f6:26:76:24:db:07:26:09:
         37:f4:fb:d7:f9:3b:b8:05:e5:95:e3:dd:1f:aa:04:82:ff:2f:
         f9:36:34:bb:44:a4:89:d6:ef:77:8c:aa:52:b1:c6:25:99:d1:
         ee:2a:c1:18:e2:a3:34:d7:58:7a:bd:dd:4a:7b:d9:12:9d:f4:
         71:c4:5f:06:01:29:1a:d6:2d:42:82:24:65:e6:2f:1f:fc:2f:
         24:6d:b7:d6:e2:94:a5:09:03:6a:df:11:e3:81:d4:a3:6d:20:
         62:c4:03:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:41 2026 by rpki-client