Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/774BCA5CC3AA11F186E634BE4E11F970.roa
File:                     774BCA5CC3AA11F186E634BE4E11F970.roa (raw, json)
Hash identifier:          R0ZRNc44kULSW0wCJiLN+M3IB8ih4EOOJQ9NnAQlmT0=
Subject key identifier:   7F:4B:15:B8:DE:A9:60:01:FC:6D:C2:0B:63:5E:C3:4F:26:17:13:0F
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C85
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/774BCA5CC3AA11F186E634BE4E11F970.roa
Signing time:             Fri 09 Oct 2026 07:58:58 +0000
ROA not before:           Fri 09 Oct 2026 07:58:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     54994
IP address blocks:        61.91.128.0/24 maxlen: 24
                          2001:fb0:109f:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 14:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15493 (0x3c85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Oct  9 07:58:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ac89ec1-3ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:dd:c0:7b:d3:fb:25:e1:9c:ee:36:9f:fa:
                    a9:7a:c2:a7:9b:6e:bd:22:98:cb:53:c1:f4:9e:70:
                    ed:a7:e9:c2:04:1d:fe:4c:75:8b:81:81:00:d1:76:
                    7f:35:6a:fa:03:17:b9:2e:06:e2:b6:4b:a0:ef:f9:
                    c2:0e:3f:62:82:13:ac:50:ee:f5:a5:d5:20:0d:53:
                    e0:b2:54:fb:71:14:b3:6f:de:9b:ab:06:2e:0c:2d:
                    47:29:4f:5e:45:29:4e:43:16:c5:b2:40:9d:cf:b4:
                    66:32:32:05:79:67:69:b1:bd:fd:0d:a0:fd:ba:15:
                    44:8d:59:55:70:08:d3:56:ec:f2:3d:c3:dd:92:a6:
                    72:34:8c:79:cb:f9:eb:6f:3c:e7:af:ba:2e:41:06:
                    ad:d6:2c:15:dd:eb:64:d2:56:a4:dc:a6:2e:24:c7:
                    5f:21:62:4f:f2:d3:ff:39:39:96:df:09:55:dd:86:
                    5f:9d:b9:6e:38:28:26:84:ba:9f:05:c5:6d:79:8c:
                    23:cc:2f:8a:37:c2:06:bf:b4:79:b4:ed:9e:b8:64:
                    89:27:9a:50:44:ed:8f:bc:12:e0:68:1a:8a:e4:d3:
                    2f:e2:8d:8f:f2:72:a7:28:72:2d:58:5c:14:aa:8a:
                    07:7d:d7:75:39:b1:86:0b:86:99:4a:2b:28:12:e4:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:4B:15:B8:DE:A9:60:01:FC:6D:C2:0B:63:5E:C3:4F:26:17:13:0F
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/774BCA5CC3AA11F186E634BE4E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.128.0/24
                IPv6:
                  2001:fb0:109f:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         a3:2a:2c:22:0e:bd:7f:0f:c9:8a:04:84:4f:bd:d9:33:a9:10:
         21:c3:54:97:0d:f6:ce:61:c5:00:a7:94:85:d8:a7:64:fd:c8:
         c2:2e:8e:c9:62:a4:4e:24:25:e4:6f:af:1f:64:e7:dd:5a:17:
         95:ef:26:00:80:28:b8:d0:9b:c0:ce:b8:49:29:f8:7c:ea:33:
         a0:2b:85:58:e6:7e:5b:01:35:72:bf:cc:24:92:ba:1d:8a:b6:
         03:c9:79:01:4f:a6:59:30:9f:04:bc:67:ad:8b:e3:ba:23:69:
         38:9b:14:86:7d:2b:13:10:91:61:e6:b2:a8:6a:3c:eb:4b:02:
         50:e2:ea:c6:df:5e:80:0b:85:fd:1e:cb:7f:d3:69:b7:b2:4f:
         e6:32:78:57:57:fa:a3:0c:82:dc:cf:62:a5:13:d7:1f:cf:19:
         84:3c:7b:f5:4e:ed:be:ee:6c:1d:a4:c1:b2:3d:ce:f8:d8:50:
         09:c9:dd:7f:80:9a:f2:0a:28:a4:8f:7e:41:d3:02:d6:28:6a:
         a0:3b:7d:ab:89:07:94:49:6e:b2:1c:8a:35:52:6e:c4:d4:01:
         1b:62:f5:4a:54:b3:4e:d8:bc:bb:48:01:e0:72:a0:58:65:a2:
         0c:d6:3a:b6:b7:a3:9a:cc:9f:e3:c7:d8:d4:58:11:dc:51:d3:
         a5:22:a4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 19:25:06 2026 by rpki-client