Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/6709E1D0D0FB11F08508FE58C4F9AE02.roa
File:                     6709E1D0D0FB11F08508FE58C4F9AE02.roa (raw, json)
Hash identifier:          RtZZS8vjQLN5HCJ+RnkuMSW7X8opo6eQ5796K2b4HcQ=
Subject key identifier:   F4:3F:52:73:38:80:F4:9F:4E:46:A3:AE:21:46:B3:84:B3:5F:31:C2
Certificate issuer:       /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial:       030F
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/6709E1D0D0FB11F08508FE58C4F9AE02.roa
Signing time:             Sun 25 Oct 2026 01:49:38 +0000
ROA not before:           Sun 25 Oct 2026 01:49:38 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     137969
IP address blocks:        113.212.90.0/25 maxlen: 25
                          113.212.90.128/25 maxlen: 25
                          113.212.91.0/25 maxlen: 25
                          113.212.91.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Nov 2026 01:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
        Validity
            Not Before: Oct 25 01:49:38 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6add6032-acb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f2:be:f5:3b:15:06:8b:67:a6:73:54:0f:e9:
                    36:be:b1:bb:c2:0b:e3:52:1d:93:25:e3:57:10:12:
                    0d:37:36:37:d7:9d:ad:2d:31:07:9b:f9:f7:9f:95:
                    bf:1d:43:14:35:f2:66:bb:26:a1:2e:05:56:34:c8:
                    38:df:29:8c:c6:e4:23:ae:92:a2:f0:4c:0a:fc:21:
                    54:c4:1e:3f:c7:78:94:6a:70:5f:3f:14:95:8d:37:
                    ba:03:a3:d6:89:b8:0d:f1:30:6d:51:40:c6:aa:30:
                    92:b3:ce:0b:ab:be:ad:ba:36:5c:d8:a6:65:80:17:
                    40:38:a6:85:1d:36:94:1c:b0:ae:90:4f:18:92:ca:
                    0a:24:3e:1f:af:d3:4b:7c:9d:25:af:62:31:c5:6f:
                    e8:b8:dc:9b:c9:f1:8a:dc:c1:75:7d:7a:a5:68:82:
                    93:a9:83:40:f9:f9:82:8a:b1:70:6d:3c:9c:cd:34:
                    b4:7d:77:54:b2:d3:7d:86:2c:07:c5:c6:6f:93:25:
                    cd:b7:01:b0:4a:8d:dd:ca:c9:75:a5:5a:4a:64:7a:
                    d7:25:d3:b0:4e:3b:57:be:1e:66:f1:28:2d:3a:bc:
                    df:71:ce:96:e1:da:3e:44:cb:8f:6d:ec:34:12:9e:
                    4a:01:01:ae:7e:36:33:f6:c6:ec:a7:12:87:15:45:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3F:52:73:38:80:F4:9F:4E:46:A3:AE:21:46:B3:84:B3:5F:31:C2
            X509v3 Authority Key Identifier:
                keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/6709E1D0D0FB11F08508FE58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:02:0e:ff:0f:51:5c:77:48:3a:26:75:5f:e0:29:21:a1:e4:
         97:08:d8:58:ba:57:23:ce:8b:c1:8e:1c:9e:60:0c:f5:5f:23:
         43:7a:93:46:5f:3a:c7:a8:f1:7f:af:76:81:24:74:30:dc:28:
         60:b1:59:85:7d:03:0d:29:30:13:ec:f9:57:62:99:09:3f:85:
         d1:e8:fc:23:b1:af:56:e9:92:9a:9f:8c:33:e1:b8:73:dc:d6:
         76:c3:2b:dc:bb:7d:8d:31:7f:a0:bc:97:51:68:6a:3d:47:93:
         2c:19:df:34:8b:62:52:84:68:7d:df:ff:54:bb:23:c5:9d:01:
         28:05:90:c1:7f:ea:53:a2:4c:66:1b:47:ce:93:e1:3b:63:8c:
         54:b6:f7:d7:ed:cc:6f:5f:b4:ad:3f:2f:ed:26:6c:f5:37:5c:
         15:5c:cf:10:04:fc:c9:14:6b:6e:f3:a2:39:b9:7d:9c:86:d3:
         97:71:a1:b3:e4:78:db:04:a7:78:30:14:20:01:b6:f5:38:3f:
         4e:db:35:38:8c:30:d4:f0:e1:10:e9:44:39:80:7a:c3:fa:de:
         9a:ea:e0:92:56:01:16:91:c4:eb:58:c2:a2:bc:9a:13:b9:af:
         b4:2f:5c:55:9b:3a:9b:44:28:2b:21:47:cf:05:8f:3f:57:99:
         31:b8:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:24:07 2026 by rpki-client