Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/0B73271E6BAB11F1817F09047447A888.roa
File:                     0B73271E6BAB11F1817F09047447A888.roa (raw, json)
Hash identifier:          xzfJ1pesflkZcpLSv4PL+RRXAT+R09mM4Npl13DisnY=
Subject key identifier:   89:63:26:AD:3E:F4:32:38:BA:C0:49:28:24:D2:58:C6:DD:81:48:EE
Certificate issuer:       /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Certificate serial:       12
Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/0B73271E6BAB11F1817F09047447A888.roa
Signing time:             Wed 24 Jun 2026 00:40:46 +0000
ROA not before:           Wed 24 Jun 2026 00:40:46 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     202348
IP address blocks:        91.240.89.0/24 maxlen: 24
                          185.130.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
                          rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Jul 2026 09:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
        Validity
            Not Before: Jun 24 00:40:46 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a3b278d-8342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:4d:de:a2:f2:89:89:23:e4:e3:83:09:64:
                    24:c0:f0:cc:2c:c5:c8:75:05:20:f0:d2:23:43:cb:
                    43:90:59:e1:f5:e2:98:d6:8d:96:02:66:0e:3b:83:
                    ca:a4:6f:da:fc:30:c8:41:48:63:f7:38:c1:8c:00:
                    49:10:c3:ab:7b:6f:8c:b1:e1:e9:c5:59:49:e3:71:
                    d2:5d:81:c5:96:bf:68:b1:7c:fa:55:82:8f:42:5d:
                    a9:34:bf:33:dc:ac:71:6c:c4:55:40:ed:e6:e8:42:
                    4d:ff:27:13:39:65:17:53:c0:ce:e6:1a:c0:ee:81:
                    72:5b:9b:f4:6a:32:30:80:01:99:8f:4c:aa:ff:30:
                    32:d7:0e:ad:d0:44:2a:ea:42:1e:4c:47:b2:d9:71:
                    7a:89:7c:ac:e3:2a:8f:0e:de:7f:72:85:97:8c:f9:
                    74:9c:be:88:fb:75:7a:26:15:38:bd:33:73:85:d6:
                    fa:80:d8:53:d0:1d:d9:e4:f5:52:45:7b:8f:31:9f:
                    1c:29:3d:d7:f4:b9:2b:90:f9:20:2a:a5:ea:18:a0:
                    ce:ae:62:cc:07:ed:ee:79:20:74:5a:ec:53:34:e5:
                    8b:88:68:c0:45:15:cc:b8:dc:6f:fc:fc:53:6a:30:
                    42:0a:ac:ad:b8:f8:be:23:c3:5d:d0:ed:f0:fc:9c:
                    d2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:26:AD:3E:F4:32:38:BA:C0:49:28:24:D2:58:C6:DD:81:48:EE
            X509v3 Authority Key Identifier:
                keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/0B73271E6BAB11F1817F09047447A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.89.0/24
                  185.130.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:e2:21:8c:e3:74:c0:3e:7b:77:d9:18:cd:f3:a4:b0:36:00:
         d0:e5:76:1e:65:b4:f6:6d:97:79:36:93:f1:af:07:9d:41:6a:
         48:d8:90:60:9c:a2:fe:bd:1a:8f:18:df:1a:ad:91:51:41:b7:
         fa:fb:2a:ff:5c:12:2a:9b:31:7d:f5:c7:3c:51:00:d4:27:ca:
         78:44:1f:87:43:a7:c2:1d:4c:27:8f:f0:f3:f3:ce:00:58:3d:
         ef:d4:9c:79:26:6e:48:77:25:17:f2:dd:4d:7a:31:a8:16:67:
         69:3f:1f:ed:c9:d3:32:61:eb:56:9b:f0:bf:7a:6e:6e:6f:c1:
         46:3b:ed:6d:c0:69:aa:5d:86:88:3a:5d:38:5d:fb:18:12:ad:
         cb:84:3f:a4:53:14:09:ca:26:1d:65:31:0d:81:16:47:c5:8c:
         49:07:db:2e:05:a1:1f:1d:db:de:9e:79:30:bb:ad:a1:00:c8:
         f8:24:84:28:77:d4:54:65:c0:f3:16:db:a1:e1:1f:42:9e:aa:
         e8:14:e7:cb:f6:d7:c3:25:15:1e:5f:a0:30:b8:00:90:11:96:
         af:25:11:f6:c1:ff:8b:e9:b2:69:b6:04:c7:fc:ff:70:8c:4b:
         34:dd:22:1b:77:c8:e6:a9:03:d3:b8:77:32:c8:09:2d:3b:fa:
         28:ce:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:27 2026 by rpki-client