Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/83C1CE04704D11F1AE17E0CA6AA30FBC.roa
File:                     83C1CE04704D11F1AE17E0CA6AA30FBC.roa (raw, json)
Hash identifier:          +GmCDHEdNjQ06phpOZetCBBgH3kQBO7mbMb7ggzxIUU=
Subject key identifier:   0D:3D:87:D9:EE:DC:FD:75:09:C4:C6:6B:DD:ED:7D:9C:2E:14:36:1A
Certificate issuer:       /CN=A9134ACE/serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
Certificate serial:       14
Authority key identifier: 46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/83C1CE04704D11F1AE17E0CA6AA30FBC.roa
Signing time:             Thu 25 Jun 2026 04:22:45 +0000
ROA not before:           Thu 25 Jun 2026 04:22:45 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     31898
IP address blocks:        91.240.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl
                          rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 Jul 2026 09:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134ACE, serialNumber=46717843E7D348B39ECF7B92495501FE3550BA3C
        Validity
            Not Before: Jun 25 04:22:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a3cad15-02bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:d3:f9:aa:64:e8:04:63:6f:45:49:fc:fd:
                    e3:3f:16:86:35:c9:a7:8d:cc:a8:85:d0:f7:88:61:
                    04:03:cc:3d:3d:36:46:0c:48:8f:3c:7f:aa:ab:d5:
                    53:3d:56:24:02:89:1f:98:89:96:ed:1c:f3:3a:ce:
                    c0:21:5b:22:03:95:39:a4:6f:0d:fe:a3:fc:c4:66:
                    48:c0:0e:5a:4b:7c:f7:a2:77:e7:73:78:5c:f3:a9:
                    c1:76:1a:63:2f:0a:18:f2:82:ea:e6:8e:b7:6c:85:
                    2d:05:45:f6:8a:54:ec:08:03:6f:fc:79:48:8a:f3:
                    6a:ba:3c:3c:0e:48:dd:24:4a:a6:d7:28:1a:2b:7c:
                    a4:67:9f:db:09:a4:f5:05:ef:d1:04:dd:48:86:af:
                    fb:b1:7b:0f:0d:21:63:44:39:ee:4b:9e:70:10:6b:
                    24:33:f7:8b:ff:68:e3:34:49:04:9f:3b:ea:42:32:
                    ec:41:a5:1f:5a:9f:dd:05:d7:66:c2:9a:e0:b2:42:
                    e5:79:d1:92:ba:a4:66:d3:b1:e8:58:99:19:43:c4:
                    da:fb:f0:cd:c1:f3:7d:f6:76:8c:06:44:66:83:92:
                    68:be:d1:de:66:f9:2c:6d:c0:56:c3:44:88:25:18:
                    de:da:9c:5b:a1:61:43:81:a5:57:1a:a7:dd:9f:7d:
                    fa:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3D:87:D9:EE:DC:FD:75:09:C4:C6:6B:DD:ED:7D:9C:2E:14:36:1A
            X509v3 Authority Key Identifier:
                keyid:46:71:78:43:E7:D3:48:B3:9E:CF:7B:92:49:55:01:FE:35:50:BA:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/RnF4Q-fTSLOez3uSSVUB_jVQujw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/RnF4Q-fTSLOez3uSSVUB_jVQujw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134ACE/15B452546AA011F1A6D27C19B1EE528E/83C1CE04704D11F1AE17E0CA6AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.240.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:a6:e6:16:95:44:58:e7:8b:da:11:02:bb:ee:a8:06:a2:74:
         43:82:6e:3c:13:b9:2d:bf:71:50:8a:1c:ff:04:2e:08:12:ed:
         23:08:a2:72:c7:2e:62:ed:b1:20:34:8f:e3:25:82:b7:df:3e:
         25:6a:4f:b1:42:20:ab:af:a7:0f:b1:45:5b:7b:06:1c:42:8f:
         da:92:ec:b5:33:45:83:73:ae:aa:04:95:4b:eb:09:2e:fa:8b:
         36:9d:83:19:5d:35:9f:fb:80:19:08:7f:4c:78:f2:da:a2:28:
         05:8d:4a:22:cf:28:57:00:6a:c7:dc:28:83:24:ba:83:e2:67:
         75:b9:17:1b:26:f3:ca:66:17:f9:99:89:91:6b:44:16:f8:87:
         e1:73:59:f1:82:69:ac:6a:cd:f6:7b:01:e1:fe:dc:2d:c6:11:
         c0:1f:69:fa:d4:f4:11:ab:93:a4:ac:1d:eb:f2:8a:2c:84:f0:
         a8:3a:60:9f:3d:34:59:5a:7d:0f:a7:a0:78:10:04:b6:41:4e:
         09:e6:51:33:23:cf:5c:34:57:f9:a5:2f:b7:e5:4b:23:c9:32:
         7b:3d:7b:f8:27:1d:8b:98:d5:00:cf:99:9c:43:20:df:c3:1b:
         ca:ba:15:3b:6b:89:3b:bb:7e:56:3e:72:6c:49:5a:63:be:ef:
         3e:4c:af:cd
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
NEFDRTExMC8GA1UEBRMoNDY3MTc4NDNFN0QzNDhCMzlFQ0Y3QjkyNDk1NTAxRkUz
NTUwQkEzQzAeFw0yNjA2MjUwNDIyNDVaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhM2NhZDE1LTAyYmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQClitP5qmToBGNvRUn8/eM/FoY1yaeNzKiF0PeIYQQDzD09NkYMSI88f6qr1VM9
ViQCiR+YiZbtHPM6zsAhWyIDlTmkbw3+o/zEZkjADlpLfPeid+dzeFzzqcF2GmMv
ChjygurmjrdshS0FRfaKVOwIA2/8eUiK82q6PDwOSN0kSqbXKBorfKRnn9sJpPUF
79EE3UiGr/uxew8NIWNEOe5LnnAQayQz94v/aOM0SQSfO+pCMuxBpR9an90F12bC
muCyQuV50ZK6pGbTsehYmRlDxNr78M3B8332dowGRGaDkmi+0d5m+SxtwFbDRIgl
GN7anFuhYUOBpVcap92fffrZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUDT2H2e7c
/XUJxMZr3e19nC4UNhowHwYDVR0jBBgwFoAURnF4Q+fTSLOez3uSSVUB/jVQujww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0QUNFLzE1QjQ1MjU0NkFB
MDExRjFBNkQyN0MxOUIxRUU1MjhFL1JuRjRRLWZUU0xPZXozdVNTVlVCX2pWUXVq
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvUm5GNFEtZlRTTE9lejN1U1NWVUJfalZRdWp3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NEFDRS8xNUI0NTI1NDZBQTAxMUYxQTZEMjdDMTlCMUVFNTI4RS84M0MxQ0UwNDcw
NEQxMUYxQUUxN0UwQ0E2QUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABb8FkwDQYJKoZIhvcNAQELBQADggEBADqm5haVRFjni9oRArvuqAai
dEOCbjwTuS2/cVCKHP8ELggS7SMIonLHLmLtsSA0j+MlgrffPiVqT7FCIKuvpw+x
RVt7BhxCj9qS7LUzRYNzrqoElUvrCS76izadgxldNZ/7gBkIf0x48tqiKAWNSiLP
KFcAasfcKIMkuoPiZ3W5Fxsm88pmF/mZiZFrRBb4h+FzWfGCaaxqzfZ7AeH+3C3G
EcAfafrU9BGrk6SsHevyiiyE8Kg6YJ89NFlafQ+noHgQBLZBTgnmUTMjz1w0V/ml
L7flSyPJMns9e/gnHYuY1QDPmZxDIN/DG8q6FTtriTu7flY+cmxJWmO+7z5Mr80=
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:32:26 2026 by rpki-client