Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/09B62A48833411ECBB74C786C4F9AE02.roa
File:                     09B62A48833411ECBB74C786C4F9AE02.roa (raw, json)
Hash identifier:          60K8gZjudVzKhOohmyTOLSn+7XmAwWJ8vTY2sYH+0gI=
Subject key identifier:   98:F6:DD:07:59:B1:B3:70:BA:B8:53:31:88:DD:41:E5:2C:27:AE:71
Certificate issuer:       /CN=A91596C4/serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
Certificate serial:       0510
Authority key identifier: 3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/09B62A48833411ECBB74C786C4F9AE02.roa
Signing time:             Tue 03 Nov 2026 00:46:31 +0000
ROA not before:           Tue 03 Nov 2026 00:46:31 +0000
ROA not after:            Mon 01 Mar 2027 00:00:00 +0000
asID:                     1221
IP address blocks:        149.234.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl
                          rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 23:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91596C4, serialNumber=3EE26FBA4BE359DEAE500792EBFF78D00ACB760C
        Validity
            Not Before: Nov  3 00:46:31 2026 GMT
            Not After : Mar  1 00:00:00 2027 GMT
        Subject: CN=6ae92ee7-00f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:48:4c:c5:86:f7:5d:bf:3e:5a:1a:e2:a7:
                    9b:47:c7:b9:9d:39:e7:ea:c5:f6:3a:55:1f:44:1e:
                    e3:b0:1e:e1:26:f9:4e:ec:0d:49:1b:a8:f5:10:ec:
                    14:15:49:41:dd:c5:d0:31:ff:48:94:13:17:37:f3:
                    65:e7:d0:0f:1d:00:fe:70:20:78:bc:3e:6b:1f:dc:
                    57:ad:7c:db:a3:07:04:0d:23:93:ad:ca:45:81:eb:
                    6f:cd:34:0b:3a:61:84:10:23:68:44:05:39:7c:f0:
                    dd:97:c5:03:78:7b:b3:6b:f7:e9:da:dd:1d:cf:e7:
                    9f:75:1d:52:de:94:ce:3b:d5:c5:74:58:9f:92:dc:
                    96:e6:87:ea:81:c4:45:34:7d:93:81:4f:08:7d:62:
                    2f:5f:50:f3:5f:95:1a:68:e4:87:b5:11:ea:b0:58:
                    b3:41:4e:9e:8e:d5:b1:73:f3:22:d3:6d:a5:51:93:
                    e7:3f:45:93:c4:85:3b:7f:5b:13:34:ab:5d:ce:9b:
                    00:5b:06:02:f2:86:1c:44:f0:e1:ce:a4:43:b1:9b:
                    bf:f6:35:6e:7d:64:c3:af:8e:dc:14:86:19:19:6c:
                    12:ee:0e:b3:7f:0a:f4:e8:b7:20:b2:60:dd:67:cc:
                    e2:25:c6:13:c9:03:fa:53:cc:a0:e1:a1:41:b9:1a:
                    6a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F6:DD:07:59:B1:B3:70:BA:B8:53:31:88:DD:41:E5:2C:27:AE:71
            X509v3 Authority Key Identifier:
                keyid:3E:E2:6F:BA:4B:E3:59:DE:AE:50:07:92:EB:FF:78:D0:0A:CB:76:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/PuJvukvjWd6uUAeS6_940ArLdgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PuJvukvjWd6uUAeS6_940ArLdgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91596C4/F3DDEEDE833011EC8FF39383C4F9AE02/09B62A48833411ECBB74C786C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:a2:e7:1a:61:51:80:b6:65:60:9c:ff:14:ca:ec:96:48:
         06:c2:6d:e0:18:6b:98:60:81:99:9c:28:42:0a:f5:c0:30:90:
         dc:7e:33:63:4a:2a:44:7f:d3:0b:ff:40:fe:e9:c0:a0:b7:ff:
         02:1d:93:67:63:4d:f7:f1:6e:26:a5:5b:8e:03:16:72:89:48:
         50:1c:35:9e:1d:e3:72:6e:3d:1b:b7:15:a9:f3:d8:9e:27:1c:
         27:42:1f:54:a1:3e:dc:10:fc:df:7e:51:b8:e8:12:96:a1:a7:
         ea:a7:bb:8f:a1:47:2c:26:30:49:e1:32:a6:b7:34:43:e5:93:
         23:a4:5a:0d:9c:09:de:83:d6:16:b9:4f:88:5b:bc:c0:65:c7:
         9f:5a:9c:74:7a:11:43:79:56:11:1b:84:b0:f5:53:13:ed:af:
         be:29:24:73:45:96:32:eb:3a:44:ce:7a:b9:9a:39:4e:97:87:
         82:bd:64:0f:b6:af:cf:72:64:c3:17:23:4f:de:2b:05:a5:ee:
         47:30:35:0c:2e:03:dc:35:36:0a:08:37:30:20:fb:47:9d:94:
         36:b1:ce:3e:f4:43:10:a7:cf:96:3b:a0:b8:8b:c0:84:87:e1:
         df:f8:97:a2:c2:95:53:03:81:06:32:ba:ce:a7:d4:0b:23:e7:
         51:9c:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:44:43 2026 by rpki-client