Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/61C915302DA611F1B2990DECA2833773.roa
File:                     61C915302DA611F1B2990DECA2833773.roa (raw, json)
Hash identifier:          KaomdsVrAqV74tigFGzbofL46Dx0oPl1SoGoDWsWCag=
Subject key identifier:   B7:80:C2:CD:B5:EE:43:01:CB:0B:1A:5B:09:82:FE:B3:2C:37:F3:BA
Certificate issuer:       /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
Certificate serial:       0967
Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/61C915302DA611F1B2990DECA2833773.roa
Signing time:             Wed 01 Apr 2026 08:40:05 +0000
ROA not before:           Wed 01 Apr 2026 08:40:05 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        164.90.73.0/24 maxlen: 24
                          164.90.97.0/24 maxlen: 24
                          164.90.104.0/24 maxlen: 24
                          164.90.123.0/24 maxlen: 24
                          164.90.124.0/24 maxlen: 24
                          202.63.36.0/24 maxlen: 24
                          202.63.39.0/24 maxlen: 24
                          202.63.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 20:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260
        Validity
            Not Before: Apr  1 08:40:05 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69ccd9e5-51f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e5:2e:24:2f:d7:8f:c3:7b:62:e6:5a:c4:42:
                    cc:fc:79:97:2a:73:94:10:30:ee:79:90:b8:67:2e:
                    88:c0:96:e1:0a:a7:6d:07:25:90:cc:51:f5:64:45:
                    9f:ff:ba:f7:2a:01:1a:af:c6:b5:ae:66:bb:82:1e:
                    66:d2:6e:d5:27:08:96:a4:57:72:51:0b:5a:a3:92:
                    88:54:68:2c:71:40:6d:10:97:45:70:7b:a3:1f:3d:
                    8d:b1:5c:86:98:f1:59:14:c0:35:79:a3:d1:bc:c2:
                    9d:df:3c:62:23:df:09:77:65:83:8a:a4:4a:20:3f:
                    f6:52:b5:3a:92:6f:f8:ef:aa:9d:37:1c:6e:ce:8e:
                    65:a1:c5:2e:b3:cd:be:36:1c:2f:be:00:51:08:86:
                    41:92:bc:e9:55:b1:78:9f:ac:fb:91:16:fa:5a:df:
                    f4:66:57:f7:a8:46:52:01:ed:6c:49:0a:41:1d:1b:
                    ff:9a:b8:f3:9b:10:fa:d8:96:69:58:86:4c:c1:8a:
                    df:58:b4:b0:6d:73:cc:72:04:9f:f8:c8:d1:6b:e9:
                    d5:bb:5a:aa:19:a1:11:fd:02:3a:47:fe:5a:ca:b2:
                    9d:f5:10:99:58:31:83:98:8c:90:67:52:87:89:a0:
                    42:83:8d:bd:53:5d:ca:bc:c5:a4:2d:30:17:2e:ae:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:80:C2:CD:B5:EE:43:01:CB:0B:1A:5B:09:82:FE:B3:2C:37:F3:BA
            X509v3 Authority Key Identifier:
                keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/61C915302DA611F1B2990DECA2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.90.73.0/24
                  164.90.97.0/24
                  164.90.104.0/24
                  164.90.123.0-164.90.124.255
                  202.63.36.0/24
                  202.63.39.0-202.63.40.255

    Signature Algorithm: sha256WithRSAEncryption
         37:47:c4:fa:fd:a6:f8:29:3d:27:89:ea:0b:7b:7d:51:b7:7c:
         ad:e5:5d:c0:04:80:dc:cb:95:b7:93:3f:e2:fa:a8:86:5c:8e:
         15:6d:c1:c8:e5:f8:fa:c5:5e:14:2f:ba:47:82:43:2d:e9:91:
         9c:9f:75:c7:d9:7d:aa:02:ec:bc:22:1f:f5:0b:86:e6:b4:d3:
         2a:1a:ad:9e:7e:dc:68:1d:59:5f:7a:cf:4e:46:8e:2c:13:54:
         21:e9:38:db:98:54:b1:cc:ed:a7:bc:af:cf:1f:c0:b3:e0:06:
         80:c8:01:60:7d:1c:6e:2d:85:09:66:88:74:3a:9c:72:6b:2b:
         70:61:b3:2d:b1:ff:f7:dd:06:ba:3b:18:df:26:98:10:2c:17:
         2c:68:36:7b:17:03:e4:94:c1:44:50:ec:bc:59:6f:e7:b1:90:
         5f:9a:db:20:9c:d8:a5:26:85:1f:49:d1:c4:10:db:30:20:cc:
         06:45:f1:bc:46:9b:01:24:4f:73:5c:54:6b:cc:65:f7:0e:ed:
         5d:d1:29:a9:ef:54:e0:ac:0d:aa:d7:98:53:87:b3:80:96:9c:
         ac:76:a7:93:c5:94:e9:ef:93:cd:65:91:4a:f1:fe:26:b0:90:
         e9:c3:8b:b4:59:78:f0:de:d3:12:a1:98:47:38:20:63:f3:42:
         44:5d:7f:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 7 04:59:31 2026 by rpki-client