Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa
File:                     89A73D46772311EBB972032EC4F9AE02.roa (raw, json)
Hash identifier:          tvA8+V4GQkLamLpmb5eSD+CKg/E2pjiWjtgwaAZGMrs=
Subject key identifier:   02:95:E9:76:6A:AF:2C:42:B1:B2:21:3E:BC:59:20:41:A5:1A:D7:03
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       37E8
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:20:55 +0000
ROA not before:           Tue 30 Dec 2025 15:10:11 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135538
IP address blocks:        61.45.253.0/24 maxlen: 24
                          2401:4601:253::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14312 (0x37e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:11 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a49197-59a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:87:b5:e9:8a:a1:72:64:01:08:10:86:ed:1d:
                    cf:d6:f7:fa:86:dc:69:1c:b2:5e:81:5c:52:aa:84:
                    46:25:ce:c5:95:4d:18:8b:0d:25:57:31:f4:b4:85:
                    d7:21:d2:8f:47:ad:d5:1a:0c:95:8a:66:4c:b2:e5:
                    79:9c:dd:dc:32:ba:e6:63:6b:60:7f:86:06:e6:e4:
                    e9:6a:90:33:68:6e:89:0b:48:82:42:b3:ef:8e:c1:
                    ca:a4:87:5c:31:5b:50:85:f7:d2:5e:98:e6:8d:d1:
                    43:c5:86:88:69:aa:c9:4e:b5:cb:40:ed:c1:54:a1:
                    27:d3:2d:e7:61:df:93:bb:62:2e:e2:3b:3d:77:8f:
                    07:39:79:f1:be:12:79:5b:cd:4a:2b:86:58:7f:f3:
                    16:16:d1:ac:ee:6e:38:61:cd:7a:01:f8:a7:03:24:
                    6d:80:d4:2f:e4:5a:23:68:1a:b8:43:e0:e3:87:99:
                    f7:c8:58:11:d9:28:eb:d9:1a:9c:28:6f:e9:1e:d6:
                    24:06:51:1e:7e:ca:b3:db:79:fc:2e:dd:c1:ab:5c:
                    71:b5:b9:c5:c5:1a:1f:73:f9:09:56:ac:d7:55:81:
                    87:15:00:3b:e6:1c:44:b6:bf:80:91:88:de:dc:82:
                    81:87:e5:2a:bf:d8:02:1d:6d:83:dc:62:5e:12:56:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:E9:76:6A:AF:2C:42:B1:B2:21:3E:BC:59:20:41:A5:1A:D7:03
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.253.0/24
                IPv6:
                  2401:4601:253::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:02:6f:c7:24:f7:af:03:a2:d9:fb:1a:58:1c:31:35:fd:4b:
         a4:b5:86:41:4d:1c:01:8d:02:c8:ae:3f:95:8f:c8:7c:41:d1:
         da:d9:3b:b5:3c:e5:fb:8b:43:02:b4:b5:7d:8d:47:1e:8d:d8:
         97:95:90:5c:ef:d2:8f:3d:70:88:f6:50:38:6d:61:58:dd:54:
         cf:51:93:67:24:4c:10:1e:cd:27:37:1d:6f:90:d7:04:c0:13:
         69:36:a2:7e:f2:f6:fe:30:2e:4d:a3:ab:1f:5c:5b:39:ec:38:
         0f:2b:72:75:22:98:66:3c:71:13:2b:e1:00:02:cc:7f:af:ac:
         24:2d:3c:cd:b4:5d:3c:b2:46:ef:ad:05:0a:cd:f2:0e:87:2c:
         1c:de:af:21:91:25:ab:92:fa:ec:0d:9d:fa:e0:77:7e:cb:a3:
         cd:0e:4a:82:c7:71:6d:1b:7b:ec:69:28:38:26:43:db:ae:48:
         6c:19:71:16:24:49:2e:6b:7d:19:8a:0b:df:a4:08:fe:99:4e:
         09:69:15:5e:11:be:e5:e6:48:8f:57:62:19:56:38:7d:71:c6:
         99:68:fb:98:9d:e2:1f:c8:b9:a5:23:34:95:c2:c9:0a:0f:87:
         14:a4:b8:e9:a7:b3:e6:00:c4:4f:a6:c4:28:b0:ce:b1:10:60:
         a2:95:56:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:20:36 2026 by rpki-client