Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/6709E1D0D0FB11F08508FE58C4F9AE02.roa
File:                     6709E1D0D0FB11F08508FE58C4F9AE02.roa (raw, json)
Hash identifier:          yB3ol9rUcdCMd9JnZM0DHqWp/9+cmY3NhYZPNGTCgSk=
Subject key identifier:   92:4C:55:B5:29:81:D7:9C:DE:F3:6B:40:4F:C6:67:B5:34:84:1C:D2
Certificate issuer:       /CN=A91991D3/serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
Certificate serial:       0292
Authority key identifier: 6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/6709E1D0D0FB11F08508FE58C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:10:31 +0000
ROA not before:           Thu 04 Dec 2025 10:34:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137969
IP address blocks:        113.212.90.0/25 maxlen: 25
                          113.212.90.128/25 maxlen: 25
                          113.212.91.0/25 maxlen: 25
                          113.212.91.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl
                          rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91991D3, serialNumber=6B53F80F8E881B3731972663BA1897B74A92D44D
        Validity
            Not Before: Dec  4 10:34:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48117-9c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f3:64:f3:d5:23:2f:05:60:10:26:93:e7:b1:
                    73:a9:51:9a:6d:0f:86:27:78:ab:4f:21:ba:af:1f:
                    17:af:4f:6d:2f:dd:13:0f:87:9e:0e:30:a9:14:a1:
                    c7:2d:a4:21:f1:74:f4:69:0c:7d:4f:c4:71:06:0e:
                    76:63:86:3f:4e:ac:08:b4:1a:c1:2b:b1:f7:88:ad:
                    d7:da:9c:76:c2:64:e9:45:36:84:5c:ff:2e:35:6f:
                    da:ee:f7:01:13:30:45:ea:b5:9b:92:9b:1e:36:12:
                    16:6a:07:45:b0:fe:8d:9e:7d:3e:19:2b:c3:b0:4d:
                    5c:cb:a9:c6:e6:a2:88:40:fc:78:29:fa:f1:21:a3:
                    2c:16:4e:f7:70:ec:04:55:28:49:10:8b:22:6b:fe:
                    c7:34:e6:b7:19:1b:92:4d:0b:6c:bf:fe:a3:9b:45:
                    d9:31:63:b7:f1:e7:53:e3:12:f3:c6:30:f7:ac:36:
                    dd:1a:32:3f:55:a5:57:db:29:3e:fe:df:17:fe:cf:
                    a3:f0:95:a0:ba:a9:9f:c6:be:22:05:e5:6e:2c:30:
                    c7:73:5f:e5:0f:6d:7f:a2:40:bf:4e:93:8d:a5:d8:
                    82:93:19:31:b5:fc:00:ce:31:18:6b:d1:2a:a5:e4:
                    e3:dd:c3:bf:16:cc:ba:29:88:26:d9:71:61:c6:96:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4C:55:B5:29:81:D7:9C:DE:F3:6B:40:4F:C6:67:B5:34:84:1C:D2
            X509v3 Authority Key Identifier:
                keyid:6B:53:F8:0F:8E:88:1B:37:31:97:26:63:BA:18:97:B7:4A:92:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/a1P4D46IGzcxlyZjuhiXt0qS1E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1P4D46IGzcxlyZjuhiXt0qS1E0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/5FA36E34892311EDBCA29613C4F9AE02/6709E1D0D0FB11F08508FE58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:05:99:c7:b6:1e:2d:7e:17:d0:0c:ad:03:cc:bb:ac:7c:76:
         f8:15:64:89:aa:02:d8:8b:b1:ed:fa:a4:4b:7c:e3:b3:e5:a5:
         65:68:60:f1:f4:d0:29:84:44:88:47:3a:04:00:d2:74:8b:ec:
         ba:5a:d0:2b:1c:d8:cc:ff:a2:a7:c7:1f:0a:6f:22:72:9f:65:
         14:65:b4:74:f7:4e:68:87:08:ff:80:e9:d3:1b:f1:1b:50:e5:
         21:bb:51:0a:2c:bb:69:d9:cd:60:ce:2d:a0:90:2f:10:d6:f2:
         f7:43:5c:1f:cc:26:96:67:05:ea:82:06:0f:44:39:61:fc:9c:
         e1:53:d7:3b:a0:00:ed:14:b2:a5:50:9f:f9:3b:13:de:cd:0d:
         8b:a6:48:d0:df:a7:74:52:46:3f:70:55:ab:37:6c:6b:44:30:
         de:ea:22:fd:8a:cc:8b:66:05:1f:8a:ec:1f:99:70:6e:f8:7c:
         be:f8:f5:12:5b:c4:ea:d8:53:af:86:97:d1:02:44:af:c9:6d:
         b4:24:17:5a:27:69:63:52:37:00:60:b0:4d:19:3b:e0:57:b2:
         9c:f8:50:52:67:20:70:b7:a3:24:6b:7e:c1:f8:6d:71:aa:66:
         b6:92:83:92:a8:0e:fb:c9:4b:61:c7:b7:70:8f:90:36:76:47:
         69:18:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:31 2026 by rpki-client