Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
File:                     48DDFB8E8FAF11F0B59F0948C4F9AE02.roa (raw, json)
Hash identifier:          hipmINl5QhmUdtwVQhhZDP0tnwpiCxBXThMjdcaX9Jc=
Subject key identifier:   39:DA:4A:32:55:C3:6A:C2:08:0C:8C:2C:1E:56:01:8E:F6:E0:5D:17
Certificate issuer:       /CN=A91DF93A/serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
Certificate serial:       0998
Authority key identifier: 7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa
Signing time:             Wed 10 Jun 2026 21:24:25 +0000
ROA not before:           Wed 10 Jun 2026 21:24:25 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153259
IP address blocks:        169.136.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl
                          rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2456 (0x998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF93A, serialNumber=7E244310D7A456EB127B926C42F26D79E9ACDB88
        Validity
            Not Before: Jun 10 21:24:25 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a29d609-8424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:39:cd:1e:f5:c9:f3:53:09:e2:43:a9:8d:52:
                    13:71:5b:41:98:19:9b:91:0c:ad:97:31:6f:d3:d4:
                    7d:73:b0:b7:f7:bd:91:8b:21:6c:2c:cf:d2:f2:fb:
                    1a:a3:73:a3:48:01:cb:7e:54:9c:d0:d3:7b:a7:d4:
                    d1:4e:d9:d5:c4:28:fb:68:e7:69:52:5b:9b:0c:8c:
                    06:b8:64:d7:aa:1d:ed:dc:f2:e8:2f:56:05:5a:a4:
                    f3:b5:f6:05:fe:53:88:1a:e5:06:f4:f8:80:e7:2f:
                    aa:30:d4:9f:62:25:17:21:41:f8:58:c3:22:7e:24:
                    d4:15:20:fe:63:31:d3:cf:29:6f:e4:bd:4f:cc:4e:
                    fa:58:39:c5:76:58:df:4e:67:a2:55:a0:6b:9e:dc:
                    3a:3a:e8:e1:52:e5:54:dd:86:f3:74:4c:3d:06:74:
                    82:2e:58:72:33:03:33:55:69:bf:4e:5b:12:f9:55:
                    36:dc:ed:fb:7b:d7:05:51:cd:ef:ce:dd:8c:1b:99:
                    84:44:b6:84:30:5a:8c:d3:bb:ab:b5:29:91:f4:61:
                    f5:aa:1a:33:4a:c0:36:9b:42:23:ca:7f:5f:25:32:
                    8d:1f:6b:0c:90:8d:f4:d4:ed:55:83:0b:9c:0b:5b:
                    05:29:c5:fe:a3:0a:a7:f9:0c:30:bf:fb:62:63:02:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DA:4A:32:55:C3:6A:C2:08:0C:8C:2C:1E:56:01:8E:F6:E0:5D:17
            X509v3 Authority Key Identifier:
                keyid:7E:24:43:10:D7:A4:56:EB:12:7B:92:6C:42:F2:6D:79:E9:AC:DB:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/fiRDENekVusSe5JsQvJteems24g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fiRDENekVusSe5JsQvJteems24g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/F7DFA72EE5F311EAB3A91561C4F9AE02/48DDFB8E8FAF11F0B59F0948C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.136.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:1e:0e:cd:c4:1d:3e:77:fd:53:0e:26:6a:c5:3a:3f:e7:19:
         dc:c6:da:11:f3:5d:c3:d8:54:31:fc:d7:85:48:8e:9a:2e:f6:
         18:7c:93:5f:88:4b:12:af:1a:f8:c3:b9:fa:0d:13:f3:7d:02:
         d1:5d:b5:77:94:04:df:b1:c1:7c:dd:55:33:70:59:3f:b7:a7:
         cc:9f:27:50:6e:b2:97:64:69:3f:74:86:2d:d6:1b:9f:d3:3d:
         ed:be:ab:b2:b8:ba:9e:9e:9f:f0:7d:1d:f4:39:d1:d6:fb:c8:
         fc:04:71:8d:b4:88:9d:5b:20:9e:40:b7:1b:cc:bd:b6:68:9c:
         01:98:b2:9e:ba:54:9d:0d:02:10:60:aa:6c:8c:72:c7:b4:a8:
         f9:1a:53:6e:e8:90:79:db:63:cc:97:0a:81:c2:ae:e9:9b:30:
         77:fb:dd:dd:98:92:57:5e:dc:66:68:19:65:bf:5f:2d:22:0e:
         69:6e:f0:43:3d:41:36:ff:9d:8c:93:e4:4f:bd:6e:e4:f7:cd:
         c8:f8:a3:b5:0a:44:b2:45:a0:a1:fe:05:92:02:50:6b:f9:74:
         00:33:b4:86:ae:86:70:43:0c:16:7b:67:e1:63:c1:47:dd:61:
         82:33:5b:dd:32:b7:a4:f7:92:bc:6f:c9:ac:96:f9:8a:72:4a:
         9a:56:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:43:59 2026 by rpki-client