Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa
File:                     89A73D46772311EBB972032EC4F9AE02.roa (raw, json)
Hash identifier:          OmCcAoJqaG+VM4I0xGI0MWEjDCQ4puKtwGSlsV9t2PI=
Subject key identifier:   D9:D6:CE:24:31:DA:59:21:13:D9:40:BC:D8:04:0D:B5:DC:51:AC:56
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3810
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa
Signing time:             Mon 30 Mar 2026 15:10:19 +0000
ROA not before:           Mon 30 Mar 2026 15:10:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135538
IP address blocks:        61.45.253.0/24 maxlen: 24
                          2401:4601:253::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14352 (0x3810)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Mar 30 15:10:19 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69ca925b-3cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ed:77:b9:79:22:b5:dd:95:88:02:3d:e2:18:
                    54:37:dc:0e:c2:6f:06:03:eb:0e:dc:09:a5:27:db:
                    20:74:c1:e1:47:93:b4:a2:e3:75:75:41:46:6c:af:
                    e8:4a:cc:1f:9f:6f:8c:e3:df:21:3b:1d:d0:e8:58:
                    31:7a:8f:65:22:fd:62:54:17:a9:be:8b:75:5f:13:
                    fb:68:47:27:0b:ab:bb:32:d0:40:4a:28:e3:d2:75:
                    e7:10:c0:af:27:02:cb:d6:06:29:d0:fa:e9:c2:91:
                    6e:9b:57:90:1e:bc:6f:3b:1f:af:70:f9:55:4a:78:
                    36:41:f5:b9:05:d3:fd:af:f2:76:a6:78:ce:cc:73:
                    7c:b9:12:2f:93:f3:53:96:e8:79:3c:3a:7f:35:bc:
                    b3:de:19:c8:18:3a:28:b8:69:a3:f4:c7:07:dd:3e:
                    71:35:89:f8:c6:01:bb:e3:ad:34:78:b3:b5:55:54:
                    05:27:29:50:5d:95:f1:6f:c9:63:46:a0:c1:76:c0:
                    33:38:63:0d:bf:94:66:a2:50:01:d9:2c:3c:25:74:
                    5c:44:f8:b9:e4:25:1b:3b:6e:34:1c:ac:2d:be:3a:
                    0a:79:e5:a4:cb:9d:8e:58:b8:85:76:3f:b2:9e:65:
                    c7:83:aa:9a:c7:96:1a:b0:e2:3b:99:9f:c9:90:3d:
                    4f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D6:CE:24:31:DA:59:21:13:D9:40:BC:D8:04:0D:B5:DC:51:AC:56
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.253.0/24
                IPv6:
                  2401:4601:253::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:37:96:9e:69:7a:e3:3f:6a:f0:c9:e6:9c:2c:3f:b9:46:26:
         57:6d:14:f3:52:3f:10:a2:9b:93:79:3a:5c:2e:c9:75:e2:6b:
         07:9b:ca:4f:e7:32:b4:6a:b5:e4:bd:d5:3f:cf:78:92:f1:1c:
         c7:65:80:03:52:6b:05:48:b1:f9:1d:dd:56:ba:8d:46:8c:3d:
         e5:7c:b5:cc:c4:ff:fd:8c:bc:ff:b8:69:94:02:0c:52:ae:30:
         6f:11:4c:cc:e1:57:3c:1e:f4:6d:d5:72:5d:9e:44:7b:ce:69:
         f8:8c:bf:24:a9:23:49:98:ff:21:39:15:3c:00:0d:b3:54:a6:
         08:81:a6:9e:8b:9c:6d:cd:02:88:b5:86:1e:26:98:a3:b6:9a:
         af:e8:a0:46:e3:43:52:c2:e7:6f:6f:39:e3:2c:49:67:4f:4e:
         17:ec:29:10:96:55:43:da:74:42:09:47:1d:9d:02:72:59:67:
         76:46:77:1c:7f:98:94:cc:ad:fe:d5:3e:53:d0:79:df:0e:24:
         e2:1b:50:a3:58:b0:42:73:c1:23:30:0c:e1:e5:4e:b0:cb:82:
         71:d8:0f:41:8e:1f:03:32:53:42:45:17:be:fc:87:b4:8b:3d:
         4a:2e:ab:73:54:d0:46:39:67:0d:db:37:14:f7:81:b9:c9:55:
         5d:cf:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:36 2026 by rpki-client