Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/89135068FD2911F09BBA873E426F56BC.roa
File:                     89135068FD2911F09BBA873E426F56BC.roa (raw, json)
Hash identifier:          k6L2RtaPfs9iJDZ6OaWxGKY/ymoQfy3jPyd5OxyAkZs=
Subject key identifier:   2E:D3:A7:CC:A4:38:C8:78:0B:58:92:8A:0E:B4:D7:54:66:CC:1B:E7
Certificate issuer:       /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
Certificate serial:       0C8D
Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/89135068FD2911F09BBA873E426F56BC.roa
Signing time:             Sun 01 Mar 2026 18:27:25 +0000
ROA not before:           Thu 29 Jan 2026 15:45:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     17539
IP address blocks:        113.203.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl
                          rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3213 (0xc8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190
        Validity
            Not Before: Jan 29 15:45:28 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4850d-4b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:c7:ca:7f:3e:98:24:e0:f4:6d:1b:f5:b7:
                    d1:59:d1:24:3f:6b:d4:03:27:78:ff:aa:e9:22:02:
                    fb:dd:05:fe:fc:e3:09:eb:7d:7c:d9:a8:01:02:d7:
                    83:2e:0a:eb:5c:b4:70:dc:fe:1b:16:cf:71:26:45:
                    70:7a:54:d2:37:a9:df:38:59:66:ef:87:1d:c3:af:
                    be:53:a8:f3:67:c0:6e:83:f2:f4:c2:84:cc:f3:af:
                    b9:c3:f6:35:51:e0:0b:9e:53:1b:8f:e6:d8:39:f0:
                    81:22:3b:bd:eb:13:c4:3c:cd:bd:5b:51:c6:b0:05:
                    14:bd:02:a4:cb:13:c0:1c:56:8d:51:50:f3:c9:da:
                    89:28:5e:19:01:9b:f1:e1:16:d7:88:7a:23:cc:43:
                    e8:1e:2c:1f:e2:23:8f:bc:92:6e:ce:a7:ba:57:bd:
                    64:9b:79:12:10:85:12:3b:df:d0:6e:81:3e:b1:87:
                    4c:71:5f:71:c3:21:42:e9:2b:3d:e0:e1:84:2e:60:
                    e0:fe:c6:aa:09:0c:3b:a3:0f:90:e4:a4:41:9a:27:
                    e5:d0:af:0e:d6:75:5b:07:0d:c6:cf:ce:4a:0d:c6:
                    e2:f5:ac:22:3c:6d:00:57:c4:13:1b:94:ac:18:ee:
                    af:70:fe:5f:e9:99:2c:e1:45:a2:2e:af:cb:dc:d5:
                    f8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D3:A7:CC:A4:38:C8:78:0B:58:92:8A:0E:B4:D7:54:66:CC:1B:E7
            X509v3 Authority Key Identifier:
                keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/89135068FD2911F09BBA873E426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.203.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:f4:f3:a2:dc:cc:c4:33:1d:aa:fc:f9:0a:11:ff:07:32:f8:
         4a:80:ff:81:a6:34:08:70:99:56:78:92:d6:cb:db:70:95:b6:
         e5:74:15:cf:6c:26:fe:05:cd:71:f4:39:8b:dc:a4:02:d6:51:
         5f:9d:81:5a:3a:11:30:3e:d0:91:b4:90:12:35:ba:97:60:32:
         12:6e:0b:1c:5f:67:58:4d:e9:e1:5a:27:6a:71:3d:96:a3:8f:
         db:82:96:17:4d:a7:e6:07:59:42:4a:42:df:35:1b:d2:d9:61:
         fd:be:c2:3b:c3:ea:82:64:fe:d9:33:e5:b3:cb:c9:e8:a2:8e:
         6d:5d:64:2a:c5:50:d5:ef:4f:5e:71:49:76:02:27:92:63:7b:
         09:29:78:fc:62:52:f0:f0:17:d3:a8:36:af:eb:68:89:69:9b:
         c0:a0:03:5a:3c:b7:b7:70:de:d2:72:76:4f:ee:65:c6:27:a3:
         8e:0b:f3:b3:c1:93:c8:37:ef:e5:6d:26:1f:16:21:67:19:89:
         b8:3e:06:8f:0d:60:fd:f4:c7:01:23:f1:8d:27:80:49:83:c6:
         67:85:ef:da:3e:d9:4d:3d:6c:96:be:7f:a7:e2:00:a3:1f:e1:
         86:ab:bd:8c:17:63:cd:9b:50:4d:14:bb:da:4e:d2:22:46:ab:
         e1:0b:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:22:49 2026 by rpki-client