Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/89283C80809211EB938F4016C4F9AE02.roa
File:                     89283C80809211EB938F4016C4F9AE02.roa (raw, json)
Hash identifier:          PcG2tLkQnz4RBEfZ0X23N/B46sxcJ2UvagoPDeV/SG0=
Subject key identifier:   40:C5:66:C3:42:7E:17:29:F3:CF:87:33:56:5C:DD:B9:E2:0F:EB:39
Certificate issuer:       /CN=A91F89C1/serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A
Certificate serial:       06FF
Authority key identifier: CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/89283C80809211EB938F4016C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:57:29 +0000
ROA not before:           Thu 24 Jul 2025 23:03:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     132321
IP address blocks:        150.191.0.0/16 maxlen: 16
                          150.191.0.0/17 maxlen: 17
                          150.191.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl
                          rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89C1, serialNumber=CA32D511462AB42618A88DBA05869AFEBEA0E51A
        Validity
            Not Before: Jul 24 23:03:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a429a9-4dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:86:f7:17:3e:5f:33:7a:cf:19:d4:e8:80:
                    52:9b:f4:6d:e3:4f:19:26:55:31:c7:15:7a:ca:2b:
                    b1:ed:d7:91:ef:f2:31:b7:d4:e2:fd:e1:66:b6:f4:
                    5e:81:9b:4d:f9:f5:2e:58:34:d3:6d:76:cd:88:09:
                    f3:4f:32:3c:af:d4:71:be:2f:00:d4:ff:29:81:ff:
                    95:1d:ab:81:6f:bf:21:22:9b:4f:c0:2b:11:85:20:
                    72:f5:bd:bf:ef:79:1d:ee:53:86:ea:86:70:a6:7d:
                    20:26:e7:02:87:a4:5e:59:03:2e:df:80:e8:c0:75:
                    1b:6e:f6:6e:b8:b3:a0:a2:51:71:9c:bb:42:f9:83:
                    6c:8b:ab:f9:85:d7:01:31:e4:97:cf:81:74:50:17:
                    eb:9a:b8:30:d2:b2:8a:5c:5e:28:ad:c3:1f:89:f3:
                    b5:19:bf:ae:4d:ff:04:b1:dc:9d:6b:7e:bb:f5:3f:
                    11:11:a3:ee:84:62:42:e1:68:65:b3:d4:9d:c4:52:
                    f2:49:c3:ae:03:a6:2b:77:8f:49:bb:47:53:10:56:
                    f7:74:32:4a:6c:15:ba:c8:40:8b:ee:17:0a:45:3f:
                    1d:da:0e:12:06:a9:7d:c8:c9:cd:8d:68:68:4f:22:
                    57:35:3a:9d:dd:26:21:a7:b2:1d:f5:b7:33:67:1f:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C5:66:C3:42:7E:17:29:F3:CF:87:33:56:5C:DD:B9:E2:0F:EB:39
            X509v3 Authority Key Identifier:
                keyid:CA:32:D5:11:46:2A:B4:26:18:A8:8D:BA:05:86:9A:FE:BE:A0:E5:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/yjLVEUYqtCYYqI26BYaa_r6g5Ro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yjLVEUYqtCYYqI26BYaa_r6g5Ro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/13ED6802808611EBB4C6D116C4F9AE02/89283C80809211EB938F4016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:b5:21:d3:82:9b:b0:a2:3d:7b:35:aa:e7:91:85:eb:04:68:
         e2:37:cb:72:54:d1:1d:83:a4:3f:74:5b:ba:17:4d:79:19:8f:
         26:2a:fa:85:4c:43:72:b4:92:db:2f:d6:8b:f1:cc:16:b9:0d:
         45:ed:9f:7d:95:53:ab:d6:9b:64:88:e3:34:0a:af:c5:40:8b:
         5c:db:85:bf:5b:c9:a5:b1:84:4f:6c:a2:5e:a4:38:bc:93:9e:
         65:64:7e:41:12:22:98:0e:4b:99:c2:ee:12:93:df:05:b8:4b:
         5e:9e:39:74:8c:b9:cc:ae:b5:c9:57:bc:18:f5:64:21:6b:5c:
         26:24:ac:60:2e:ab:88:73:55:26:cc:65:02:dc:3e:a6:55:ce:
         a9:0a:36:cb:d3:40:54:e8:04:e0:14:41:be:33:29:fc:50:83:
         44:d2:c6:51:3e:7d:16:86:9e:e2:41:ec:39:46:f2:68:f8:a5:
         8b:bd:92:0d:f6:02:1d:f6:99:b7:8c:56:2f:a3:fe:53:20:a5:
         21:9a:ec:61:a6:90:c9:7b:31:c9:07:08:dc:d3:7c:77:ac:35:
         a5:7a:2c:6d:51:5d:8c:cb:19:7e:1a:0a:b0:14:37:cd:c8:73:
         5c:d0:30:da:3d:c9:6b:59:72:e3:3c:4e:73:66:aa:7d:77:b9:
         6d:c6:11:6c
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgICBv8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Rjg5QzExMTAvBgNVBAUTKENBMzJENTExNDYyQUI0MjYxOEE4OERCQTA1ODY5QUZF
QkVBMEU1MUEwHhcNMjUwNzI0MjMwMzQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MjlhOS00ZGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr/eG9xc+XzN6zxnU6IBSm/Rt408ZJlUxxxV6yiux7deR7/Ixt9Ti/eFmtvRe
gZtN+fUuWDTTbXbNiAnzTzI8r9Rxvi8A1P8pgf+VHauBb78hIptPwCsRhSBy9b2/
73kd7lOG6oZwpn0gJucCh6ReWQMu34DowHUbbvZuuLOgolFxnLtC+YNsi6v5hdcB
MeSXz4F0UBfrmrgw0rKKXF4orcMfifO1Gb+uTf8Esdyda3679T8REaPuhGJC4Whl
s9SdxFLyScOuA6Yrd49Ju0dTEFb3dDJKbBW6yECL7hcKRT8d2g4SBql9yMnNjWho
TyJXNTqd3SYhp7Id9bczZx8EfQIDAQABo4ICXzCCAlswHQYDVR0OBBYEFEDFZsNC
fhcp88+HM1Zc3bniD+s5MB8GA1UdIwQYMBaAFMoy1RFGKrQmGKiNugWGmv6+oOUa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8xM0VENjgwMjgw
ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi95akxWRVVZcXRDWVlxSTI2QllhYV9yNmc1
Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lqTFZFVVlxdENZWXFJMjZCWWFhX3I2ZzVSby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Rjg5QzEvMTNFRDY4MDI4MDg2MTFFQkI0QzZEMTE2QzRGOUFFMDIvODkyODNDODA4
MDkyMTFFQjkzOEY0MDE2QzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAlr8wDQYJKoZIhvcNAQELBQADggEBACW1IdOCm7CiPXs1queRhesE
aOI3y3JU0R2DpD90W7oXTXkZjyYq+oVMQ3K0ktsv1ovxzBa5DUXtn32VU6vWm2SI
4zQKr8VAi1zbhb9byaWxhE9sol6kOLyTnmVkfkESIpgOS5nC7hKT3wW4S16eOXSM
ucyutclXvBj1ZCFrXCYkrGAuq4hzVSbMZQLcPqZVzqkKNsvTQFToBOAUQb4zKfxQ
g0TSxlE+fRaGnuJB7DlG8mj4pYu9kg32Ah32mbeMVi+j/lMgpSGa7GGmkMl7MckH
CNzTfHesNaV6LG1RXYzLGX4aCrAUN83Ic1zQMNo9yWtZcuM8TnNmqn13uW3GEWw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:08:43 2026 by rpki-client