Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/84E249E030D711F1A9283A38AD833773.roa
File:                     84E249E030D711F1A9283A38AD833773.roa (raw, json)
Hash identifier:          aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=
Subject key identifier:   D3:74:45:A4:6C:20:5A:FF:7E:5D:CE:6B:40:0E:2F:DF:BA:18:75:0C
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       0100
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/84E249E030D711F1A9283A38AD833773.roa
Signing time:             Thu 09 Apr 2026 15:28:57 +0000
ROA not before:           Thu 09 Apr 2026 15:28:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     139870
IP address blocks:        163.61.212.0/23 maxlen: 23
                          163.61.212.0/24 maxlen: 24
                          163.61.213.0/24 maxlen: 24
                          2001:df5:21c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: Apr  9 15:28:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d7c5b8-42c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c0:09:ec:11:cd:94:83:be:dc:07:37:c5:55:
                    56:93:aa:5c:e3:7e:49:44:b5:22:b0:0f:f9:40:a1:
                    5b:b6:d6:47:71:93:e3:eb:de:a7:6c:96:c7:a4:65:
                    64:e4:e7:60:d8:d3:ba:f6:7f:96:ea:be:8d:de:53:
                    22:d7:cb:2e:1e:5e:de:2d:1b:6a:93:e3:f1:41:f5:
                    3d:d6:84:07:54:19:08:d3:06:5e:b9:04:35:15:5d:
                    29:14:1a:fe:94:48:27:18:d7:54:3e:db:64:55:33:
                    4b:f4:b0:cc:c1:21:36:9f:ba:2a:4d:80:ce:8f:db:
                    9b:7a:b2:f9:ef:ff:53:34:13:02:50:76:7f:bd:14:
                    6d:9f:bd:43:9e:80:c3:eb:ea:2e:bd:22:61:ce:42:
                    66:2d:86:2e:32:3e:f6:f7:92:a6:10:0d:fa:2a:35:
                    b8:14:a7:5f:8f:24:40:a0:88:e1:c3:fa:2d:77:41:
                    7d:be:5d:6c:af:6d:68:06:20:5f:3d:1a:d8:28:ba:
                    9a:85:99:25:9c:73:0c:43:6f:2a:fd:22:a0:6d:00:
                    6d:f7:08:a2:f8:4b:7e:4a:f1:7d:76:83:e8:15:4c:
                    f4:6c:15:e2:75:2a:d4:01:6c:41:05:36:0c:70:60:
                    26:08:13:24:2f:65:ca:ae:85:9d:ec:34:f8:93:3a:
                    b0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:74:45:A4:6C:20:5A:FF:7E:5D:CE:6B:40:0E:2F:DF:BA:18:75:0C
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/84E249E030D711F1A9283A38AD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.212.0/23
                IPv6:
                  2001:df5:21c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:6d:8c:87:69:bd:09:4b:f1:3c:92:53:67:14:38:2e:a9:6f:
         bb:e9:12:d9:00:67:03:58:98:78:dd:08:85:c8:62:e1:a0:9a:
         8e:4b:ed:20:37:6b:6b:57:ea:64:f5:34:22:fe:6b:19:bc:aa:
         53:c9:bf:20:f1:e1:61:ea:72:b4:4f:9b:76:af:f1:ea:77:58:
         75:c4:2f:ac:ed:0c:ea:f1:f5:4e:95:87:17:9c:8a:8f:b3:c7:
         d0:22:eb:80:eb:f2:b1:48:5f:f3:51:ea:e7:f1:6b:7a:a5:f8:
         d1:5e:7f:50:c2:f0:88:ab:ad:b3:35:24:f9:22:b8:08:e2:21:
         30:7f:52:0f:44:1d:5a:04:ce:c5:3c:55:87:4e:89:2b:26:92:
         02:2c:c3:88:2c:ed:38:3e:8f:3b:cd:22:01:f0:21:f3:53:9d:
         81:8e:43:66:e8:03:30:6c:6b:05:b9:7b:d7:42:5c:05:31:8f:
         f9:61:2c:a1:cd:29:e7:41:d7:da:7d:e6:1c:61:51:e4:e9:fa:
         03:34:53:2e:87:4b:70:d1:8e:b1:ad:8b:0e:9e:03:ef:90:bc:
         9d:cb:eb:fd:1d:50:80:4e:82:53:82:94:8e:8f:fd:39:83:72:
         67:69:2f:06:84:dd:e2:25:db:ef:87:09:60:51:77:f9:e3:cd:
         3b:fa:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:28 2026 by rpki-client