Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/89040F5A341011F0808A991DC4F9AE02.roa
File:                     89040F5A341011F0808A991DC4F9AE02.roa (raw, json)
Hash identifier:          XSbMI+UlBWNVtMWApI1sBzS25fpV5xmpW9pr9KdQiGM=
Subject key identifier:   02:3A:82:9D:7E:10:86:49:A7:D2:18:7B:CA:F1:D3:15:83:06:59:63
Certificate issuer:       /CN=A9134A42/serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
Certificate serial:       CF
Authority key identifier: 80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/89040F5A341011F0808A991DC4F9AE02.roa
Signing time:             Sat 07 Mar 2026 06:42:58 +0000
ROA not before:           Sat 07 Mar 2026 06:42:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     137910
IP address blocks:        163.61.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl
                          rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134A42, serialNumber=80B18B81D47B61771304E0F7610D11A7C3406123
        Validity
            Not Before: Mar  7 06:42:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69abc8f2-3ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9d:5b:02:a1:f7:cf:8d:5c:2d:e5:42:d8:44:
                    24:fa:53:93:12:a3:e2:6a:97:5a:31:d0:4c:d5:7c:
                    25:e9:e1:cd:f0:f5:62:29:f8:ea:e8:8b:c3:1c:69:
                    88:50:25:2e:b3:be:4f:14:8a:7d:97:17:b6:9f:da:
                    da:1a:82:14:21:38:63:7f:e5:35:4c:40:9f:63:e6:
                    61:13:cf:b7:4b:88:94:6d:92:9c:ed:0b:41:3c:37:
                    26:7c:2c:13:b5:9e:d0:b1:83:76:e6:22:29:5b:46:
                    03:35:27:64:06:57:d9:63:82:d8:9b:3c:e0:59:a3:
                    61:27:69:79:fb:41:6c:9e:e3:bf:28:04:cb:0e:f0:
                    8a:ff:8a:c0:33:47:9b:10:a9:05:38:93:8c:61:21:
                    f6:63:16:9f:9d:a8:99:5f:3a:0a:09:98:9b:99:93:
                    5a:8e:22:2a:b1:1e:8c:7f:b3:6f:f4:58:2c:f0:04:
                    4e:30:a1:f3:ad:8a:a0:47:fa:45:08:48:62:c1:77:
                    8f:65:61:f8:d4:37:40:50:42:f7:06:a5:d3:70:a1:
                    d7:ba:77:17:7b:0e:e8:ee:b5:aa:e8:38:39:22:74:
                    d7:fd:7b:96:e5:c6:38:e8:7a:c1:61:02:0c:29:16:
                    69:50:54:02:a6:46:78:9b:1a:f4:dd:e5:b1:3c:03:
                    18:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3A:82:9D:7E:10:86:49:A7:D2:18:7B:CA:F1:D3:15:83:06:59:63
            X509v3 Authority Key Identifier:
                keyid:80:B1:8B:81:D4:7B:61:77:13:04:E0:F7:61:0D:11:A7:C3:40:61:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gLGLgdR7YXcTBOD3YQ0Rp8NAYSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134A42/1FB0F676EA8C11EF88C9085AC4F9AE02/89040F5A341011F0808A991DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:2f:e4:9b:85:b9:3d:0e:a1:04:cd:a1:3a:19:d7:ad:68:6d:
         22:74:dc:17:f2:ff:6c:bd:8c:68:85:0c:85:79:a6:97:3e:50:
         ff:19:64:a1:75:8c:81:0d:b0:e3:02:55:d4:54:ff:3f:7f:ee:
         0e:98:47:50:f9:2f:17:08:9a:72:15:8f:e5:8b:6d:bd:1f:3b:
         ec:e8:ff:e3:26:d4:4c:12:5d:03:bb:06:1d:68:f3:47:70:ce:
         f3:b1:1b:00:83:e3:2c:21:ab:a5:ab:68:91:c5:ce:c4:99:f6:
         54:f8:1f:69:ae:c2:38:6d:72:fd:54:ab:8b:e8:7f:e3:30:35:
         e8:95:c2:d6:ce:cb:9d:7f:78:e3:ac:12:7a:a6:64:1a:f0:ce:
         45:50:be:0a:20:17:22:60:7e:dc:1e:7b:a2:d9:ed:60:9f:57:
         0e:18:ce:4b:41:f6:3a:cc:25:ce:aa:db:5e:19:d5:67:9a:1e:
         5b:80:9b:19:e2:7c:31:59:6a:51:2a:6d:0f:2e:60:0e:fd:fa:
         37:0a:d5:07:4a:ff:db:2d:39:53:6b:85:0a:53:61:29:60:76:
         07:99:cb:dc:d2:01:6d:94:eb:ea:0d:60:53:9a:fc:b2:0b:d1:
         a1:ec:35:ef:58:79:55:39:38:83:83:9e:c3:a2:89:4f:b2:e9:
         70:bb:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:27:11 2026 by rpki-client