Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/89D7E6869E9211EF8726F76AC4F9AE02.roa
File:                     89D7E6869E9211EF8726F76AC4F9AE02.roa (raw, json)
Hash identifier:          VyYP9wSjKOiDhQAeFQwUCWE8o44zFR3WDi4mofWlQgc=
Subject key identifier:   AA:8B:43:9B:66:4D:98:79:99:01:19:1A:97:D7:4F:9B:53:A5:64:BD
Certificate issuer:       /CN=A913B4BE/serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
Certificate serial:       0184
Authority key identifier: DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/89D7E6869E9211EF8726F76AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:30:09 +0000
ROA not before:           Sat 17 May 2025 05:05:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152482
IP address blocks:        2001:df3:7940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl
                          rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:43:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B4BE, serialNumber=DD36E45C71D3D92B3CD1A72D5F5AB325B346ADCA
        Validity
            Not Before: May 17 05:05:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a590e1-13a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:ff:52:a2:fb:fa:97:0b:68:da:50:60:85:
                    30:b4:02:27:a3:8e:af:08:28:96:42:c6:41:1a:c0:
                    16:8a:66:ae:18:21:d5:33:8d:30:da:47:6d:f9:83:
                    68:19:6f:23:b7:d7:70:be:8e:28:17:3e:54:86:6f:
                    31:1d:a5:56:44:61:de:43:af:32:52:25:06:32:8e:
                    79:68:39:0f:8c:7c:63:35:00:93:2c:60:85:ec:cb:
                    5b:64:8d:a7:5d:46:49:80:2f:64:ae:aa:79:c0:bf:
                    ba:89:ea:9a:37:bd:4f:68:e2:35:23:d9:80:1b:99:
                    f6:f2:65:16:dc:c9:82:a3:cc:72:c7:b9:b8:3d:2d:
                    13:b2:68:d6:b9:35:84:7a:e2:ce:74:13:1e:dc:43:
                    f6:b3:90:96:fc:8e:fd:bf:45:a5:e8:ff:c9:49:78:
                    da:31:0c:22:3f:4b:50:c6:0f:95:04:e1:d6:3a:62:
                    cc:98:f2:ad:06:19:e7:8f:ac:14:3b:89:3f:b1:ab:
                    49:ee:df:83:13:fb:e5:ec:e6:6c:17:0f:ac:55:24:
                    71:74:10:81:92:2f:f9:06:97:30:f9:cf:e4:5e:68:
                    0a:b5:ac:1e:dd:c6:3d:cc:39:0a:48:20:ee:44:79:
                    dc:15:d4:29:48:2f:ef:63:2f:a7:16:a6:0e:7d:03:
                    7b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8B:43:9B:66:4D:98:79:99:01:19:1A:97:D7:4F:9B:53:A5:64:BD
            X509v3 Authority Key Identifier:
                keyid:DD:36:E4:5C:71:D3:D9:2B:3C:D1:A7:2D:5F:5A:B3:25:B3:46:AD:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/3TbkXHHT2Ss80actX1qzJbNGrco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3TbkXHHT2Ss80actX1qzJbNGrco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B4BE/78BD3224CCF711EE9E89D67AC4F9AE02/89D7E6869E9211EF8726F76AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7940::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:88:7b:26:02:3e:4a:9a:ca:28:97:bb:cd:f4:70:5b:bb:8b:
         bf:38:a3:7c:46:27:01:f1:e5:50:93:b9:59:c1:d5:75:32:ab:
         0c:d7:14:ee:99:32:8f:a7:32:db:7a:6d:72:e1:f5:0f:57:78:
         1d:5b:a1:1d:46:b4:d1:c7:01:a3:72:b4:51:31:1b:14:18:07:
         66:07:4e:b8:27:9d:7a:f3:2c:27:49:4b:cb:71:fe:37:a1:b1:
         c2:71:63:d0:aa:5e:97:43:fc:17:9f:43:b1:00:f4:e8:e4:1a:
         36:8d:fe:24:11:4a:70:7c:04:72:34:28:4d:ab:ee:c9:16:f5:
         78:ad:8b:d6:d7:ce:34:d3:79:e4:b7:9f:fc:15:d6:59:a0:5c:
         c7:a8:5a:dc:71:dd:7f:70:71:6c:48:4a:e9:5c:80:f0:3f:fa:
         e3:1f:ce:c7:1a:a9:7d:2d:5e:84:2e:db:53:9d:aa:38:b2:29:
         9f:05:0f:97:24:7e:8e:77:d0:a0:5a:6f:97:e7:27:16:24:7c:
         8f:4f:ba:31:88:9a:35:da:14:1a:d7:e3:dd:0c:51:a6:63:d6:
         07:d1:aa:8c:0a:13:13:6f:88:f8:e3:ab:6c:68:fd:3e:c8:ea:
         e7:8e:4b:a9:25:3e:52:53:60:67:08:69:4b:0b:2d:c2:d4:af:
         10:15:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:28:20 2026 by rpki-client