Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa
File:                     89A73D46772311EBB972032EC4F9AE02.roa (raw, json)
Hash identifier:          JfhzVq/e/tDeRVv2XI7V7GA9Ql0uL8Bzexb3NfT69YE=
Subject key identifier:   19:13:CA:F4:38:21:D2:FE:87:B6:77:B0:89:F4:79:00:4B:EB:04:5A
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       384E
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa
Signing time:             Tue 30 Jun 2026 15:10:24 +0000
ROA not before:           Tue 30 Jun 2026 15:10:24 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     135538
IP address blocks:        61.45.253.0/24 maxlen: 24
                          2401:4601:253::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14414 (0x384e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Jun 30 15:10:24 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a43dc60-a69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f8:a6:5d:e8:c0:12:0f:c5:74:a0:80:9e:6d:
                    fb:9b:7b:0f:c4:e9:2b:57:87:ff:5e:94:d9:cc:32:
                    89:98:89:2f:66:ba:4d:b8:f1:08:ac:68:77:0d:d9:
                    4f:fb:fc:aa:19:b9:bd:01:33:71:78:9b:1c:63:d3:
                    2c:1f:91:2a:bb:ec:14:42:ae:6e:cc:9b:c5:7a:ba:
                    7f:f5:7d:bc:32:d9:a5:6f:5a:ba:04:8e:31:7c:e9:
                    79:98:b3:59:1f:90:90:d0:a5:73:38:30:3d:a0:69:
                    8d:ac:fb:af:de:37:87:61:56:01:3d:44:5c:6d:46:
                    a4:2b:e5:18:20:0c:1c:18:e2:a7:8f:ca:52:bf:30:
                    0c:c3:09:12:a6:85:b8:24:df:91:6b:64:7a:3a:6a:
                    c6:f4:a9:a4:c5:14:c3:36:78:a9:d6:bc:62:4b:40:
                    50:9e:8d:1a:f3:32:42:92:ef:81:48:eb:66:68:ac:
                    f5:69:40:13:7b:10:72:7e:a3:e8:f4:0e:fe:30:5b:
                    50:d8:1f:e5:8f:60:9f:f3:74:ad:88:fe:da:92:79:
                    fa:df:76:d7:7d:91:13:be:ca:57:89:e0:ed:b9:79:
                    04:1a:e4:0b:51:ae:84:23:ec:25:db:21:a6:8f:e7:
                    c6:d2:35:0c:23:91:9c:cc:be:a2:71:7f:57:be:9c:
                    7b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:13:CA:F4:38:21:D2:FE:87:B6:77:B0:89:F4:79:00:4B:EB:04:5A
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.253.0/24
                IPv6:
                  2401:4601:253::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:65:f9:d7:49:ae:1c:9c:cf:a0:0f:c2:dd:db:23:f4:30:3a:
         dd:80:32:da:7b:8f:7f:02:d2:36:7a:f7:8a:c3:7d:0c:fc:a1:
         ec:fe:43:e5:61:95:32:0c:10:9c:c2:0f:5f:96:fe:90:4b:53:
         81:3b:84:83:93:84:08:c8:97:31:02:96:e0:fc:24:04:8f:00:
         05:1d:6b:a5:34:6e:f4:bf:d2:53:61:2b:15:9e:71:ae:de:8f:
         3c:51:58:9d:c8:8e:e0:b5:69:22:7a:1c:61:76:a9:11:68:d2:
         de:9d:36:96:d0:04:d1:21:8b:33:af:80:38:ca:50:36:25:fa:
         e8:9f:18:a4:de:00:ad:6b:3f:6e:3e:f8:7d:a0:fa:c6:8c:bb:
         b8:a8:4b:19:fd:ab:0d:47:28:fe:c9:9b:28:2a:69:84:15:d9:
         14:2e:e8:2e:05:d0:2a:a2:2b:2a:4e:a4:9d:53:7e:8f:75:3a:
         6c:cb:76:e6:d5:98:92:24:8a:77:ba:a4:00:e4:d6:29:1e:6e:
         bb:ac:36:c8:fe:6f:ee:75:b5:ac:af:47:ad:24:aa:c0:af:b2:
         5f:d3:b5:24:8e:76:1e:db:d4:fb:8c:91:64:58:5b:a0:8b:3a:
         bf:0b:26:e3:fc:90:d2:08:bd:ea:75:25:9e:bb:fe:80:7f:3c:
         32:46:35:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:48 2026 by rpki-client