Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
File:                     2235EF78F12011F0BFBF3F154E6F56BC.roa (raw, json)
Hash identifier:          XIAZRRCeQ8xZFQbG4kWb91/7TOTp31whZgTNDjb+pgQ=
Subject key identifier:   F8:76:97:D4:65:73:3B:B4:E9:5D:92:E5:2A:16:08:6C:F0:A2:3C:63
Certificate issuer:       /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial:       1F
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
Signing time:             Sun 01 Mar 2026 05:45:52 +0000
ROA not before:           Wed 14 Jan 2026 08:07:56 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134186
IP address blocks:        163.61.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
        Validity
            Not Before: Jan 14 08:07:56 2026 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3d290-6339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:12:b0:b3:6e:83:84:4f:c2:bc:16:66:bc:
                    19:60:c5:80:20:46:5b:32:b0:53:b7:d4:22:5d:d1:
                    3b:5f:9b:29:7a:2d:ea:ad:27:a2:ea:de:5c:c8:fc:
                    d1:3e:04:00:40:cf:75:b9:c3:fc:87:ea:f3:99:ba:
                    e8:b7:ac:e2:7d:d0:0d:d0:b0:a8:49:d2:08:9b:f8:
                    2e:ea:b7:6d:1b:26:10:78:f2:33:42:a8:6b:1f:b5:
                    81:0a:a3:e7:bc:78:1d:5b:c7:ff:76:c1:33:c5:ea:
                    7f:5d:c6:b2:6f:35:fd:0d:dd:2e:a7:13:1a:94:df:
                    9e:56:b3:0a:92:4b:52:44:3d:a4:56:59:9a:3e:1d:
                    30:c4:6d:b3:f8:bb:9c:78:71:ff:f7:02:76:e1:02:
                    17:f6:04:b8:84:63:cf:5c:6c:4d:7e:bb:d2:95:8b:
                    c3:6c:e0:e2:33:43:1e:cb:d5:27:ec:61:95:6f:55:
                    4a:ce:bc:aa:15:fd:14:b7:5d:21:8a:39:ff:d1:37:
                    e7:4c:af:57:8b:9c:92:96:40:2c:78:53:af:16:00:
                    c4:bc:e2:59:cc:f4:35:af:4e:6d:4d:86:d1:31:57:
                    82:84:5b:39:8e:cc:da:c6:ce:f4:78:a3:5f:e9:a5:
                    06:d8:7d:9b:b4:07:ef:2f:ce:fa:17:98:a5:65:77:
                    ed:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:76:97:D4:65:73:3B:B4:E9:5D:92:E5:2A:16:08:6C:F0:A2:3C:63
            X509v3 Authority Key Identifier:
                keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:6c:c9:31:06:3b:43:5b:00:4e:26:f9:55:6e:c6:36:c4:31:
         7d:28:20:4c:75:a3:6f:d4:cc:13:0d:a1:7e:1a:c5:23:d6:aa:
         a4:c7:d0:72:e5:23:cd:f8:e7:19:2d:c8:5a:fd:20:26:4d:fb:
         81:86:a9:2b:91:65:c4:98:5f:a7:8d:07:a2:d5:14:a3:32:53:
         7e:bd:65:f9:f6:fc:20:df:5a:9f:bd:20:48:6e:38:80:fb:a3:
         fc:8f:7e:a8:47:d7:a4:54:d4:22:23:a7:96:c8:18:db:5c:2c:
         74:4a:4e:b7:da:9f:bc:75:c8:2c:71:bf:ad:22:f2:fb:db:c8:
         92:4b:95:12:3a:97:92:32:75:95:ee:f5:46:ed:d1:20:50:2c:
         2c:ff:1d:09:6c:7e:63:7d:20:02:e8:58:13:f2:91:0a:09:a2:
         ba:dc:f8:5b:e1:68:91:ac:ee:56:c4:73:c6:e4:09:2a:e8:44:
         c9:d6:11:1c:a6:af:43:0a:77:ed:82:8f:de:57:0e:6d:b3:40:
         ca:d6:76:86:cb:35:27:d2:48:a8:7f:80:12:98:9e:82:e7:1d:
         3d:56:17:b4:30:f2:6a:4a:7a:9d:99:64:1f:ec:c5:df:22:0d:
         14:48:45:44:10:c9:04:b7:d1:11:54:fb:c5:85:53:cb:58:47:
         12:c5:35:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:20:47 2026 by rpki-client