Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/6C22134AE21D11EFA8E87E7DC4F9AE02.roa
File:                     6C22134AE21D11EFA8E87E7DC4F9AE02.roa (raw, json)
Hash identifier:          F72jxTcUR/Ij+JDhzrH2FoscAFJXuYuBAzmAY76TMZs=
Subject key identifier:   F5:C5:B5:FF:18:98:9F:15:7F:CF:68:6C:CE:1D:28:94:95:DA:A1:34
Certificate issuer:       /CN=A9116C90/serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
Certificate serial:       CB
Authority key identifier: 8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/6C22134AE21D11EFA8E87E7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:58:20 +0000
ROA not before:           Mon 03 Feb 2025 11:08:30 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153547
IP address blocks:        163.61.22.0/24 maxlen: 24
                          163.61.23.0/24 maxlen: 24
                          2001:df5:240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl
                          rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116C90, serialNumber=8F22D1F562A0507B11358F053DA42C8052D4B955
        Validity
            Not Before: Feb  3 11:08:30 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3e38c-9fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:6d:dd:d9:f9:34:85:f3:02:ac:f5:70:5d:
                    bc:c6:22:1a:5e:9c:6c:1c:15:a6:5d:9d:d5:4c:88:
                    f4:0b:dd:80:3b:1d:ab:b8:77:8c:0a:ff:f2:d0:b6:
                    42:f4:ee:69:d0:96:9c:4b:8d:62:56:cd:15:00:a7:
                    35:1d:05:ba:50:d4:cd:a1:f3:f4:71:b1:f3:4c:f3:
                    e1:97:10:bf:d3:ba:1c:64:25:5a:81:e3:ff:47:52:
                    c1:44:1b:5f:4e:d0:97:f7:56:4a:c7:37:4d:57:a0:
                    46:2b:19:5c:e5:37:41:b4:af:96:59:3a:a2:35:d9:
                    61:1a:ed:cb:01:1c:db:18:d1:63:7c:8d:2b:69:8d:
                    bd:64:36:9f:4c:0b:9a:b5:7a:46:78:06:2e:cd:ef:
                    3f:21:8b:08:2e:67:fd:06:04:a5:ed:6e:4b:ae:2c:
                    f8:53:cd:4f:e6:16:72:88:cd:49:de:fa:e9:8e:d8:
                    00:cb:3f:38:69:1b:86:c4:19:43:ac:ae:95:1c:81:
                    4e:4e:21:0e:df:76:d0:0c:15:1d:94:16:98:8c:fa:
                    2c:61:c1:21:ea:ce:43:d8:02:bc:12:44:b3:39:dd:
                    44:4e:cd:57:f0:d2:e4:7d:a0:41:24:b5:56:a1:90:
                    c1:e2:17:17:2d:ea:cc:3b:40:d0:33:08:b7:71:f1:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:B5:FF:18:98:9F:15:7F:CF:68:6C:CE:1D:28:94:95:DA:A1:34
            X509v3 Authority Key Identifier:
                keyid:8F:22:D1:F5:62:A0:50:7B:11:35:8F:05:3D:A4:2C:80:52:D4:B9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/jyLR9WKgUHsRNY8FPaQsgFLUuVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jyLR9WKgUHsRNY8FPaQsgFLUuVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116C90/31B45FECE21D11EF8A651B7DC4F9AE02/6C22134AE21D11EFA8E87E7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.22.0/23
                IPv6:
                  2001:df5:240::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:21:d5:df:79:d3:b2:7d:f0:fe:5d:b5:f1:87:8a:09:57:7a:
         8d:7a:e7:b8:08:c4:bd:ef:9a:52:91:df:ce:aa:8b:7b:83:78:
         57:1f:2e:dd:54:54:ee:a7:5c:42:0c:69:79:7a:9f:91:ee:36:
         a8:b8:31:cd:a4:01:e0:04:15:fe:c9:e3:27:22:87:93:c2:57:
         08:3d:ff:06:bb:e2:18:ee:6e:b5:7a:0a:16:2d:6b:03:41:09:
         74:c0:96:e4:1d:c7:67:90:20:70:88:28:e9:5d:39:6a:ce:12:
         3a:b0:6e:7c:88:f3:54:fa:51:52:76:cb:af:ad:fa:f4:d9:4e:
         35:8c:6a:07:fa:91:83:58:0e:e1:75:0d:cf:8d:59:5e:f0:03:
         3f:e8:fd:6a:68:45:f8:a8:37:21:9c:1a:d8:ef:4b:8e:05:eb:
         1c:7f:92:f8:24:74:5b:5c:ea:d9:89:46:49:a9:28:2a:94:00:
         35:32:c9:0f:34:c9:52:c2:28:b7:6f:0f:8a:d5:87:ac:92:5e:
         0e:7e:c7:2f:a8:56:9f:5b:99:11:d4:3b:11:08:2e:c1:15:31:
         4c:75:27:9e:ee:12:07:e1:b1:6e:c3:39:88:d1:48:d8:c9:bc:
         68:6a:d1:aa:ed:41:97:42:25:3a:bf:a1:5f:32:e6:7c:0f:df:
         51:48:d7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:27:58 2026 by rpki-client