Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/3F0FF378595811F18FC123129D833773.roa
File:                     3F0FF378595811F18FC123129D833773.roa (raw, json)
Hash identifier:          +kkTC+5CaX8V5LXnChQNjqJe+X3RoBoVZ1fsEx/5vtw=
Subject key identifier:   B8:B3:36:93:0C:37:48:B1:9E:2B:92:C8:16:E3:E8:FB:A0:71:CB:3A
Certificate issuer:       /CN=A911829D/serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
Certificate serial:       0127
Authority key identifier: 3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/3F0FF378595811F18FC123129D833773.roa
Signing time:             Tue 26 May 2026 23:38:32 +0000
ROA not before:           Tue 26 May 2026 23:38:32 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151956
IP address blocks:        202.61.80.0/23 maxlen: 24
                          2401:4420::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911829D, serialNumber=3C18CD8B5B01D50237640C26C0377546D804FDB4
        Validity
            Not Before: May 26 23:38:32 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a162ef8-edac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:b0:75:2e:06:02:57:1a:8c:73:59:58:25:
                    5d:2e:30:07:ff:6c:9d:86:c4:c0:21:79:52:2a:9c:
                    44:5f:40:c3:b9:4d:0a:3d:46:26:b5:99:58:2a:9a:
                    50:71:c2:31:8a:92:3c:93:b5:23:8e:fb:7b:7f:41:
                    b8:d7:62:12:ba:bc:47:b3:81:33:78:43:a8:35:4e:
                    6c:de:58:64:ce:a5:af:88:a4:46:aa:5d:41:4e:41:
                    52:46:5a:6c:ee:79:a0:db:67:ed:cb:3f:0a:a8:ea:
                    0e:67:00:5a:ea:68:36:06:62:a0:dd:20:b1:78:be:
                    6f:fe:c2:35:b9:14:53:70:4c:6a:92:91:0c:6d:ae:
                    f2:ec:c0:08:15:b2:29:d5:23:86:94:c9:2b:8c:cb:
                    3c:e9:1a:79:d2:25:e9:2f:ae:b1:e0:60:f1:e1:e2:
                    b6:9d:59:c4:68:79:9b:de:cd:34:46:6b:91:eb:80:
                    bf:1c:42:97:6c:f9:ca:10:0b:a5:3e:5e:7b:a5:1c:
                    3f:9b:54:64:1b:04:f9:a7:b8:0b:2d:74:71:1e:2c:
                    40:0d:db:c9:ff:a5:f3:7e:b0:f3:eb:d6:1c:1e:d5:
                    a0:11:76:5c:1f:6c:cd:c2:da:c9:b6:62:65:5c:23:
                    2e:02:62:ad:08:91:ca:da:11:a9:1e:c3:35:8e:9d:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B3:36:93:0C:37:48:B1:9E:2B:92:C8:16:E3:E8:FB:A0:71:CB:3A
            X509v3 Authority Key Identifier:
                keyid:3C:18:CD:8B:5B:01:D5:02:37:64:0C:26:C0:37:75:46:D8:04:FD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PBjNi1sB1QI3ZAwmwDd1RtgE_bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911829D/5125526E9C6D11EF83A8BD16C4F9AE02/3F0FF378595811F18FC123129D833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.80.0/23
                IPv6:
                  2401:4420::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:e3:6d:8b:c5:1c:f9:7a:04:04:7d:51:7b:7e:9e:3c:5c:59:
         84:d3:d1:00:af:ea:9b:54:df:bc:30:08:fc:ee:b0:1d:50:a8:
         32:30:32:3c:9f:79:56:de:6c:f0:cb:58:4e:11:2c:95:b6:62:
         b0:d1:7d:c7:89:57:27:29:63:30:fa:da:c6:03:ff:8c:b5:bf:
         47:2a:b5:ad:c5:2d:62:23:a2:76:77:53:78:19:e9:bb:9e:29:
         f4:6e:e2:0c:da:6f:05:33:5d:2a:0c:8f:e6:ad:a4:7b:c4:90:
         4a:4a:6e:f8:e6:55:10:4d:d4:cb:36:91:b9:63:37:22:b1:5b:
         04:b2:2b:7b:37:c4:54:47:d6:8f:84:e5:b6:d8:4b:e4:9f:a2:
         d2:f2:f2:45:ea:b0:d4:2a:bf:73:f5:27:9a:73:17:ec:82:af:
         ea:13:84:89:00:f2:e0:6b:7d:ad:39:ec:52:1b:7d:b0:05:4f:
         b3:84:03:bb:d3:46:21:66:91:8f:28:24:40:a7:b9:b0:33:d3:
         a2:ab:19:32:12:50:2f:cf:d0:c1:d5:55:7f:9b:66:0a:22:ca:
         3e:7d:4c:b3:de:6b:d9:3d:69:7f:13:1a:91:36:61:57:89:08:
         08:60:b5:77:b5:7c:ec:18:1c:75:46:44:66:58:ec:63:a9:b5:
         1d:1b:1d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:58:20 2026 by rpki-client