Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
File:                     61A65BF2C35011EE95366E18C4F9AE02.roa (raw, json)
Hash identifier:          guwFqD3altsZHbc1dAy4+jYBLpjvPALMbPm6i0aYzrc=
Subject key identifier:   DA:79:94:AA:CE:1C:A3:2B:5B:F6:DD:16:B2:22:BB:81:0F:F9:F2:AB
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       35EF
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 15:10:45 +0000
ROA not before:           Tue 28 Jul 2026 15:10:45 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     38228
IP address blocks:        210.246.94.0/24 maxlen: 24
                          210.246.95.0/24 maxlen: 24
                          2403:c000:1401::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13807 (0x35ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 28 15:10:45 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a68c675-f172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:22:67:89:d6:d2:74:d8:3e:2a:d5:2e:bd:fa:
                    84:0e:63:9b:88:23:5c:9e:9f:05:15:a7:f9:9e:05:
                    24:ba:5f:d0:92:f4:54:87:1f:c1:a8:57:14:76:9e:
                    69:f0:66:cf:f8:4b:18:05:72:76:fe:55:b7:77:e2:
                    6f:f2:0c:07:c8:c3:f4:e7:e6:9f:ad:8c:34:07:8c:
                    8f:fe:df:c7:65:f1:44:23:b1:69:b6:a6:f8:10:ed:
                    56:0c:6b:34:e8:08:d8:0e:69:37:0d:18:ce:ec:ba:
                    54:22:1b:de:90:2b:78:3d:e2:27:60:81:7c:3a:72:
                    2d:61:ee:80:78:2b:7d:70:5e:05:46:31:31:4a:14:
                    a0:46:a2:26:9e:e1:f7:2e:7b:69:2c:ad:89:b3:10:
                    7e:e9:ef:11:28:b5:fb:b9:ec:f2:be:3b:bf:01:b9:
                    0e:fd:11:e2:05:cc:ca:63:dd:63:b9:70:22:b1:97:
                    e1:6e:35:99:60:2b:e3:fb:ae:86:6f:3b:66:5e:34:
                    b1:ce:cd:60:8f:f1:4f:88:32:50:57:1c:c2:7d:0f:
                    38:06:aa:8d:b6:6b:a3:d6:35:87:96:f2:6c:0c:e2:
                    a9:97:d2:62:dc:d0:dc:8c:6a:25:06:72:1c:4c:98:
                    97:34:74:e4:49:2a:73:a3:8b:ca:bd:13:aa:01:9f:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:79:94:AA:CE:1C:A3:2B:5B:F6:DD:16:B2:22:BB:81:0F:F9:F2:AB
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/61A65BF2C35011EE95366E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.94.0/23
                IPv6:
                  2403:c000:1401::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:82:b8:ce:82:7d:e4:68:fe:75:13:2f:f2:52:28:2e:55:e5:
         d0:6f:b1:17:17:e9:53:6f:fa:2e:91:ea:e3:f0:1a:73:69:c3:
         1f:64:d0:37:49:d6:20:c3:07:26:49:c3:ae:44:ff:55:70:68:
         32:2c:11:9f:5b:34:d4:1e:bf:9f:13:51:6b:67:da:aa:c9:61:
         7a:86:25:8c:1c:48:03:a3:e3:dc:c8:fa:43:18:80:a7:50:f6:
         23:58:ef:0a:99:f8:cd:65:87:7c:22:0a:b8:3e:05:3c:74:23:
         cc:ba:26:e4:be:4b:56:c3:52:76:ad:1a:d0:af:a4:8c:34:47:
         c3:7c:4d:1e:68:8b:56:34:02:b8:23:13:f3:f3:41:da:05:32:
         37:e1:0a:7a:78:96:a2:c0:4e:3e:2c:d3:8a:bd:4e:8e:9a:fb:
         df:30:d1:e9:63:06:93:d6:bf:b1:49:f2:d3:ba:01:be:8e:d8:
         f6:06:ea:82:b8:cf:df:8f:34:01:74:aa:8b:05:59:66:cd:6e:
         2a:2e:bd:ff:93:52:3d:0a:41:dc:dc:93:9a:1f:df:1f:46:60:
         6c:21:53:75:78:08:42:67:01:40:c5:e0:73:29:b9:a1:81:d5:
         b1:4c:05:6d:12:e3:97:ec:0c:6a:1c:33:44:21:21:07:7c:41:
         96:3b:f4:af
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICNe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM1QjAxMTAvBgNVBAUTKDdBOTYxNzY5NTQ5RTBBQUQwQTlCRjk5MjU2ODNCQUVG
NzMzQTJGMUEwHhcNMjYwNzI4MTUxMDQ1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTY4YzY3NS1mMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsyJnidbSdNg+KtUuvfqEDmObiCNcnp8FFaf5ngUkul/QkvRUhx/BqFcUdp5p
8GbP+EsYBXJ2/lW3d+Jv8gwHyMP05+afrYw0B4yP/t/HZfFEI7Fptqb4EO1WDGs0
6AjYDmk3DRjO7LpUIhvekCt4PeInYIF8OnItYe6AeCt9cF4FRjExShSgRqImnuH3
LntpLK2JsxB+6e8RKLX7uezyvju/AbkO/RHiBczKY91juXAisZfhbjWZYCvj+66G
bztmXjSxzs1gj/FPiDJQVxzCfQ84BqqNtmuj1jWHlvJsDOKpl9Ji3NDcjGolBnIc
TJiXNHTkSSpzo4vKvROqAZ/9+wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNp5lKrO
HKMrW/bdFrIiu4EP+fKrMB8GA1UdIwQYMBaAFHqWF2lUngqtCpv5klaDuu9zOi8a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzVCMC80MEM4RDVBNjFE
ODMxMUUyODIzQTVGRDgwOEIwMkNEMi9lcFlYYVZTZUNxMEttX21TVm9PNjczTTZM
eG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VwWVhhVlNlQ3EwS21fbVNWb082NzNNNkx4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUM1QjAvNDBDOEQ1QTYxRDgzMTFFMjgyM0E1RkQ4MDhCMDJDRDIvNjFBNjVCRjJD
MzUwMTFFRTk1MzY2RTE4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQB0vZeMA8EAgACMAkDBwAkA8AAFAEwDQYJKoZIhvcNAQELBQADggEB
ACmCuM6CfeRo/nUTL/JSKC5V5dBvsRcX6VNv+i6R6uPwGnNpwx9k0DdJ1iDDByZJ
w65E/1VwaDIsEZ9bNNQev58TUWtn2qrJYXqGJYwcSAOj49zI+kMYgKdQ9iNY7wqZ
+M1lh3wiCrg+BTx0I8y6JuS+S1bDUnatGtCvpIw0R8N8TR5oi1Y0ArgjE/PzQdoF
MjfhCnp4lqLATj4s04q9To6a+98w0eljBpPWv7FJ8tO6Ab6O2PYG6oK4z9+PNAF0
qosFWWbNbiouvf+TUj0KQdzck5of3x9GYGwhU3V4CEJnAUDF4HMpuaGB1bFMBW0S
45fsDGocM0QhIQd8QZY79K8=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:16 2026 by rpki-client