Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/567E4552C91911F0BB194C6DC4F9AE02.roa
File:                     567E4552C91911F0BB194C6DC4F9AE02.roa (raw, json)
Hash identifier:          BXcg8YArXJ5CmD6evpZM4dq8jMTCCVwQHO6BvkW3b7g=
Subject key identifier:   55:BB:8A:5B:EA:5A:EF:82:EA:30:08:A0:7C:9E:8B:AE:4E:2A:68:A8
Certificate issuer:       /CN=A912598D/serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
Certificate serial:       CF
Authority key identifier: 9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/567E4552C91911F0BB194C6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:11:14 +0000
ROA not before:           Mon 24 Nov 2025 09:38:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     18197
IP address blocks:        61.7.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl
                          rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912598D, serialNumber=9A3A67EDDCD0977533A9A0B8C49F4C0100C85391
        Validity
            Not Before: Nov 24 09:38:31 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48f52-57a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:93:81:d4:cb:4b:48:bf:3b:d2:14:8e:60:
                    7c:f1:13:40:86:54:5c:1d:07:fb:ae:a7:1e:52:c2:
                    73:8d:ed:49:06:17:75:26:88:d0:ff:1f:b6:0d:fe:
                    85:d3:21:7c:da:51:ae:78:57:75:61:0c:16:f9:b8:
                    f0:df:7c:0a:24:1d:62:f2:b3:af:bc:ce:14:a5:8b:
                    0a:c5:ac:a3:42:6c:7b:4c:90:01:ab:ad:2f:c3:1e:
                    1c:68:e3:b1:2a:b5:35:53:1b:a5:05:4b:c8:bb:59:
                    f1:fe:53:62:f8:4e:be:2b:f1:26:6a:e0:5d:69:8a:
                    02:80:ab:31:54:36:d1:2f:cc:c0:03:99:5a:b5:c7:
                    22:0e:d2:a3:69:80:d6:31:b7:d1:47:50:89:c0:43:
                    1f:0c:1e:2e:85:af:e2:5c:62:7d:95:e4:85:c1:a2:
                    1f:95:77:63:8e:98:90:f4:c6:7d:82:a0:8e:a1:ba:
                    62:4b:48:d4:1c:3f:7c:42:33:43:2a:74:6e:39:ee:
                    ea:59:9a:64:30:e1:1a:93:0a:07:22:6d:87:a7:17:
                    4e:f6:ad:d2:fb:a2:b0:88:a2:99:90:40:d6:6f:82:
                    dd:e9:b3:42:c1:bc:84:df:ea:ae:af:3c:12:be:12:
                    f8:16:82:16:20:e6:54:30:60:1f:98:5e:f9:87:50:
                    bf:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BB:8A:5B:EA:5A:EF:82:EA:30:08:A0:7C:9E:8B:AE:4E:2A:68:A8
            X509v3 Authority Key Identifier:
                keyid:9A:3A:67:ED:DC:D0:97:75:33:A9:A0:B8:C4:9F:4C:01:00:C8:53:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mjpn7dzQl3UzqaC4xJ9MAQDIU5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/B88531CAC8EC11F0A344AB45C4F9AE02/567E4552C91911F0BB194C6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.7.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c7:a1:9b:76:ea:10:83:a5:69:66:cd:f6:59:47:7c:08:e3:
         2e:28:7b:37:08:a4:3d:74:e9:7c:f0:f1:ae:02:61:33:7d:7a:
         40:d8:c3:63:05:0f:12:bc:fd:13:a6:5f:20:c8:e0:c9:22:6f:
         59:c8:00:54:19:4a:ed:ab:1b:bf:01:9e:b8:5e:0a:22:32:0a:
         bd:87:cc:eb:65:5c:45:d2:56:5b:ff:af:be:34:c2:72:8e:97:
         51:26:4e:34:77:d0:3a:78:4f:6b:fe:0e:c3:7b:f6:4e:45:9a:
         70:15:4a:17:87:92:40:78:43:12:c9:bd:2f:ad:05:31:93:af:
         b7:21:6f:86:4c:50:18:50:17:5d:22:c9:84:ec:df:ea:1d:6c:
         b4:53:95:0d:de:21:a4:18:76:b2:04:c4:55:0b:0f:08:c6:9e:
         ec:78:81:ff:7d:ee:4c:58:5f:76:a0:1f:23:48:48:7b:da:2b:
         24:8c:3f:8e:55:d2:24:35:80:ee:5f:02:2e:df:b4:1e:a7:91:
         72:29:f8:78:34:cc:15:e9:32:69:88:74:29:e3:a5:2a:4a:9f:
         70:c3:9d:e3:fc:65:25:87:c6:c8:15:f4:ac:04:3d:fb:90:56:
         e0:0f:59:8c:de:09:4b:aa:e8:8f:eb:61:b8:60:92:4a:35:37:
         76:33:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:08 2026 by rpki-client