Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
File:                     F3425EF0684D11F0B2D5FA37C4F9AE02.roa (raw, json)
Hash identifier:          j3wvdVZdlkttK5LQzYWRv8MyzczrZzv4IowyLYxZ5Ak=
Subject key identifier:   97:AB:17:77:63:BA:96:7E:A9:63:42:82:1A:4D:82:EB:91:CC:70:2F
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0BC8
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:01:01 +0000
ROA not before:           Wed 03 Dec 2025 02:20:44 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     213607
IP address blocks:        61.15.96.0/24 maxlen: 24
                          61.15.108.0/24 maxlen: 24
                          203.168.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3016 (0xbc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Dec  3 02:20:44 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a48ced-06dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b4:63:d5:b0:fc:c7:de:a5:12:a8:c4:e9:e8:
                    cd:17:b6:28:34:36:c5:21:96:44:cc:09:af:31:14:
                    02:46:26:d7:68:fe:61:69:07:fa:a1:c6:48:ba:50:
                    51:2c:fb:a6:38:8c:7b:24:2a:57:8f:a3:af:71:56:
                    e4:c3:05:c7:52:c4:d8:17:23:21:50:14:fa:32:d2:
                    84:08:03:0d:e1:a8:a2:36:a7:48:dc:e8:4d:9d:6c:
                    28:b9:68:7b:81:ab:bd:05:6e:85:e7:95:f1:dc:29:
                    76:09:90:05:d8:28:3b:61:31:55:52:28:ff:1b:87:
                    2e:2f:83:49:8f:73:4f:9e:2b:04:97:5a:40:7f:1c:
                    c0:c2:ce:a9:43:ff:74:3c:19:c3:c7:3f:e0:cc:95:
                    54:28:7a:0c:12:9c:48:b7:8f:28:cc:ab:be:66:4c:
                    d1:bf:05:cc:46:2e:da:f2:cf:7f:f5:da:a1:5d:e9:
                    f9:b6:db:eb:99:0c:73:ad:a4:2c:3c:d5:3f:d8:7c:
                    bf:40:37:fc:7f:d4:ba:a9:d9:36:c2:56:a0:5b:2e:
                    3f:59:a5:f0:a4:f7:8d:14:f2:a9:23:fc:c7:5a:22:
                    8e:c4:24:c7:3a:3e:00:b3:a3:eb:ec:13:58:76:d2:
                    db:f7:69:db:cb:f2:8d:72:2c:b4:47:77:7b:ca:d3:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AB:17:77:63:BA:96:7E:A9:63:42:82:1A:4D:82:EB:91:CC:70:2F
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/F3425EF0684D11F0B2D5FA37C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.15.96.0/24
                  61.15.108.0/24
                  203.168.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:f1:55:e2:d6:5d:e4:9d:83:c0:c1:27:30:01:ad:d7:87:3d:
         56:7b:c7:3d:08:74:32:c7:dc:21:42:31:24:a3:89:d6:91:f3:
         f5:d8:a3:e1:78:41:75:06:b3:e5:b4:72:47:e5:f6:c0:31:1b:
         24:25:54:db:a7:59:11:99:c9:d0:8e:f7:c3:44:8a:cc:6a:1a:
         59:52:9c:d4:8c:dd:b0:19:b1:94:93:12:71:24:b3:66:ad:03:
         02:5a:b7:11:46:4c:8b:1c:9d:14:70:bc:84:96:34:21:79:05:
         e2:c4:12:76:f9:cc:c4:fe:f4:c9:2e:6f:f4:e4:78:f8:7d:00:
         69:ae:60:85:cb:55:04:96:fb:84:c0:85:db:fa:f9:19:84:ce:
         e5:5c:f2:d9:6d:7b:0f:32:fc:3f:08:b3:fe:70:a8:af:78:d6:
         08:17:af:ee:c8:ba:80:f1:fc:a5:40:87:cf:c8:1e:7b:bf:46:
         b6:0a:a9:9a:e4:09:0d:34:6d:de:2c:d7:24:7d:15:f0:12:c0:
         7d:b3:d1:fd:f1:a8:3c:7d:7d:52:09:5c:a4:e6:0d:1e:9b:ff:
         21:e6:dd:b2:1a:7b:a8:3d:81:13:a3:ea:6b:cc:4f:18:44:a4:
         dc:e2:7b:56:2b:4a:4b:80:6b:9e:72:89:4c:df:c1:e7:bf:40:
         53:3c:5e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:14:43 2026 by rpki-client