Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
File:                     1703348238F611EFAE53A822C4F9AE02.roa (raw, json)
Hash identifier:          EDWk2qupoA0M8l+Fi1mXciRRJpJPFoEZdU2Pap2RC2Q=
Subject key identifier:   A2:B9:E9:10:2F:FB:26:29:5E:89:E0:38:9B:BC:8A:84:56:05:72:9E
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B43
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:18 +0000
ROA not before:           Mon 14 Jul 2025 14:50:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152915
IP address blocks:        61.91.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15171 (0x3b43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49352-30eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:61:f3:a4:bc:c8:4d:ec:b6:4d:84:1d:33:
                    09:aa:a2:a3:34:49:7e:f6:c0:08:81:f3:0c:81:96:
                    b2:67:a6:d0:ec:40:24:bd:80:e6:57:39:79:33:a2:
                    91:3b:18:e0:55:b0:4d:48:e8:88:f0:22:7b:fe:2e:
                    92:f8:e6:24:a7:a0:9c:09:1e:61:53:3d:5d:e4:11:
                    2e:b3:f2:33:25:5b:ac:ce:27:cb:0e:35:c8:f8:4f:
                    23:07:f8:e6:3c:50:ad:7a:6b:11:31:b0:4a:24:a1:
                    e9:09:ef:87:55:59:c4:3a:df:d9:fd:0f:e1:d7:1a:
                    5d:37:32:07:56:c5:09:e2:8b:c1:ce:a9:3f:59:84:
                    65:63:44:20:24:a0:44:e3:30:b8:6e:ac:e4:c6:3f:
                    cf:77:68:20:4a:9c:a5:46:fa:f7:f8:79:de:8c:13:
                    4c:e4:99:34:8f:9f:c7:6f:af:13:99:fc:e1:c5:67:
                    b2:22:5d:8f:93:d4:bf:6b:bc:29:5d:31:c3:c1:99:
                    cc:2d:33:eb:51:70:06:aa:49:9f:05:ad:6b:22:53:
                    70:33:67:d1:97:26:85:88:af:0a:64:2d:fd:ff:38:
                    e5:c5:41:5f:49:a4:31:d1:b4:18:84:c3:ba:bd:71:
                    66:4a:c6:e8:07:9b:c5:f1:54:e9:9a:dd:ac:0b:0d:
                    12:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B9:E9:10:2F:FB:26:29:5E:89:E0:38:9B:BC:8A:84:56:05:72:9E
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/1703348238F611EFAE53A822C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:21:08:f8:59:08:0c:c8:31:06:2e:ca:80:7a:8f:81:a8:d4:
         69:80:b3:45:6b:bc:b8:77:74:28:f4:e6:24:23:a3:89:aa:54:
         5f:5c:15:a4:ca:4d:9c:e5:db:68:6c:96:73:7d:34:c8:ee:a9:
         f7:65:a0:b5:6e:68:18:61:52:75:5f:3b:6e:18:a1:e1:b1:5e:
         72:ac:5c:4c:ab:31:3f:7f:5e:e0:79:8e:f0:ff:54:1e:73:2b:
         54:dd:93:73:ff:0e:e5:03:a5:1a:a5:ce:36:83:3e:9a:55:ca:
         e3:a8:84:6a:d9:1e:f1:37:91:f8:8c:a5:62:4a:f5:b9:72:36:
         f1:f2:e6:e6:c6:58:5e:52:9d:3a:a3:f1:09:9f:e7:0d:9d:12:
         f3:51:34:4b:35:84:57:de:b3:53:28:8f:02:25:81:f4:54:7a:
         5e:75:1a:3d:0c:b6:7a:c1:08:3c:ba:ed:b6:47:42:2a:86:14:
         9b:c6:b3:f7:ba:41:8e:50:23:46:cd:36:e8:ca:d0:4f:15:36:
         d4:4c:0a:01:d4:e4:4e:44:ae:dc:82:24:81:83:c5:a6:df:ce:
         63:be:1e:60:46:97:a9:bd:78:e6:b2:60:6a:2d:07:f2:39:68:
         d3:86:81:24:16:cf:44:b5:f1:fe:2b:59:61:b9:32:20:02:5b:
         13:9b:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:15 2026 by rpki-client