Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
File:                     40660E781E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          JZpfTRlcsFjL069SePVyVKvEvMe8LIL5kTWti+JItdI=
Subject key identifier:   58:7B:C3:C1:ED:32:F5:DC:BA:E0:C3:A5:99:75:C4:BD:37:55:0D:15
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3B4A
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:28:24 +0000
ROA not before:           Mon 14 Jul 2025 14:50:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     23683
IP address blocks:        61.91.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:20:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15178 (0x3b4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul 14 14:50:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49358-cc8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:b8:14:0e:db:1a:e7:11:14:80:77:98:26:
                    9b:61:62:c0:5b:7b:57:7b:1a:97:91:aa:f0:6a:43:
                    92:22:08:a5:af:72:c5:71:0f:3a:01:e4:89:4e:38:
                    b9:c6:76:4a:ea:72:ce:fa:5f:c5:fa:65:af:92:b0:
                    1b:b6:93:3a:ec:5a:cf:bc:76:b6:25:54:58:58:57:
                    ac:78:65:80:78:90:11:0a:e2:d8:4d:39:97:9b:a8:
                    3c:f9:09:69:40:1b:45:1e:8f:d6:7b:53:2f:8e:fc:
                    43:9b:6c:1e:fd:6b:cd:f1:72:25:8b:37:86:59:ab:
                    bb:3d:30:17:0d:10:0b:1a:55:c0:3b:34:73:81:84:
                    af:82:f9:25:0c:bd:a2:51:71:d3:a5:f2:09:b3:3e:
                    88:75:e5:91:91:cd:cd:cd:f8:f9:44:46:a7:9e:5b:
                    b0:60:a3:bd:00:ea:e5:c5:8a:a5:09:39:4f:65:d5:
                    e3:00:a8:64:1b:77:7a:dc:f7:1e:1b:a4:80:ee:0d:
                    c2:86:ee:24:3b:04:8f:0a:79:41:50:75:50:7a:52:
                    09:4c:b7:e5:e6:a6:26:ba:b7:33:82:95:37:5f:b8:
                    73:d9:b6:99:d6:cf:95:56:1a:0e:5e:3f:6f:74:ca:
                    aa:5e:f2:65:5a:22:80:99:6a:44:d1:f4:fe:6d:77:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:C3:C1:ED:32:F5:DC:BA:E0:C3:A5:99:75:C4:BD:37:55:0D:15
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1f:c1:86:a4:6c:42:35:43:8a:c4:0e:a5:3d:89:4c:10:af:
         37:cd:0b:5b:dc:4b:4f:5c:ab:e5:eb:ef:ab:48:15:6a:c3:1c:
         19:79:fa:2e:d2:00:61:ba:26:97:ed:06:d9:8f:88:56:80:65:
         18:29:ea:78:ae:01:a8:a9:c3:f5:51:eb:eb:58:04:ce:4b:36:
         4f:c2:02:4b:07:3f:16:a7:bc:e7:0e:0e:86:fc:b2:fe:31:f4:
         ad:88:88:50:19:f8:48:f7:da:b7:16:6a:e8:f5:2c:ab:22:15:
         7f:30:c1:61:e4:24:58:c1:d6:4b:db:d3:36:88:f3:87:f5:1f:
         b4:5d:34:9a:77:43:e7:0f:20:fb:0a:35:14:52:40:c4:51:b7:
         38:a3:ca:14:95:cf:2c:ea:59:63:b0:fc:b0:87:04:8c:e0:19:
         80:f6:c6:67:db:00:1c:63:31:4a:ec:c0:b7:d9:b0:f2:98:e0:
         3d:95:95:e3:da:88:e6:ff:54:14:57:1d:f0:ff:3a:a3:63:e2:
         3b:9a:a8:6b:9f:5d:46:3c:0a:b9:4a:90:5e:f8:75:91:55:8a:
         5e:d3:0e:66:75:42:c3:e9:9d:5d:79:c0:2b:d1:f6:26:56:5c:
         a6:42:de:5c:14:89:cc:0f:fe:f3:09:9a:dc:85:bc:c6:8f:84:
         c3:11:50:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:19 2026 by rpki-client