Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/215A8FDE4B9E11EEBF766C7FC4F9AE02.roa
File:                     215A8FDE4B9E11EEBF766C7FC4F9AE02.roa (raw, json)
Hash identifier:          n6tcvXpr4IAe1S5u61Xx4m/84oyxH16o7/TxMhPSnE4=
Subject key identifier:   DC:52:CA:66:28:15:3E:C7:1E:B6:EB:64:59:DA:63:18:1D:C7:95:5F
Certificate issuer:       /CN=A913D1EA/serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
Certificate serial:       093E
Authority key identifier: E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/215A8FDE4B9E11EEBF766C7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:02:09 +0000
ROA not before:           Tue 04 Nov 2025 21:40:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4682
IP address blocks:        61.245.0.0/22 maxlen: 22
                          61.245.0.0/24 maxlen: 24
                          61.245.1.0/24 maxlen: 24
                          61.245.2.0/24 maxlen: 24
                          61.245.3.0/24 maxlen: 24
                          2001:ded:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl
                          rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1EA, serialNumber=E692C5B60B3EF1C2044439FC390AD56DC3CBCD63
        Validity
            Not Before: Nov  4 21:40:36 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a48d31-bcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:62:26:14:f0:ac:97:13:e9:e9:74:90:58:19:
                    a5:12:ad:96:81:c3:c8:6a:34:7d:f4:be:02:a4:89:
                    84:5b:35:b0:65:b1:b1:7b:7b:c9:3f:5f:9b:d9:7c:
                    cf:62:04:eb:0e:17:2b:4c:05:cd:d7:5f:9e:ac:df:
                    63:cc:cf:0b:15:e3:f9:f0:51:da:87:b7:31:47:97:
                    d2:d5:ea:e9:fc:c7:51:07:a4:74:03:5b:77:81:3f:
                    d7:44:98:05:bd:48:ff:91:d8:c4:1b:ae:a5:14:bc:
                    30:81:1c:70:c7:bf:4f:02:b6:43:38:82:03:4a:56:
                    b2:ce:ef:54:07:40:2d:20:9f:50:c5:e0:9b:ad:fe:
                    85:a7:1b:2d:52:23:d6:66:c2:b2:eb:3e:ac:6e:23:
                    b4:55:4b:a8:a0:06:08:ab:a6:15:f9:5a:1c:57:e9:
                    b8:29:3e:1f:ce:35:2d:66:b5:ad:dc:7f:95:18:03:
                    1d:fe:f4:f1:5f:89:3e:93:74:b0:a4:ad:23:3c:c9:
                    90:97:07:5f:c3:a6:50:5f:01:18:e9:7a:89:23:ce:
                    94:80:a9:63:32:08:6e:6c:4a:24:a9:af:0b:17:6c:
                    af:77:74:11:53:b8:be:a3:9f:8f:8d:a0:3b:61:1a:
                    3b:8d:10:3d:7e:31:52:20:98:4c:53:45:fd:b2:76:
                    bd:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:52:CA:66:28:15:3E:C7:1E:B6:EB:64:59:DA:63:18:1D:C7:95:5F
            X509v3 Authority Key Identifier:
                keyid:E6:92:C5:B6:0B:3E:F1:C2:04:44:39:FC:39:0A:D5:6D:C3:CB:CD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/5pLFtgs-8cIERDn8OQrVbcPLzWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5pLFtgs-8cIERDn8OQrVbcPLzWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1EA/9C932B48173A11EBA3B97E7FC4F9AE02/215A8FDE4B9E11EEBF766C7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.245.0.0/22
                IPv6:
                  2001:ded:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:d7:6e:2c:9a:74:a7:d3:96:0f:07:3a:b9:4a:c8:37:18:
         9b:80:73:89:20:9b:41:7e:1f:75:f7:aa:6c:f0:e6:ed:2c:f8:
         ec:c2:54:c0:64:f6:52:3c:88:12:39:fa:b6:bc:ac:93:dc:0a:
         72:e6:0c:93:14:50:e9:00:da:8a:42:ff:a8:85:db:f4:42:57:
         90:73:c9:bd:cd:11:ca:e8:6e:35:c1:0f:b1:55:c4:70:dd:33:
         d1:e1:41:73:ea:1b:7e:ec:13:14:6c:b3:27:b8:89:b3:b6:4a:
         27:9b:97:cd:f0:5d:71:bd:d6:42:4a:0a:40:c1:59:49:3e:6d:
         8b:be:0e:74:b1:f9:f9:f7:4c:ad:99:62:2b:dd:f4:c3:a0:41:
         5d:97:74:ff:a6:ea:04:97:9a:ba:5c:7c:74:f7:90:8c:79:71:
         1d:1b:4e:b0:61:5d:6e:c3:91:5d:11:9f:ae:9d:fa:9a:be:de:
         7e:15:25:0b:51:5a:2c:28:8c:c8:a1:d2:08:db:05:9e:bb:74:
         a3:19:54:a8:d0:2f:ac:10:8f:22:12:a1:66:3b:04:58:83:c4:
         bb:ab:dd:1c:e7:9c:85:29:a1:31:8c:df:1c:55:51:b9:1d:8f:
         14:80:10:c5:a4:96:16:f1:be:e7:85:87:5a:85:1b:a3:a1:fe:
         f9:d6:8a:11
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICCT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxRUExMTAvBgNVBAUTKEU2OTJDNUI2MEIzRUYxQzIwNDQ0MzlGQzM5MEFENTZE
QzNDQkNENjMwHhcNMjUxMTA0MjE0MDM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGQzMS1iY2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhmImFPCslxPp6XSQWBmlEq2WgcPIajR99L4CpImEWzWwZbGxe3vJP1+b2XzP
YgTrDhcrTAXN11+erN9jzM8LFeP58FHah7cxR5fS1erp/MdRB6R0A1t3gT/XRJgF
vUj/kdjEG66lFLwwgRxwx79PArZDOIIDSlayzu9UB0AtIJ9QxeCbrf6FpxstUiPW
ZsKy6z6sbiO0VUuooAYIq6YV+VocV+m4KT4fzjUtZrWt3H+VGAMd/vTxX4k+k3Sw
pK0jPMmQlwdfw6ZQXwEY6XqJI86UgKljMghubEokqa8LF2yvd3QRU7i+o5+PjaA7
YRo7jRA9fjFSIJhMU0X9sna96wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFNxSymYo
FT7HHrbrZFnaYxgdx5VfMB8GA1UdIwQYMBaAFOaSxbYLPvHCBEQ5/DkK1W3Dy81j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDFFQS85QzkzMkI0ODE3
M0ExMUVCQTNCOTdFN0ZDNEY5QUUwMi81cExGdGdzLThjSUVSRG44T1FyVmJjUEx6
V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVwTEZ0Z3MtOGNJRVJEbjhPUXJWYmNQTHpXTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0QxRUEvOUM5MzJCNDgxNzNBMTFFQkEzQjk3RTdGQzRGOUFFMDIvMjE1QThGREU0
QjlFMTFFRUJGNzY2QzdGQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQCPfUAMA8EAgACMAkDBwAgAQ3tQAAwDQYJKoZIhvcNAQELBQADggEB
AD3i124smnSn05YPBzq5Ssg3GJuAc4kgm0F+H3X3qmzw5u0s+OzCVMBk9lI8iBI5
+ra8rJPcCnLmDJMUUOkA2opC/6iF2/RCV5Bzyb3NEcrobjXBD7FVxHDdM9HhQXPq
G37sExRssye4ibO2Siebl83wXXG91kJKCkDBWUk+bYu+DnSx+fn3TK2ZYivd9MOg
QV2XdP+m6gSXmrpcfHT3kIx5cR0bTrBhXW7DkV0Rn66d+pq+3n4VJQtRWiwojMih
0gjbBZ67dKMZVKjQL6wQjyISoWY7BFiDxLur3RznnIUpoTGM3xxVUbkdjxSAEMWk
lhbxvueFh1qFG6Oh/vnWihE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:02:49 2026 by rpki-client