Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
File:                     A7B64E90EA7311EF83DF9312C4F9AE02.roa (raw, json)
Hash identifier:          iN5ZyS8MFIpsPaY5Ugb/F++1o4RbnoAZ/BgHlSmsAPY=
Subject key identifier:   9D:E8:89:7B:F8:F7:21:18:4B:DD:06:FE:8F:CD:45:77:4F:37:6E:A9
Certificate issuer:       /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial:       C3
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:58:48 +0000
ROA not before:           Fri 14 Feb 2025 01:33:13 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     131476
IP address blocks:        163.61.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
                          rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:06:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
        Validity
            Not Before: Feb 14 01:33:13 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3e3a8-bff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:8a:75:e4:6a:94:4f:22:e5:b6:f0:f4:e6:
                    a3:8f:b9:0c:67:db:21:0c:5e:00:25:bd:eb:f1:1f:
                    f7:0d:f1:16:33:01:78:4f:a5:d4:a3:d6:cd:80:40:
                    77:e5:63:e9:b0:b1:06:b2:41:55:8e:f1:cd:b4:88:
                    1c:9e:57:b9:7c:01:2a:8c:c6:f3:6f:fe:b0:26:3f:
                    2c:6a:cb:ed:97:bd:41:ea:cd:5a:78:15:1e:42:82:
                    45:6d:b1:27:a9:e3:fc:1d:14:8f:dd:fc:cf:94:bb:
                    37:92:17:ac:2c:ef:f8:63:91:25:b5:e7:e0:7b:3d:
                    c8:36:2f:ea:78:35:cf:36:8b:21:48:35:f5:ff:9f:
                    57:17:22:99:78:ff:bb:29:84:be:67:2f:26:80:a8:
                    7c:2b:39:1f:82:fe:e5:e7:05:3b:a8:dd:b2:2a:09:
                    d4:b1:da:73:04:56:a8:65:f4:42:00:bd:25:6c:7f:
                    5e:ba:19:20:03:d5:be:eb:2a:c9:37:22:c2:e6:7b:
                    a2:0a:17:f8:8a:10:12:43:29:a5:fb:9e:7f:de:cc:
                    a0:7f:1b:6f:66:e1:01:fa:35:3e:49:88:ab:10:aa:
                    e0:a9:cf:72:9a:c4:ac:88:86:7a:78:60:64:51:6f:
                    1f:a1:74:5a:57:51:4a:b2:55:a9:ef:78:ab:ae:aa:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E8:89:7B:F8:F7:21:18:4B:DD:06:FE:8F:CD:45:77:4F:37:6E:A9
            X509v3 Authority Key Identifier:
                keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:cd:3d:a1:9d:b0:de:dc:30:17:19:1a:4f:e1:07:aa:5b:
         1e:ad:cb:7a:ca:9f:94:80:d7:c5:1c:59:77:f1:6c:67:cb:74:
         4e:bb:07:99:23:48:ce:53:65:32:3e:d4:c0:be:cb:a5:c8:be:
         2b:2b:d0:ad:6f:fb:02:53:a3:93:02:c0:04:16:80:40:56:e4:
         7b:1f:f7:04:ed:7b:62:2d:c2:19:01:b4:8d:f7:1e:17:b8:f8:
         55:ea:16:5a:18:31:ee:33:4d:dc:58:f9:09:84:e0:17:fb:b7:
         87:8f:e5:62:79:d8:96:a1:f3:f3:45:c5:7a:4b:01:f7:91:34:
         18:6e:62:c6:e9:60:04:30:b0:c9:8a:35:2d:90:c0:07:2d:5a:
         17:f9:46:5d:b2:4a:b5:55:8f:24:c2:ac:4e:9e:19:7f:72:d0:
         f4:ce:e6:24:7a:75:d4:3b:11:91:d7:db:34:ce:79:fa:10:40:
         5f:7b:e8:07:fa:86:95:51:65:ad:a6:7d:eb:b6:50:c6:16:4b:
         f2:23:5e:e8:52:35:65:fe:4e:34:7d:5f:3b:ca:6a:3e:48:c2:
         a0:7a:35:b5:49:03:89:f0:f2:51:f4:58:75:21:08:8b:ed:01:
         f4:51:0f:8c:19:87:8a:1e:99:5a:99:1f:eb:ab:9d:ad:3e:ac:
         b6:64:ab:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:35 2026 by rpki-client