Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa
File:                     D56D67B0F48711EFBB2D9D73C4F9AE02.roa (raw, json)
Hash identifier:          0HTbq8tBAK4fR+4sUeMKuHfNpFggIF0IOaiwHW3RNno=
Subject key identifier:   B0:05:67:3E:49:63:84:31:FF:B5:81:40:DE:8C:15:E5:4D:C3:5E:C5
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       BC
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:59:42 +0000
ROA not before:           Wed 26 Feb 2025 21:22:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133214
IP address blocks:        163.61.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Feb 26 21:22:51 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3e3de-3ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:53:ac:60:d7:0a:b2:a8:f0:97:f6:d5:78:
                    6f:c2:b1:c3:51:44:ad:dd:46:51:5d:8f:37:84:60:
                    6d:bb:47:6e:34:7e:50:fe:28:1b:d8:ca:43:8c:39:
                    72:a3:62:96:10:66:be:54:3b:16:68:90:ed:00:02:
                    34:62:e8:60:4d:a3:8e:4d:ea:8f:cd:d9:f0:66:2d:
                    fa:fa:ca:0a:e0:43:17:ab:81:d1:6a:dd:f5:54:b6:
                    56:2d:0a:44:f4:d5:8b:e6:5b:76:8d:3d:c8:d8:a5:
                    9c:93:f1:a4:f0:51:9c:6f:2d:11:eb:13:1b:be:cb:
                    38:29:1e:54:31:7d:9b:7b:22:ca:0a:46:1a:3c:44:
                    25:8a:0a:92:02:c1:2b:3d:4a:76:9a:fe:75:f6:3f:
                    87:0c:79:4f:b2:ff:f9:ce:bf:ba:45:7d:5c:16:03:
                    e7:66:21:75:4a:f4:ad:3b:16:b2:97:1c:d7:15:49:
                    e0:aa:21:6b:3f:79:e9:5e:52:e5:93:90:19:e2:22:
                    26:03:a0:e7:04:ff:f8:ea:05:e7:48:85:b8:66:8a:
                    b3:a1:b8:e8:c4:07:44:b6:56:30:8b:d8:ff:56:e1:
                    3f:6f:44:77:47:cb:07:bc:5a:ea:4a:39:72:96:62:
                    fe:44:1d:e0:da:0c:51:cf:f0:d3:65:8e:63:d9:35:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:05:67:3E:49:63:84:31:FF:B5:81:40:DE:8C:15:E5:4D:C3:5E:C5
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:03:8d:54:a0:d5:d3:a4:cf:46:84:04:e2:8f:ff:0a:1b:43:
         3c:46:e0:cf:95:71:e8:2c:09:5e:fe:cd:69:24:57:da:51:88:
         bc:ec:93:50:9d:1c:3c:aa:b7:ab:70:38:04:7b:31:74:88:c2:
         b6:9f:c6:a7:d4:b7:23:ae:49:65:bb:87:d2:c5:32:54:a7:9a:
         f0:5d:16:f2:dc:80:6f:6c:ce:24:54:be:e7:45:22:a9:aa:3b:
         8a:b4:48:9b:8f:10:ca:57:ec:63:31:aa:49:32:45:a6:bb:f6:
         c3:c4:52:a2:bd:62:67:f6:09:18:45:c4:45:1d:9f:25:33:42:
         39:b4:03:d6:f4:ae:92:4d:96:f0:9b:80:a2:bf:72:b5:e9:81:
         39:b7:80:a9:ea:b1:6f:1d:0d:70:c4:cd:c5:ac:49:e4:25:9c:
         ea:d0:5c:d5:e4:bb:a3:15:ce:f5:93:d7:80:8e:0e:48:f9:1a:
         3c:f5:52:5b:99:e7:aa:16:64:15:34:44:37:f2:d6:85:75:42:
         eb:81:78:a9:60:96:a7:04:7c:cf:0d:e5:65:b0:d6:16:47:26:
         ce:e4:8b:60:ed:62:31:80:c9:14:16:a0:20:8b:13:e2:0c:00:
         b3:e4:92:a6:47:26:8a:63:e6:6c:db:72:09:5f:f5:f0:19:a8:
         a8:4e:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:16:30 2026 by rpki-client