Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/7B2FAA3C209711F196D22F2D3A3D8C67.roa
File:                     7B2FAA3C209711F196D22F2D3A3D8C67.roa (raw, json)
Hash identifier:          46jInQJtabZ7v+bShiZhomvrokC8+lMJ4HP9JqEdr94=
Subject key identifier:   C7:FA:B3:83:D4:95:73:42:69:04:59:F1:C1:C3:AC:58:23:7D:E6:22
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       E3
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/7B2FAA3C209711F196D22F2D3A3D8C67.roa
Signing time:             Fri 17 Apr 2026 06:41:43 +0000
ROA not before:           Fri 17 Apr 2026 06:41:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153377
IP address blocks:        163.61.237.0/24 maxlen: 24
                          2001:df5:2640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Apr 17 06:41:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e1d627-6209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ac:f7:65:2e:b1:c3:da:81:93:4d:1f:f9:87:
                    8d:f6:18:cf:ee:68:03:aa:33:28:42:20:b4:ef:ca:
                    3b:11:3c:94:c2:b8:37:1d:96:41:ef:d7:d7:64:46:
                    4f:49:d7:44:df:9d:2c:e5:85:bb:9a:23:a5:65:9a:
                    fa:bf:1f:9a:6e:6e:c2:c2:e3:99:30:69:8d:a8:32:
                    2a:b0:1a:ff:a4:d9:b1:00:f2:8b:37:64:2a:f5:4f:
                    94:7a:22:24:5f:73:df:d7:15:20:cc:9d:4f:cc:c1:
                    64:95:84:7b:62:54:f1:32:b9:c3:d6:bc:8a:57:87:
                    1c:d1:ee:82:b4:28:d4:f4:53:a3:41:ba:34:ba:74:
                    a3:a9:3f:ae:9b:ca:73:33:5b:32:32:84:c9:02:cd:
                    d4:9f:32:6e:d8:40:0a:37:4a:d2:21:50:7d:60:a4:
                    9b:40:f7:34:d4:23:ec:b9:db:bd:33:ca:ce:db:0f:
                    80:05:22:4d:05:50:cb:e3:d9:d6:c8:65:c1:f4:21:
                    eb:f4:f1:6e:8a:68:5d:fa:25:35:9b:bc:24:f0:4d:
                    4b:d0:e6:55:63:c3:cb:b1:88:c6:1c:0e:49:91:a9:
                    0f:1c:b6:44:7c:3a:3d:eb:c0:02:78:ae:34:28:c0:
                    35:c7:ca:bd:e8:38:5c:41:3a:de:7b:14:69:cd:ff:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:B3:83:D4:95:73:42:69:04:59:F1:C1:C3:AC:58:23:7D:E6:22
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/7B2FAA3C209711F196D22F2D3A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.237.0/24
                IPv6:
                  2001:df5:2640::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:6b:c9:ed:fc:9f:9e:e4:80:d8:1b:90:f2:17:f9:a0:b9:75:
         7d:72:df:b7:b9:8c:ca:7c:fe:e5:bf:4c:f7:67:b5:e1:5c:47:
         60:2f:0a:34:75:6c:55:33:db:16:6a:d9:b7:6c:8c:0d:5c:d2:
         9f:8f:e8:3c:b2:8f:46:96:c6:cc:58:d3:37:74:aa:63:46:41:
         9f:7f:05:af:c9:cd:69:b4:f2:c6:1c:49:b9:4c:aa:33:8c:af:
         64:88:19:75:b3:49:50:25:9f:81:c0:f3:20:e2:3f:8d:32:1b:
         c9:b2:40:67:57:0e:a6:f3:44:15:ae:1c:a0:5b:68:6b:c0:4d:
         36:0a:19:91:8a:e2:93:ab:cc:2f:38:26:67:ff:a8:0b:1b:d2:
         01:88:47:e7:9f:07:5e:1d:b1:03:a9:1f:26:d3:7e:79:e6:7b:
         a0:97:fd:c6:8f:c0:a8:3d:fb:ee:1a:65:03:a1:d2:0d:44:8e:
         14:eb:79:2b:5e:65:4f:89:bb:cc:74:8f:d9:1d:00:25:e0:d8:
         db:0c:6c:a3:97:0f:14:94:68:46:a0:cc:66:59:15:c9:47:3d:
         eb:22:2b:f4:bd:b9:ab:55:a9:15:03:ed:0e:9f:cb:5b:47:02:
         02:77:6f:63:ba:c9:a9:e2:d4:22:ab:73:a8:eb:c0:49:03:3c:
         05:dc:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:11 2026 by rpki-client