Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/E9B51C0AD24411EFBD747915C4F9AE02.roa
File:                     E9B51C0AD24411EFBD747915C4F9AE02.roa (raw, json)
Hash identifier:          btrYrpFmePIYP6YVkG1nkCOZn6tQYRKOcrKNkNGgIFU=
Subject key identifier:   85:FC:6D:76:E3:E1:89:DB:A8:42:8E:AB:B6:16:E5:36:86:EC:2B:9B
Certificate issuer:       /CN=A915A549/serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
Certificate serial:       012B
Authority key identifier: 1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/E9B51C0AD24411EFBD747915C4F9AE02.roa
Signing time:             Wed 29 Jul 2026 07:56:20 +0000
ROA not before:           Wed 29 Jul 2026 07:56:20 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     55571
IP address blocks:        202.52.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl
                          rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:56:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A549, serialNumber=1C80150AC9630984D38CC6F59C3ECC751B25F3E7
        Validity
            Not Before: Jul 29 07:56:20 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a69b223-f587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:60:6d:e8:a3:78:3b:09:5c:3d:1c:5d:8f:
                    47:2a:79:ec:4c:d8:a3:b4:f9:b9:15:5e:e0:16:95:
                    93:78:bd:56:ec:8c:f4:23:a1:bc:b1:13:fd:0c:04:
                    8a:66:c7:fc:de:d6:c1:df:85:6c:a3:81:64:f8:aa:
                    11:e2:2a:10:51:bb:f3:60:48:28:de:11:b5:95:55:
                    1b:8b:20:08:ae:7d:07:3f:f3:78:de:f8:4d:01:26:
                    c9:7e:89:b9:d0:a8:26:65:ef:63:50:e3:02:e4:1b:
                    31:06:03:78:7f:23:ae:72:cf:21:9a:ec:9f:b4:27:
                    02:85:b8:56:c1:c7:81:1f:fd:ce:68:41:24:29:81:
                    b5:9f:f8:9d:44:a2:91:fe:39:2e:75:e3:6b:15:c9:
                    99:ac:ce:55:75:dc:d8:38:fe:35:ba:69:ce:42:7a:
                    9d:db:63:65:4f:47:61:ab:74:84:46:7c:51:f2:68:
                    66:94:1b:79:3a:a7:1e:c7:42:5a:6c:48:bc:3b:a9:
                    29:c6:2b:5f:55:83:d1:e8:ca:65:d8:0a:27:ea:b1:
                    96:00:2c:9b:a1:72:9a:e1:4c:83:d2:62:3d:4a:0a:
                    8a:18:9c:b2:05:3d:d5:47:67:31:6d:e6:c1:6c:ec:
                    a3:cb:77:73:02:f3:b4:b5:56:fb:01:72:b6:35:00:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FC:6D:76:E3:E1:89:DB:A8:42:8E:AB:B6:16:E5:36:86:EC:2B:9B
            X509v3 Authority Key Identifier:
                keyid:1C:80:15:0A:C9:63:09:84:D3:8C:C6:F5:9C:3E:CC:75:1B:25:F3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/HIAVCsljCYTTjMb1nD7MdRsl8-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HIAVCsljCYTTjMb1nD7MdRsl8-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A549/4D25BCAAD24411EF9E654B14C4F9AE02/E9B51C0AD24411EFBD747915C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:95:ab:ee:44:15:37:bc:72:bf:4e:c8:41:28:d8:07:64:
         df:34:9c:bc:0f:36:4e:69:63:74:07:82:ab:7d:11:3b:09:ab:
         6c:b9:f7:29:31:23:95:70:f3:13:75:3d:52:b1:80:b5:04:a1:
         c6:77:34:30:89:dd:31:8b:99:a7:2f:7b:b2:33:26:c0:15:e0:
         23:7b:f6:e1:8b:f0:51:80:5d:d9:48:e1:3d:3b:c0:31:a3:5e:
         5b:76:66:70:b4:91:f4:41:e9:7b:f0:fd:2a:06:59:69:94:7c:
         1d:5c:16:17:f7:e4:31:21:f2:fd:d8:05:f5:93:04:c6:d2:60:
         6a:b2:59:61:91:6f:08:99:6c:ac:9a:ce:57:86:d7:00:b1:cd:
         74:ff:a1:23:98:9d:51:3b:19:8c:a4:1d:c2:59:0b:f5:60:85:
         59:6c:34:14:28:ba:af:41:01:2a:ab:8b:97:ea:62:4f:13:13:
         47:9d:5a:e1:26:e0:1f:37:a0:4c:4f:c1:60:8f:18:83:83:e8:
         6e:fc:72:cf:20:d5:ac:fc:5c:b6:5a:43:5a:75:3f:69:63:93:
         8a:88:23:96:bb:07:54:e7:25:e4:63:f0:eb:80:7f:2a:0a:07:
         63:4d:d9:c1:9e:82:d7:ac:72:d0:70:0c:ca:26:d5:e8:88:a9:
         50:6a:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:42:39 2026 by rpki-client