Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/11DD43BA80E411ED993FD824C4F9AE02.roa
File:                     11DD43BA80E411ED993FD824C4F9AE02.roa (raw, json)
Hash identifier:          bd3gIZCv+az2HMEE1qH5nDncSnV/ovCr0VoqmgKdXrM=
Subject key identifier:   23:1E:91:02:3C:1F:BC:30:1F:C5:E5:6D:02:EE:95:9E:12:34:FD:E3
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       029F
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/11DD43BA80E411ED993FD824C4F9AE02.roa
Signing time:             Thu 26 Mar 2026 22:29:20 +0000
ROA not before:           Thu 26 Mar 2026 22:29:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134138
IP address blocks:        185.61.140.0/23 maxlen: 23
                          185.61.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:53:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Mar 26 22:29:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c5b340-d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:c7:e0:4c:04:9d:ad:8b:ae:73:dc:53:43:
                    fc:31:58:fc:d9:62:4e:94:f9:af:90:aa:d1:93:d7:
                    17:a7:b3:f8:fc:aa:be:98:7e:01:e1:c0:da:47:92:
                    d9:f3:d9:eb:24:94:13:4a:24:2e:71:43:81:53:3a:
                    54:b5:16:7b:72:04:a3:1c:62:30:98:09:3f:18:5a:
                    e5:e9:6c:f9:38:f2:08:ac:46:c0:94:97:15:c2:0f:
                    01:94:bf:f1:86:88:0c:36:6d:a2:13:fe:78:79:ab:
                    a5:0a:70:e8:67:e5:c2:10:fe:b4:ff:20:dc:c2:f9:
                    df:09:32:36:4a:6c:13:1d:5a:41:bd:7b:12:c5:6b:
                    87:5b:2a:25:31:5d:e2:d3:3f:37:6e:c4:5e:65:9c:
                    bf:24:8b:80:0d:23:cd:7e:77:8b:7f:8e:ab:59:97:
                    52:d0:73:a6:92:63:ff:af:66:62:9f:b9:1f:b7:3d:
                    c2:02:b2:b3:0c:6b:14:42:90:e5:5f:9e:86:7d:92:
                    54:60:60:dc:e3:11:e5:32:06:aa:47:89:6d:d7:ff:
                    2d:18:2b:9b:53:54:3b:13:86:45:df:f3:01:31:0e:
                    11:ef:51:ea:20:54:28:85:33:6a:45:6d:9b:cc:82:
                    54:27:7c:52:8c:e8:bd:43:fc:85:a5:c8:14:52:54:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1E:91:02:3C:1F:BC:30:1F:C5:E5:6D:02:EE:95:9E:12:34:FD:E3
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/11DD43BA80E411ED993FD824C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:09:ca:36:50:d2:d9:2d:54:14:51:14:93:b8:b5:35:52:de:
         15:37:31:b3:18:4d:45:14:b4:ff:18:b2:10:e1:ee:b3:14:de:
         b5:f3:63:52:46:61:28:38:4c:ee:f2:50:c3:c4:2f:44:49:f5:
         43:c6:7e:86:79:62:39:97:f0:c3:87:e3:a2:59:0f:ff:d2:a8:
         68:83:91:01:c2:88:6a:dc:9d:ba:31:a3:54:92:f0:e2:3b:75:
         03:8e:cb:85:22:94:f7:98:38:b6:ff:3b:75:36:70:99:16:dc:
         49:94:e7:db:88:d6:02:bc:5f:db:97:55:e2:a6:6c:8c:30:0e:
         24:fc:71:46:34:4e:50:26:ad:a3:a0:6b:1d:35:5e:48:fc:36:
         34:e1:16:ef:ba:91:57:21:52:5f:b6:01:72:4a:6a:25:a0:24:
         ac:6f:fa:57:5a:5c:ec:bf:54:5e:7e:91:d8:a1:ed:f8:e0:09:
         88:1f:48:27:c5:b7:26:6b:9c:71:84:b7:97:d0:43:fa:6e:60:
         12:7c:30:b1:fe:b4:88:84:2a:4c:1b:f1:c4:d1:62:0b:ad:c0:
         f7:58:bc:1e:6f:6c:e3:9f:bc:5f:ab:c7:8d:ff:ec:5c:a4:1c:
         e7:f7:3b:33:09:23:7c:42:2a:64:02:5a:a0:7e:5c:1e:c8:83:
         ce:c9:5f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:34:51 2026 by rpki-client