Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/11DD43BA80E411ED993FD824C4F9AE02.roa
File:                     11DD43BA80E411ED993FD824C4F9AE02.roa (raw, json)
Hash identifier:          5GcZNiQopX8Mo16CBA648+0uWjV9xMYra66zDK9RZXw=
Subject key identifier:   50:72:00:07:B3:8D:A7:4B:1B:5A:0C:7E:01:87:6F:A9:84:AD:D5:8B
Certificate issuer:       /CN=A91604AC/serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
Certificate serial:       028D
Authority key identifier: A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/11DD43BA80E411ED993FD824C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:44:22 +0000
ROA not before:           Tue 08 Apr 2025 22:32:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     134138
IP address blocks:        185.61.140.0/23 maxlen: 23
                          185.61.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl
                          rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:42:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 653 (0x28d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91604AC, serialNumber=A84E783669C2F99784F344FCD323FCF991CC40FB
        Validity
            Not Before: Apr  8 22:32:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a40a76-f0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:43:9b:da:b8:25:e9:dc:f3:48:aa:f4:83:21:
                    b8:1c:24:f5:d9:f1:e5:81:97:d0:e5:7d:7b:3c:73:
                    38:ac:e9:4f:39:e9:b6:09:13:5d:2f:7d:df:e1:45:
                    8b:20:bf:04:50:92:eb:d9:d9:e8:15:66:0e:ff:39:
                    c6:ec:bd:d1:06:29:b2:1c:fc:c8:72:a7:0b:9d:01:
                    17:1f:59:b0:61:c2:1a:d7:30:45:e1:ae:0a:43:c9:
                    28:e1:4c:b5:2f:1e:fa:37:0e:85:3b:63:11:ca:65:
                    9d:4a:fb:2c:d2:b9:a6:2f:25:c5:70:a9:c2:a3:c5:
                    c2:32:ca:34:0d:d7:74:cd:a1:3d:6d:1b:76:89:25:
                    30:32:c9:e2:7b:50:f3:2f:a5:7d:02:0a:b2:7a:ef:
                    bb:d1:35:ee:ab:8c:49:0c:33:0a:9f:90:e4:11:eb:
                    a5:2d:18:c7:61:ce:69:1d:1d:52:a6:b8:2e:ca:72:
                    1d:d6:43:96:24:0d:ec:41:9b:a4:94:84:de:c5:9c:
                    a0:53:8b:bd:7b:26:21:55:80:5f:ef:bc:fa:f7:fe:
                    b3:d4:e6:44:fe:c9:d5:14:f5:3f:f1:2a:85:07:42:
                    a2:42:4b:f3:83:ce:ad:b3:80:51:64:ca:7d:4c:62:
                    e0:44:fe:c5:99:30:49:ad:a1:38:b7:60:c7:f2:f0:
                    47:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:72:00:07:B3:8D:A7:4B:1B:5A:0C:7E:01:87:6F:A9:84:AD:D5:8B
            X509v3 Authority Key Identifier:
                keyid:A8:4E:78:36:69:C2:F9:97:84:F3:44:FC:D3:23:FC:F9:91:CC:40:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/qE54NmnC-ZeE80T80yP8-ZHMQPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/qE54NmnC-ZeE80T80yP8-ZHMQPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91604AC/34BEC5F4444C11EDBDA9127CC4F9AE02/11DD43BA80E411ED993FD824C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.61.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f3:84:ef:3e:0e:48:61:3d:32:74:f3:ba:a6:6a:8c:b7:f8:
         e5:00:13:a1:5b:e2:6e:bd:2f:47:0d:e6:c7:bb:ef:56:3a:ff:
         cd:97:e5:91:41:3f:dd:ef:3a:75:eb:80:49:c1:53:04:24:4a:
         ad:97:c8:a7:9d:f7:0d:af:25:77:d9:a6:ca:99:f0:0e:2a:a9:
         74:66:9c:2a:29:60:7a:6a:21:9c:24:a7:75:a3:5f:0b:ce:14:
         c5:83:18:f6:71:d5:b2:b5:5d:7f:69:f4:93:d8:06:7b:db:16:
         3d:23:da:c0:9a:54:e0:aa:ec:e1:9e:45:0d:a8:6f:ec:b6:5e:
         d5:66:c8:b1:f7:ab:16:df:3d:64:62:5a:83:72:ca:9f:07:b2:
         88:c0:cf:cc:4a:72:95:47:6f:72:4a:ad:81:1e:0a:9e:f4:15:
         d5:86:e4:5a:7c:43:57:0d:8e:80:e4:e9:c0:1e:33:67:48:3d:
         7c:81:e5:49:76:83:a6:48:03:a5:a5:c0:04:eb:13:ea:67:f5:
         18:36:31:79:01:73:8b:c7:a6:c5:b1:e0:16:62:1e:d5:60:00:
         bf:61:4a:a8:14:e3:aa:f5:24:b3:a3:34:41:8a:0f:0f:50:c3:
         bd:b5:b9:b2:eb:94:e8:81:19:d8:29:b1:f7:be:7c:bb:95:8b:
         b2:a3:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:04 2026 by rpki-client