Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
File:                     E1B073B689F011EABAEDCE2FC4F9AE02.roa (raw, json)
Hash identifier:          Q016Kd6E9/hY+r6FwdJ1SCSeGt/Pfio83Euj8bOzMRo=
Subject key identifier:   1F:0E:77:C8:41:6E:09:0A:43:16:08:5D:C1:28:62:C5:A2:2E:0C:71
Certificate issuer:       /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial:       1D97
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:27:16 +0000
ROA not before:           Tue 04 Nov 2025 15:00:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45779
IP address blocks:        202.61.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
                          rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7575 (0x1d97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
        Validity
            Not Before: Nov  4 15:00:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a48503-5c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b1:f0:7a:a3:13:4e:9b:60:04:7f:2f:8a:29:
                    9c:d1:c9:3f:8a:7c:e6:b1:d8:37:7d:fb:7f:44:a9:
                    c0:f8:1d:90:f0:ad:c2:7b:26:3a:e4:3f:81:b9:16:
                    49:77:7e:15:4d:81:d0:78:31:2b:a2:f6:a5:8a:19:
                    74:b5:d1:bd:ab:3a:4f:59:b9:cc:8f:fd:83:11:a4:
                    66:ab:8d:5d:c2:c5:d6:80:3e:6c:a8:dd:62:1c:32:
                    82:28:24:c5:4c:c8:d8:4c:13:77:81:e7:26:59:62:
                    5f:7e:97:9e:fd:04:d5:0e:83:8f:ab:82:c2:37:89:
                    94:54:07:25:90:9a:25:8c:2f:17:bd:6d:aa:2b:50:
                    fe:66:60:6f:90:46:a2:94:9a:33:c7:3d:d5:52:7b:
                    74:23:43:43:3c:bf:b4:c8:b6:c8:d8:b4:f2:f7:65:
                    b2:e2:12:fe:0a:13:b7:1f:44:aa:1b:78:78:ca:6b:
                    d1:6e:72:13:2f:ec:2b:09:48:f5:e3:38:6d:3c:dc:
                    43:57:21:fd:cf:72:38:1b:92:f0:ea:64:f8:69:1b:
                    56:4e:54:d8:ee:62:18:23:07:1f:1b:7c:ce:b8:9e:
                    89:74:ed:85:b3:55:34:a6:a3:7e:cf:2d:f6:89:20:
                    48:8d:3f:92:61:1c:22:66:6e:5a:28:4f:86:0b:b9:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0E:77:C8:41:6E:09:0A:43:16:08:5D:C1:28:62:C5:A2:2E:0C:71
            X509v3 Authority Key Identifier:
                keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/E1B073B689F011EABAEDCE2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:35:db:0c:17:53:be:e0:a1:38:b1:76:2f:24:5c:1d:30:3e:
         2a:82:71:a5:4c:10:c5:f3:49:e0:23:6f:b3:c2:58:57:d6:9f:
         27:bd:f2:ca:f3:ee:aa:35:43:f4:91:f3:ed:08:b0:9b:f0:34:
         09:e4:77:02:b5:ae:5a:7c:b0:ba:85:ca:2f:45:09:df:40:3f:
         e1:b5:c2:c9:44:e4:9f:f6:af:57:6a:94:18:39:e7:a7:28:71:
         1b:e8:40:1c:7a:54:6c:5d:26:fa:e5:0f:96:d2:3a:17:4d:49:
         9d:5f:78:e8:f0:95:fa:13:e0:fc:77:f9:33:69:97:ce:ce:da:
         24:a7:de:96:1a:eb:0e:57:db:2d:11:b3:95:d5:e8:eb:2e:58:
         3f:ad:6e:48:ac:76:f0:eb:46:83:0c:7a:b6:d4:88:4e:fd:a9:
         cd:8a:d2:8e:df:65:96:f3:35:8b:2b:37:c4:bf:92:d2:7d:22:
         2c:8a:8d:f8:d1:fa:49:c3:0a:95:cf:46:dc:a6:d7:04:a4:f2:
         de:09:e2:fb:76:8a:8e:aa:74:73:e0:77:ed:b7:0d:2f:f5:2a:
         7b:0c:02:14:06:93:bd:e7:e3:46:0e:04:d5:d3:ee:a9:f1:8d:
         23:55:fe:2d:3a:a4:68:87:db:1a:c8:f1:3e:bc:fb:46:a0:2c:
         40:28:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:21 2026 by rpki-client