Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa
File:                     DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa (raw, json)
Hash identifier:          qXMDok12/n7KD+1l0SWkgFg5isWZPXXLSlRzH4KSlPM=
Subject key identifier:   61:BB:05:B2:C8:54:AC:2D:8D:8F:67:10:4D:A3:7E:64:5E:C5:25:3D
Certificate issuer:       /CN=A916A4BF/serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
Certificate serial:       B5
Authority key identifier: ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:14:52 +0000
ROA not before:           Sat 21 Feb 2026 06:26:01 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        210.81.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl
                          rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A4BF, serialNumber=EDBC19FEA1FCB66B4FAA0A22976EE1350B37DBEB
        Validity
            Not Before: Feb 21 06:26:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a457ec-36f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:5d:c2:89:1b:bf:a9:8f:2a:b0:5a:df:d9:
                    21:cd:ac:16:6c:e9:1b:0f:a7:46:e2:42:ff:f0:9b:
                    c2:6e:5c:3e:7c:36:52:bb:22:c0:3d:fb:73:2a:86:
                    e2:e7:f5:29:7c:05:09:20:26:d5:b8:a8:6d:c6:de:
                    21:e2:4b:7b:e7:e3:ca:9c:8c:d5:75:9a:52:3a:a4:
                    8a:2c:31:6e:bb:40:d5:68:62:f1:2b:cc:88:6e:74:
                    bd:06:96:63:80:6d:00:18:42:d0:b4:cd:40:63:70:
                    e3:e0:18:70:f4:d0:ca:09:ef:b8:be:89:fe:a2:00:
                    85:3b:da:87:9f:06:b4:b4:4b:f0:70:0c:c3:2a:ee:
                    32:a3:c9:0d:de:2b:67:2c:a2:16:0a:76:58:01:1e:
                    32:71:76:81:7b:e9:e4:a9:ed:8a:8f:85:8c:f0:ec:
                    e8:a3:a3:3d:b1:71:c6:29:f0:eb:97:47:43:3d:52:
                    29:af:e2:e8:7d:05:6c:31:c3:af:ff:d8:74:f0:ba:
                    f9:85:4c:3d:97:09:5a:e0:c9:56:9e:57:84:fe:95:
                    cf:90:66:00:7f:4e:e2:57:82:6d:5f:cd:d4:29:c5:
                    ee:09:34:2a:b4:e3:cc:8d:4a:46:dd:a5:cc:ba:e5:
                    8b:f2:a7:9a:9b:02:18:51:da:0b:c6:51:89:7f:1a:
                    16:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BB:05:B2:C8:54:AC:2D:8D:8F:67:10:4D:A3:7E:64:5E:C5:25:3D
            X509v3 Authority Key Identifier:
                keyid:ED:BC:19:FE:A1:FC:B6:6B:4F:AA:0A:22:97:6E:E1:35:0B:37:DB:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/7bwZ_qH8tmtPqgoil27hNQs32-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7bwZ_qH8tmtPqgoil27hNQs32-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A4BF/01BB601610A211F0996E9D65C4F9AE02/DEB9B2E01FAE11F0BD4A6886C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.81.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:fe:13:4c:14:53:f3:ca:f0:ab:bc:2d:90:95:f6:e3:dc:59:
         a3:3f:7e:f9:2a:31:73:d2:30:76:56:2c:c2:b5:fc:32:68:e1:
         fa:e7:c8:89:58:a1:09:63:cb:cb:af:b7:64:14:00:9a:d3:73:
         6a:e9:da:80:78:63:d2:ed:97:95:dd:ce:6b:27:d3:b3:9f:01:
         fd:24:dc:6a:8e:3b:e8:98:a4:ac:d2:ed:3e:71:28:ef:68:d4:
         f0:e4:83:3f:17:56:00:8f:7b:70:20:d3:09:41:81:86:d9:4a:
         28:2e:b9:7e:6b:5f:d0:ea:10:5f:d5:b3:36:a0:44:82:c7:ad:
         32:25:17:15:42:8c:4a:ef:be:e3:47:d6:ac:08:24:24:68:48:
         dc:95:83:ef:11:64:6d:a9:a1:56:dd:44:64:d5:11:7d:de:3d:
         ea:71:6b:9a:d4:3d:9d:47:96:fa:2c:aa:6d:87:d8:6f:93:59:
         f7:75:c4:82:62:5c:b3:7a:96:7e:ab:76:22:7b:f5:bb:c0:11:
         51:a8:b4:62:71:6c:9f:91:b9:20:ae:34:a5:6d:50:d1:cc:7b:
         6e:37:cf:28:8f:43:dd:d6:34:95:21:d8:cb:bd:42:f8:20:f8:
         29:8e:89:f7:50:08:23:25:8f:bd:ea:53:13:42:81:78:4e:0e:
         9f:19:f1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:42:57 2026 by rpki-client