Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa
File:                     DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa (raw, json)
Hash identifier:          CcVlc6wL2GiWP8wBMxy/KlX9aZ2gV+OfmnUFRHuWX20=
Subject key identifier:   CD:A5:0C:46:7B:C5:36:4F:BD:0D:12:73:45:16:B0:E4:DD:62:7E:EC
Certificate issuer:       /CN=A9180838/serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
Certificate serial:       D3
Authority key identifier: 53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:31:40 +0000
ROA not before:           Wed 11 Feb 2026 06:28:33 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153560
IP address blocks:        163.61.19.0/24 maxlen: 24
                          2401:eb60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl
                          rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180838, serialNumber=53EC8F4F10A94064462823AA299BB286600EDF09
        Validity
            Not Before: Feb 11 06:28:33 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43fbc-ba29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:2e:e7:96:85:0b:49:2c:39:fe:c9:78:a3:
                    6b:1c:93:f3:b3:f8:10:22:42:37:92:63:fc:16:c5:
                    5e:e1:d8:45:2e:7b:0f:92:57:06:f6:85:7e:59:63:
                    28:52:a8:55:7b:26:d8:8c:e7:e3:b6:8a:bc:22:d3:
                    57:7b:d1:c7:17:ee:e3:02:56:db:b0:25:0e:ce:f1:
                    de:47:d0:17:ed:19:d9:5d:7b:46:d1:78:43:d6:52:
                    f1:86:9d:fe:a3:fd:b3:44:c1:fc:80:91:08:30:4a:
                    c7:47:ce:00:11:42:84:93:81:dc:a4:1b:76:a4:9c:
                    2c:7b:bc:ff:22:31:53:46:53:2f:eb:23:59:31:09:
                    1d:3c:4b:d2:48:40:a1:fb:8b:a3:3a:75:0e:ff:25:
                    b3:7d:c0:f7:94:fc:3f:f6:b1:29:8b:77:5d:fc:d4:
                    1f:ba:88:7e:44:69:2d:e0:6c:0b:4c:8d:eb:c9:2f:
                    03:3a:f9:fa:f8:0f:d1:7a:73:6f:03:9f:95:4d:2b:
                    23:b6:c7:a9:60:31:aa:f2:48:5c:68:05:a1:0f:96:
                    8c:e9:40:0b:4b:9c:c6:57:80:44:68:62:c7:f5:84:
                    de:2f:29:97:58:22:7a:15:d0:73:2a:4c:6c:84:9f:
                    19:3c:8a:7f:49:ef:60:7d:5f:83:e1:f5:54:e9:f6:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A5:0C:46:7B:C5:36:4F:BD:0D:12:73:45:16:B0:E4:DD:62:7E:EC
            X509v3 Authority Key Identifier:
                keyid:53:EC:8F:4F:10:A9:40:64:46:28:23:AA:29:9B:B2:86:60:0E:DF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/U-yPTxCpQGRGKCOqKZuyhmAO3wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-yPTxCpQGRGKCOqKZuyhmAO3wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180838/0D19957AE52A11EF8F4ADF19C4F9AE02/DB1C7FA0E52F11EF8A7DB63DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.19.0/24
                IPv6:
                  2401:eb60::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:bd:e6:ad:9a:f9:15:47:fd:76:f5:e6:34:2a:7d:5b:ba:a8:
         42:16:3a:80:8e:e8:93:48:8f:14:c6:ec:8d:27:dd:17:90:19:
         f8:e6:b5:02:a3:de:62:0e:82:97:b9:42:56:9f:81:6a:d8:70:
         db:73:1e:0f:49:29:4d:37:d1:bc:32:77:ea:74:22:cc:09:80:
         dc:9e:a6:91:b1:f9:e1:63:75:12:f6:3a:0f:ba:5d:40:3a:e8:
         3f:2a:9e:85:75:e3:60:87:5c:0b:b0:be:20:a1:8c:ff:f9:50:
         e4:18:ec:01:e3:89:a4:ef:f7:a6:db:be:44:d0:91:0a:92:02:
         9b:1e:19:73:ab:0f:89:c3:c9:1e:93:81:79:e4:9a:36:d2:f9:
         b4:04:51:59:b3:f9:99:db:fc:66:c2:ca:4f:a4:ba:23:c9:10:
         d0:f1:84:13:a2:2b:0e:87:9f:bb:82:aa:37:e0:ed:ae:ac:09:
         58:b0:0f:c1:0b:ac:c3:a7:17:9d:60:6c:dc:a9:dd:ff:f7:76:
         ed:3e:49:97:38:b4:7c:7b:d5:e1:30:44:85:84:6e:ae:29:53:
         71:94:0c:45:a7:c1:00:49:6a:78:d3:51:18:f6:5c:e9:82:23:
         8a:13:db:13:31:5c:8a:9a:40:cc:97:bc:bc:b6:21:2d:3f:fc:
         af:f5:21:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:55 2026 by rpki-client