Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa
File:                     A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa (raw, json)
Hash identifier:          j6kB/znry1d2/Ft1aG3hJw5izTeR4sJCRF3C0LvwT/M=
Subject key identifier:   1D:5F:8B:85:27:76:A0:D0:80:4C:BD:87:F1:F7:34:98:21:80:A2:63
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1C94
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:33:36 +0000
ROA not before:           Fri 20 Feb 2026 16:13:50 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     16838
IP address blocks:        203.144.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7316 (0x1c94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Feb 20 16:13:50 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47870-d206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1e:cf:fc:a8:2f:fe:0d:99:4f:68:97:93:3f:
                    5d:10:fa:e0:72:de:08:2b:88:dd:1f:d5:94:24:57:
                    0e:56:89:cc:8c:a3:85:38:19:62:79:80:2c:7a:ad:
                    3c:27:8d:25:f0:24:23:bf:ca:ed:c4:a7:36:5a:97:
                    da:c2:8e:16:b8:86:0a:cb:a9:e4:b5:68:39:82:cb:
                    bf:13:56:3b:08:58:62:08:04:c0:53:05:3f:83:03:
                    92:76:29:f9:bb:0a:b5:1b:42:dc:a1:49:c0:d6:ed:
                    4a:b8:ce:e8:6b:8d:84:43:fd:55:08:d5:5b:f1:f8:
                    ce:f6:18:fd:7a:c9:81:85:73:c1:9a:a2:f8:c8:83:
                    08:ec:e9:d5:39:cc:8b:43:9b:b0:04:16:e8:35:c1:
                    71:b5:50:b6:ca:15:94:0f:80:bc:eb:14:86:21:10:
                    d1:2e:19:f9:47:cf:a2:68:12:84:3a:a0:a5:4c:dc:
                    ba:11:55:75:6a:2d:28:ac:ae:98:0a:b6:5f:9b:1f:
                    2e:39:a3:0a:13:56:3f:0e:02:43:61:70:14:9a:49:
                    c7:39:6b:d8:df:95:e7:c1:46:dd:b4:11:a9:63:c2:
                    de:1d:30:eb:94:9c:fa:a0:0f:59:49:b9:8f:76:1c:
                    aa:7c:e0:71:ff:75:02:12:0b:94:16:a6:fa:37:47:
                    2c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5F:8B:85:27:76:A0:D0:80:4C:BD:87:F1:F7:34:98:21:80:A2:63
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/A61100A4C0AF11F0BCC2CE7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.144.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:51:f5:fc:71:f5:a7:16:e8:ff:09:1c:bd:4c:2b:22:a6:cd:
         f3:91:48:14:6b:b3:01:8a:4d:35:d3:e3:e5:fa:ac:3d:09:63:
         c4:fd:39:ad:82:83:e6:49:d0:d0:16:a2:92:2c:f0:aa:44:7b:
         5c:43:26:7b:a5:42:45:96:7a:20:ab:b6:7d:dc:47:f2:99:3a:
         30:b1:a7:2f:a8:a6:31:55:76:cd:8b:c0:d8:d6:10:e4:b3:73:
         7e:e2:2b:35:94:20:aa:88:10:41:bb:54:35:7a:f6:08:c2:31:
         48:db:0c:c4:5d:12:8f:46:57:3d:de:d3:50:37:10:65:5a:3a:
         72:b7:e1:4e:d0:9a:aa:40:d4:a4:7b:52:f2:c7:38:c8:fb:25:
         ee:da:1e:20:48:1d:d1:35:a4:1e:0d:46:3a:5a:02:45:49:1f:
         66:10:eb:da:d7:4b:44:2d:0c:c4:89:e0:d5:78:6e:f0:af:01:
         f6:29:4e:3c:71:de:30:a8:2f:a3:43:8e:07:d5:21:63:e4:e8:
         4c:09:49:3d:0b:1e:cc:a3:4f:91:ad:d3:8d:53:80:64:88:5a:
         ba:e4:77:25:a0:56:83:af:2a:6f:25:0d:af:0b:b3:6b:77:9c:
         ba:35:04:e4:1d:25:04:cc:05:cb:12:06:7a:22:a0:c4:f3:10:
         a9:3e:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:51 2026 by rpki-client