Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/44A28FACEFEC11EF80EC123DC4F9AE02.roa
File:                     44A28FACEFEC11EF80EC123DC4F9AE02.roa (raw, json)
Hash identifier:          4GQaAPFet59BvpZ472l2KnHRT8Gyym+SHLBTiOsNMf4=
Subject key identifier:   B0:B2:FC:5F:79:D2:D3:E0:9A:B8:1C:7C:D4:1F:BA:7D:06:E7:31:69
Certificate issuer:       /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134
Certificate serial:       DB
Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/44A28FACEFEC11EF80EC123DC4F9AE02.roa
Signing time:             Sun 05 Apr 2026 06:40:38 +0000
ROA not before:           Sun 05 Apr 2026 06:40:38 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9294
IP address blocks:        163.61.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl
                          rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 06:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134
        Validity
            Not Before: Apr  5 06:40:38 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d203e6-93ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:34:69:22:74:e2:75:ca:6c:23:a0:11:24:bc:
                    3c:a0:b7:d4:a6:dd:cc:58:60:f0:a6:33:e6:3c:e6:
                    ac:66:01:1b:d8:ee:73:b5:a0:a7:e1:cd:1c:76:c0:
                    29:4a:68:90:05:df:2e:e2:50:c0:97:72:9b:6e:ad:
                    a5:f5:64:a9:52:68:fd:c8:e5:63:be:8f:61:55:4d:
                    a3:c7:06:f3:ae:db:f0:56:57:94:11:73:05:f8:88:
                    50:77:d8:3f:2f:7f:a8:d2:de:3c:ef:61:0f:81:1f:
                    c0:84:7a:a5:a9:20:5b:a5:f6:b8:ce:74:24:c8:38:
                    45:13:57:72:a6:74:ac:85:ab:89:58:ff:c2:19:b1:
                    93:03:9a:e0:d8:05:71:0c:73:d2:4b:90:29:30:8c:
                    ef:49:97:1b:98:94:1f:b9:6c:f8:53:6d:0a:39:94:
                    b7:ff:8f:10:50:58:42:9c:fc:8b:34:db:8a:55:ff:
                    e5:5f:16:76:b6:c8:ce:c8:b5:0c:89:33:8f:d3:5a:
                    40:15:01:da:e8:82:3f:e4:86:21:97:0c:22:a2:ac:
                    cc:ef:3d:8f:3b:bb:fb:a3:38:7f:7e:28:65:b0:b2:
                    c7:59:bd:18:03:d7:4e:7a:79:05:ea:ec:25:13:50:
                    11:58:15:a4:50:8f:0b:02:2f:8f:af:8f:8b:05:b5:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B2:FC:5F:79:D2:D3:E0:9A:B8:1C:7C:D4:1F:BA:7D:06:E7:31:69
            X509v3 Authority Key Identifier:
                keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/44A28FACEFEC11EF80EC123DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:cb:ac:3b:93:f9:7d:18:b3:9a:de:51:89:6d:34:5d:66:c2:
         fe:c5:c6:d1:fb:c4:0e:7f:f5:c9:f8:cd:fe:37:f3:bf:48:30:
         e6:50:54:1c:ae:ff:7a:3c:f6:bd:65:4a:02:8f:a4:e5:24:15:
         f2:7f:8e:5b:7a:23:bf:c6:42:43:80:54:e1:8d:ee:9c:43:fb:
         41:68:f9:98:56:c0:10:25:74:7e:bf:7c:cb:ee:9b:4a:ae:ca:
         92:39:3f:ba:77:60:2f:38:b2:56:bd:f0:90:92:0d:ca:73:0d:
         1a:d9:04:d9:fe:51:c6:14:c9:b6:c1:6b:75:b3:ee:65:63:88:
         70:d9:cc:1d:e8:85:4c:f5:8a:e6:6b:af:87:d2:a8:f0:70:30:
         68:e4:36:23:1c:73:f5:3d:3f:f5:b3:65:7a:7b:ab:66:62:5a:
         99:b1:7f:2c:8e:e2:b0:b3:75:31:41:5b:b4:a9:eb:74:51:23:
         dc:6d:83:5e:08:5c:95:0b:25:39:36:8a:cc:7e:68:ca:52:db:
         5a:84:f9:06:a0:62:bc:43:5f:09:12:d1:32:2a:c6:86:fa:7f:
         49:54:36:1e:e8:11:26:92:03:48:5c:43:a8:95:52:a1:3c:05:
         e8:54:3e:49:95:eb:e6:b5:a4:d0:1d:45:71:b3:1a:f5:43:53:
         ea:fd:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 16:35:53 2026 by rpki-client