Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/8CC07FC0047211F0A6541526C4F9AE02.roa
File:                     8CC07FC0047211F0A6541526C4F9AE02.roa (raw, json)
Hash identifier:          VXXRhTLok9KmSWKm9VOdzclE8xHVvdHguqGzdC82who=
Subject key identifier:   D7:41:3D:3B:7A:DE:4D:42:69:10:CE:07:04:EA:0B:F1:AB:ED:47:74
Certificate issuer:       /CN=A91A4287/serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
Certificate serial:       B3
Authority key identifier: 2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/8CC07FC0047211F0A6541526C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:06:08 +0000
ROA not before:           Wed 19 Mar 2025 03:30:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153644
IP address blocks:        163.61.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl
                          rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4287, serialNumber=2A45A41D60E2F104D3DD39C86F14BC5900883F4B
        Validity
            Not Before: Mar 19 03:30:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3f370-c868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:84:7c:0a:60:f1:df:df:86:94:7d:43:1e:7e:
                    be:c9:46:06:c7:a0:58:27:20:7f:94:d9:49:fd:31:
                    ac:78:a4:be:b4:fa:d2:f9:96:40:14:9a:2c:1b:79:
                    4a:a7:e9:f1:09:e3:55:78:5a:7b:59:31:da:21:08:
                    8c:42:8e:3f:85:ba:0f:73:53:ec:aa:05:9d:5e:00:
                    de:29:33:81:ee:64:67:23:cb:29:4f:6a:a6:2c:45:
                    86:53:e8:a0:ef:a1:38:19:be:e0:00:1c:ac:7b:d1:
                    d6:28:20:df:9e:36:92:58:52:0b:ef:f8:c8:a1:6d:
                    a1:12:27:a7:41:95:90:04:51:ae:18:55:86:f6:74:
                    67:1b:11:1e:93:c1:3d:09:df:ff:8f:e5:ff:dd:db:
                    a7:72:89:25:ff:8a:d4:29:3f:eb:b6:40:d3:23:fc:
                    b1:e4:e4:ea:3a:63:b7:61:29:11:47:6a:3d:99:cb:
                    56:9c:41:26:2f:0b:d7:ca:67:dc:26:af:b6:30:7a:
                    59:99:b1:13:82:81:04:83:ec:75:80:3a:1a:e5:b6:
                    96:a2:e8:84:68:18:cd:00:df:ff:ae:e3:a2:23:05:
                    ec:c0:83:49:64:70:cd:a7:d4:af:35:80:8b:cd:91:
                    ab:c0:f4:37:2e:0b:b2:65:45:2b:6f:8c:7c:83:cc:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:41:3D:3B:7A:DE:4D:42:69:10:CE:07:04:EA:0B:F1:AB:ED:47:74
            X509v3 Authority Key Identifier:
                keyid:2A:45:A4:1D:60:E2:F1:04:D3:DD:39:C8:6F:14:BC:59:00:88:3F:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/KkWkHWDi8QTT3TnIbxS8WQCIP0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KkWkHWDi8QTT3TnIbxS8WQCIP0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4287/37278C16046D11F0B77D0361C4F9AE02/8CC07FC0047211F0A6541526C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:3a:5f:41:37:94:d8:96:08:6e:56:65:08:ab:7c:60:9c:37:
         53:b0:3a:fd:17:b4:e3:54:e0:9a:90:07:df:7a:2d:47:c2:93:
         ff:50:09:fb:ce:26:ce:37:75:56:cf:ef:18:23:03:36:e6:97:
         96:59:8e:d5:d8:31:95:b4:41:b8:6f:70:cb:04:63:12:00:99:
         3e:a9:66:22:b3:7d:2b:fb:9e:9e:9c:7d:b4:5b:9e:93:39:8b:
         fd:d6:c6:7c:b0:d0:62:82:eb:af:51:03:92:95:97:89:36:3b:
         04:b6:39:43:e2:f1:d5:53:05:6e:27:d5:02:65:99:f4:d9:3d:
         4c:41:4c:05:f3:75:7e:76:1c:de:74:26:2e:de:90:71:4e:be:
         6b:2c:7c:04:c1:c2:d5:ea:3e:80:f2:6d:90:8a:d1:14:77:0d:
         58:ba:45:db:c4:66:c1:16:60:5e:4e:37:7f:28:be:76:ff:4d:
         42:20:49:e7:a2:4f:9b:1a:43:b5:97:5b:ff:56:98:bf:1f:b5:
         4f:6a:41:79:e3:72:5f:b4:e2:6c:03:ae:4c:5a:c7:3d:a3:2a:
         e6:dc:f4:e1:3e:62:32:f0:5e:d4:16:63:99:e9:9a:31:0f:dc:
         a9:98:c0:cb:44:b8:d0:ca:99:e1:ab:26:05:99:30:25:e2:c3:
         08:ef:f3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:59 2026 by rpki-client