Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/561D611CF05411F083286E06586F56BC.roa
File:                     561D611CF05411F083286E06586F56BC.roa (raw, json)
Hash identifier:          Pzy68Gxe7Cgy7ZMSa/XSvfRVRJvhlPPH9RiVHUl4ol0=
Subject key identifier:   73:D7:33:A9:F1:2B:49:66:D8:5F:F1:46:5C:C2:5C:A0:5D:4F:E6:6B
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       0A31
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/561D611CF05411F083286E06586F56BC.roa
Signing time:             Sun 01 Mar 2026 16:31:46 +0000
ROA not before:           Tue 13 Jan 2026 07:49:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137396
IP address blocks:        103.151.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
                          rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2609 (0xa31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: Jan 13 07:49:06 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a469f2-5797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e5:80:0f:6e:85:07:36:83:e1:c4:f8:0f:71:
                    04:5c:2f:13:fa:9c:b3:a4:3a:62:54:4a:5d:42:65:
                    5d:fb:4a:28:8b:eb:c4:70:4b:a3:aa:fb:90:15:06:
                    df:e7:9c:d8:34:fb:79:27:1d:8c:b6:86:48:0a:f7:
                    c7:39:8b:f0:cd:5b:48:12:b0:ae:9e:4a:34:ed:b8:
                    e3:dc:54:6a:62:bd:0a:18:cd:98:4c:ba:bf:6b:6a:
                    a0:2a:b6:5d:96:66:d8:c0:7d:7b:de:3b:ab:41:01:
                    20:ca:ea:29:85:05:03:b5:6d:21:25:18:a6:45:1e:
                    a6:5e:b7:88:13:b0:29:ba:80:a5:c9:5f:be:d5:70:
                    53:10:55:1e:0d:58:c8:93:00:62:0e:04:02:60:16:
                    a5:7d:0a:7d:89:77:02:7e:8f:45:73:8e:80:13:e2:
                    58:45:db:8c:0b:e8:dc:7e:4c:29:94:99:2e:ad:7b:
                    43:93:4b:4b:c8:64:93:50:24:7d:28:71:c6:5f:61:
                    18:30:4f:fb:63:81:af:99:aa:fd:71:3a:35:b9:05:
                    c1:54:e8:db:d5:df:4f:19:b8:9e:82:b9:f7:ba:d6:
                    5b:72:e9:00:ef:5f:1a:8f:e8:11:46:1c:14:0c:35:
                    c6:cb:63:d9:8b:3f:52:13:0a:5c:91:e4:d4:67:f5:
                    75:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D7:33:A9:F1:2B:49:66:D8:5F:F1:46:5C:C2:5C:A0:5D:4F:E6:6B
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/561D611CF05411F083286E06586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:ac:bc:73:69:3c:a5:b1:eb:8c:c0:42:60:87:a5:0e:c8:
         2a:91:9a:57:15:ac:bd:40:c5:dc:ee:3e:a5:e8:2f:ac:67:21:
         bf:c3:c3:fb:fe:2f:ab:ff:36:70:80:24:b0:1b:b5:15:dc:de:
         8f:18:d2:a5:33:09:1b:54:bb:ca:5a:1f:d9:ca:17:3f:b0:0b:
         c6:58:f6:04:d8:66:bd:b0:b9:d2:a1:73:45:c5:da:60:27:3c:
         c2:55:dc:07:d6:e4:7f:90:49:68:07:b1:c2:66:d6:68:f7:a5:
         be:a6:79:eb:2c:34:d9:aa:d7:4c:88:19:04:07:6e:ba:ac:8b:
         ef:48:05:3e:fc:36:05:9e:e0:3e:a2:fe:a4:67:5f:2f:8e:3f:
         84:75:f2:00:49:fc:8d:87:68:3a:28:10:ca:31:ae:fe:5e:ea:
         40:6d:12:3c:f6:60:42:d2:0e:00:ca:db:2f:b2:3c:9d:72:b5:
         5f:39:70:5c:e0:cf:66:e4:79:3d:63:13:0a:01:08:01:97:22:
         a4:0f:be:75:1b:96:74:4e:c9:c1:72:85:db:01:ae:6a:fb:22:
         2c:24:0b:39:2c:4c:32:fc:31:6e:ee:f2:7e:52:05:ed:15:c1:
         0a:d1:21:4a:1b:4a:02:22:b1:95:c1:79:04:b6:2e:b0:e0:1d:
         c8:13:70:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:32:55 2026 by rpki-client