Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/04241E3222F011F0B021396DC4F9AE02.roa
File:                     04241E3222F011F0B021396DC4F9AE02.roa (raw, json)
Hash identifier:          pZ8heGX8vu4h/FA/NC03PV3GwdLiz3to6+22+csdrJE=
Subject key identifier:   01:AF:37:AE:9A:F2:BF:A1:1A:06:D9:B2:2C:BA:6E:2D:8C:C5:71:08
Certificate issuer:       /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial:       0101
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/04241E3222F011F0B021396DC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 06:40:59 +0000
ROA not before:           Thu 09 Apr 2026 06:40:59 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134886
IP address blocks:        163.61.96.0/24 maxlen: 24
                          163.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
        Validity
            Not Before: Apr  9 06:40:59 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d749fb-4725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:8c:ac:14:f4:6e:77:4b:7e:89:0d:70:0b:
                    39:13:73:ee:e6:a3:48:84:fb:72:44:d2:8a:98:5e:
                    87:55:d4:bf:89:f6:1b:51:18:d8:b0:1f:ea:dc:d3:
                    f4:47:a3:8b:ac:dc:85:d8:2f:72:1c:75:f6:ec:24:
                    1c:28:fd:0b:3d:f0:ea:31:cc:35:83:3b:0d:b2:76:
                    a4:a3:4a:24:1c:80:f7:d4:b4:25:da:74:51:10:35:
                    35:0a:42:be:bd:2a:cf:92:d1:d2:90:44:6d:79:1a:
                    b8:03:ad:81:de:f3:b8:fc:f6:13:15:92:1a:28:a7:
                    fa:58:9f:60:54:3e:33:34:91:ff:af:2f:a7:46:90:
                    09:a6:7f:39:c6:6a:c0:2b:bc:4a:b0:1b:8d:15:dc:
                    57:37:f0:26:9e:ac:65:78:d7:f5:06:20:d5:a7:b1:
                    04:f9:25:8f:80:1a:e8:b3:35:41:91:d9:a4:b6:26:
                    c4:7c:ce:7b:eb:c7:32:dc:66:70:4d:01:c1:ad:b7:
                    97:87:cc:4b:81:44:72:63:1c:7e:6e:c1:bd:5f:1d:
                    d9:54:89:6b:2f:de:af:09:5a:ab:d2:db:2f:a1:b8:
                    95:69:9e:e8:6e:6e:4a:4f:d6:c7:f4:1a:36:1a:af:
                    aa:e6:00:35:26:69:6e:db:a0:85:0a:ba:67:58:01:
                    cb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:AF:37:AE:9A:F2:BF:A1:1A:06:D9:B2:2C:BA:6E:2D:8C:C5:71:08
            X509v3 Authority Key Identifier:
                keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/04241E3222F011F0B021396DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:31:cd:4d:36:b9:a4:6a:69:17:0d:25:02:32:f7:17:cb:d5:
         81:47:e1:c9:c5:41:e4:2e:a4:ca:b2:29:c6:78:78:60:1a:4f:
         9a:a4:9f:fb:a7:2f:92:3b:f7:9a:4b:63:56:e3:04:46:b3:6b:
         cd:fe:1b:00:40:45:ea:d1:08:61:25:0a:ef:0a:ed:f9:a7:7b:
         40:bf:bd:49:8e:59:bf:ac:7f:12:a9:20:4e:22:5a:f3:a9:e9:
         ad:00:05:5a:16:6b:4c:22:4f:cf:e2:37:c6:b6:3c:99:c7:fa:
         eb:89:aa:05:44:90:4e:1d:70:1f:56:3f:b9:35:4b:81:3a:af:
         2c:59:7d:ee:2d:c8:74:7b:61:8f:cf:27:06:a5:ef:d9:10:fe:
         17:d3:8d:6f:97:84:7b:06:ee:96:4e:29:81:d1:6a:db:4b:54:
         8a:c8:50:c9:69:2d:8b:20:7f:91:46:05:51:15:1a:e2:71:91:
         99:e7:32:0b:b7:e7:8b:db:36:40:2a:a1:2a:f2:9e:64:cc:51:
         43:53:9a:20:40:2f:69:1f:90:d3:7a:a4:0d:e5:64:d3:aa:9e:
         96:f7:9c:d6:97:59:74:91:dd:06:3e:22:20:6d:6b:c7:d7:06:
         90:e3:e2:fd:60:f3:f0:0d:0d:cd:d4:ef:f5:b5:31:64:35:66:
         49:e0:41:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:32:43 2026 by rpki-client