Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/83BE8BCCCB2F11F0B833997FC4F9AE02.roa
File:                     83BE8BCCCB2F11F0B833997FC4F9AE02.roa (raw, json)
Hash identifier:          ozRQkKtjvdOS/o7V2CSdawxsEV2/dOzqasi1mVS+uEM=
Subject key identifier:   FB:B9:87:F8:A9:CE:36:B2:7E:A2:95:6F:6E:5F:29:C5:10:2C:7F:D2
Certificate issuer:       /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
Certificate serial:       010B
Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/83BE8BCCCB2F11F0B833997FC4F9AE02.roa
Signing time:             Sat 11 Apr 2026 06:44:51 +0000
ROA not before:           Sat 11 Apr 2026 06:44:51 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153606
IP address blocks:        163.61.144.0/24 maxlen: 24
                          163.61.145.0/24 maxlen: 24
                          2001:df5:17c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:19:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
        Validity
            Not Before: Apr 11 06:44:51 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d9ede3-c63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fb:5f:dc:8c:28:57:99:cb:95:fa:06:e3:8f:
                    86:9c:c4:99:30:3d:f4:17:9e:76:05:17:02:aa:9a:
                    76:09:8e:ec:cd:c8:3c:7a:5c:f2:db:49:14:52:20:
                    19:b5:9c:73:84:06:3f:b4:05:b9:0e:53:00:34:39:
                    39:27:13:42:40:31:cf:34:d1:25:9c:2b:9c:b7:f9:
                    a1:c4:17:d2:67:7d:05:1f:1a:25:a1:59:0e:f3:3c:
                    df:d5:89:ad:5f:86:56:f6:9d:c1:bc:ea:27:1e:06:
                    99:ac:75:ae:3e:67:ed:48:13:16:42:9b:39:ff:13:
                    7e:de:ef:ca:48:c6:e2:6d:43:30:d9:d8:94:97:33:
                    a0:50:cf:b9:68:52:15:e6:a8:de:28:d8:53:0a:1b:
                    5b:e0:09:48:1b:45:6d:c8:61:e6:2c:0a:57:ee:6c:
                    fd:5c:f0:27:49:d5:2f:58:6c:83:d4:7f:74:60:c9:
                    6a:9a:20:f5:6f:bd:86:e8:a1:ca:a3:21:0e:51:71:
                    b6:05:87:40:ec:d6:3b:8a:1b:e3:b0:f1:e1:da:35:
                    e4:33:fd:d5:c2:02:18:97:d5:c2:6d:66:1f:b9:52:
                    39:6f:f1:8c:6b:b4:3e:d6:33:f9:28:64:17:97:8e:
                    e6:69:0e:4b:7d:f3:c7:45:f8:1d:06:0c:76:b3:60:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:87:F8:A9:CE:36:B2:7E:A2:95:6F:6E:5F:29:C5:10:2C:7F:D2
            X509v3 Authority Key Identifier:
                keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/83BE8BCCCB2F11F0B833997FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.144.0/23
                IPv6:
                  2001:df5:17c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:00:1e:c1:cb:87:49:6b:0b:8c:69:b7:7b:19:f9:d5:ad:cd:
         39:37:ea:7c:40:ef:1d:78:3a:b3:69:f1:ad:ad:65:e1:a8:c4:
         8c:cf:1f:2b:85:51:9e:b1:8e:e8:be:2c:37:20:0e:d0:1a:0b:
         08:c7:1b:69:a2:75:c1:17:a7:c1:ef:27:f2:c8:14:b1:c9:da:
         fa:42:79:bc:67:37:e2:34:89:59:9e:d4:18:4f:f7:ea:23:c2:
         48:74:cc:ae:2e:52:1d:53:9d:47:8f:22:9f:be:50:6a:17:c5:
         de:a2:ea:88:d2:22:c9:16:e7:e6:ce:71:46:32:5f:b9:98:96:
         95:bf:63:7e:76:1d:42:d7:8e:ce:66:8c:06:a4:24:14:82:a9:
         9f:c3:aa:2b:8b:86:0d:fd:b0:6f:54:33:71:a6:a0:f7:26:d5:
         cd:ce:7b:65:75:38:6f:f4:7d:16:bb:cd:69:89:8e:d9:71:b7:
         cb:12:9c:d7:1c:65:6a:e1:be:3d:4a:a2:3c:a4:3a:8c:ea:b8:
         74:ba:fc:6c:a8:75:ae:8c:03:75:f1:ea:32:6b:25:b1:b1:db:
         dd:97:77:0e:1d:ed:59:e4:ee:0a:05:99:d7:c9:0d:0d:fb:7a:
         ec:1e:c7:44:b9:da:b9:3a:94:1d:98:08:b6:3a:e3:ee:35:b5:
         c6:61:30:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:10:12 2026 by rpki-client