Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
File:                     B772717A9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier:          q/iv6RcQ/74JEaD7kwvH2MikNLf4Ixsi6LvUAPC5X4Q=
Subject key identifier:   54:B8:2F:4B:A8:6F:1D:D8:26:30:54:40:CC:4A:99:AB:6D:5D:CA:E1
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       023D
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
Signing time:             Wed 09 Sep 2026 07:05:15 +0000
ROA not before:           Wed 09 Sep 2026 07:05:15 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        61.16.40.0/21 maxlen: 24
                          202.52.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 03:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Sep  9 07:05:15 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6aa1052b-7a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0e:54:b2:1e:a5:2f:3c:6c:9d:4d:97:00:5c:
                    0f:cb:84:2b:70:0d:1e:1e:b0:61:e6:a6:f3:bd:e4:
                    e2:79:6f:a3:6f:0c:5c:64:1e:3a:1b:f9:97:07:2e:
                    5e:a9:6f:53:dc:4a:52:f1:86:76:b5:23:8b:b3:48:
                    e7:98:b6:f2:fa:91:08:e1:79:40:9a:10:93:b6:55:
                    58:be:72:2f:a6:e6:1a:f1:7c:87:75:f8:a4:f6:9b:
                    7c:a7:5d:8a:1f:c4:08:74:b8:6f:ca:e6:2a:61:2a:
                    0e:3c:f9:1b:7c:5a:86:ca:3b:13:a8:2a:80:27:e2:
                    c5:e2:af:40:a7:5e:11:cb:bb:db:f7:16:93:3b:aa:
                    8c:e2:9f:6f:21:ca:ce:99:cf:50:fe:73:cc:46:77:
                    71:78:b9:d5:55:2f:b7:da:0a:dc:44:a0:32:ae:23:
                    e9:94:eb:2f:ac:19:11:4f:23:bf:02:c7:2a:49:40:
                    8f:e1:16:ce:a1:f7:e6:4e:cd:59:86:5f:68:98:07:
                    97:d9:03:78:ff:a2:f9:d7:84:f5:45:60:ee:f0:a7:
                    57:3f:8a:ed:bb:27:5c:30:95:09:ca:a5:4c:cc:0f:
                    67:79:4a:42:0a:71:46:29:7f:bf:10:de:bd:83:bd:
                    3f:3b:f6:e5:d6:78:53:e1:da:e4:34:1e:79:f2:3b:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B8:2F:4B:A8:6F:1D:D8:26:30:54:40:CC:4A:99:AB:6D:5D:CA:E1
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.16.40.0/21
                  202.52.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:34:bd:2d:75:18:43:22:7a:b9:6e:4e:dc:32:0e:eb:4e:
         eb:af:75:49:ae:8b:e0:b7:55:5c:5c:de:56:14:5f:ca:16:84:
         ed:c7:9c:31:62:35:4d:e6:c1:9b:4c:83:85:c5:e5:c4:8b:52:
         d7:de:36:ee:1d:4f:dd:5b:95:56:81:17:2d:9b:79:10:67:2e:
         bd:fb:aa:f9:46:85:0c:e2:2c:1d:23:76:01:d0:21:51:f2:58:
         0b:75:d6:53:25:a6:05:17:40:e8:ff:94:b5:7b:e3:f9:d3:73:
         a1:57:05:22:f2:ed:19:2c:eb:2f:37:37:5f:81:b5:42:e5:30:
         a0:aa:f6:e1:59:de:08:03:90:36:ef:1b:c1:11:6a:e7:e9:8b:
         74:a8:73:37:6b:7c:ff:ee:36:96:ee:60:16:9c:77:64:8a:b9:
         d3:c8:50:8b:8b:a0:35:aa:74:8f:a1:b3:3e:a1:25:3a:ea:c8:
         1f:9e:8e:32:d2:ee:2c:c2:20:de:d9:8d:a0:47:6e:44:e9:a3:
         b5:30:60:26:90:40:84:39:03:f8:68:b8:ad:f4:79:55:2c:0f:
         cf:0f:c9:43:1f:87:e4:d6:b8:78:70:64:29:a9:8c:3c:73:10:
         e2:f6:fe:bb:b3:16:39:4f:e2:37:d9:c9:df:e0:61:f2:92:5b:
         14:8c:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:34 2026 by rpki-client