Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F715DFB6F58D11F0BCCF7FE5756F56BC.roa
File:                     F715DFB6F58D11F0BCCF7FE5756F56BC.roa (raw, json)
Hash identifier:          PeJla8eoBWwUJgQxEstU1E2su1skE1min+boSaLfihI=
Subject key identifier:   A5:EF:BD:63:21:DC:F2:7A:84:6C:10:E8:A3:35:FF:82:DF:AE:9F:66
Certificate issuer:       /CN=A91D983B/serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
Certificate serial:       43
Authority key identifier: B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F715DFB6F58D11F0BCCF7FE5756F56BC.roa
Signing time:             Sun 01 Mar 2026 06:07:32 +0000
ROA not before:           Mon 19 Jan 2026 23:24:13 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     7604
IP address blocks:        202.74.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl
                          rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:04:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D983B, serialNumber=B316C01B7B754314E2F18F737A7D7D89ACAB7E68
        Validity
            Not Before: Jan 19 23:24:13 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d7a4-ea41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:81:6c:ef:37:a1:5f:36:e0:82:46:af:bb:
                    8a:b0:1e:61:d9:7b:2b:58:c0:2b:d1:7a:0b:70:0e:
                    82:2c:dd:54:f3:15:f4:66:0b:d7:01:f6:96:83:c9:
                    0b:cf:29:c0:ed:a4:3f:df:9e:e0:cd:1e:c5:9f:c9:
                    ed:44:68:99:50:37:c1:96:9a:68:58:00:17:38:a2:
                    d6:fd:0a:85:aa:ca:10:5f:0a:b8:c5:b3:b8:82:54:
                    83:a5:55:16:1b:e7:a1:5a:1b:fb:a1:eb:14:b2:35:
                    a1:2f:8a:21:c1:c4:b3:75:61:a5:3c:bb:fb:f1:c4:
                    7d:5a:a2:b8:44:e0:fb:92:c6:b7:dd:7a:a7:e2:d9:
                    4c:37:6c:12:f0:a6:5e:e3:6a:2e:6e:82:cf:bf:0e:
                    d8:b3:bf:8f:7b:aa:d5:d8:a3:b0:31:50:12:3a:be:
                    92:7c:2d:00:cb:d4:0f:e4:65:3c:54:e7:3d:bd:b1:
                    bc:a2:c2:de:6d:2b:31:83:20:c6:a0:2a:b3:b9:78:
                    19:3e:4d:c2:44:6e:9f:e8:ad:6d:40:a9:c4:71:dd:
                    b2:35:35:74:0e:63:a8:6e:3a:22:bc:14:7d:6a:48:
                    33:82:b3:87:0c:74:aa:6a:51:84:f0:f2:aa:6e:0d:
                    90:60:e8:aa:a0:ee:bf:84:b4:28:6e:c1:5b:8d:5c:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:EF:BD:63:21:DC:F2:7A:84:6C:10:E8:A3:35:FF:82:DF:AE:9F:66
            X509v3 Authority Key Identifier:
                keyid:B3:16:C0:1B:7B:75:43:14:E2:F1:8F:73:7A:7D:7D:89:AC:AB:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/sxbAG3t1QxTi8Y9zen19iayrfmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxbAG3t1QxTi8Y9zen19iayrfmg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D983B/DFAF9992CC0311F0B1E25B41C4F9AE02/F715DFB6F58D11F0BCCF7FE5756F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:58:e8:40:a2:7d:55:6c:c1:f3:2a:6f:88:eb:ea:15:57:75:
         af:6d:af:c2:8b:f7:fc:7b:c7:0f:2b:7b:67:c3:e8:85:09:12:
         68:d7:60:27:ef:cc:ba:17:4c:65:31:de:3d:a7:5c:d1:87:0e:
         fd:18:26:80:cd:32:f0:c5:ec:44:f1:ec:62:62:6c:09:b5:37:
         2b:3a:37:ef:75:c8:2b:a2:5e:fb:04:b0:09:04:cd:1b:c2:d0:
         a2:b8:2c:78:1e:41:3f:77:39:43:87:a8:a0:87:3d:85:22:0e:
         f1:6a:b5:01:dd:d2:91:f6:84:2f:ba:d5:b5:64:96:dc:82:76:
         8d:9d:76:bc:3c:0b:c8:58:a8:58:ac:82:54:18:26:ef:f1:91:
         4e:99:26:3c:91:74:03:a6:11:9e:df:55:ce:f7:45:e1:a1:54:
         6f:6e:34:5a:b3:59:91:b3:fd:31:d7:f6:71:d3:09:62:41:a2:
         10:8c:c4:ca:71:f4:8e:6b:8e:0b:2d:48:f0:fa:98:e6:b4:5b:
         d6:28:a3:fa:5a:f3:3c:7a:2e:bd:f0:ce:08:13:66:47:10:51:
         ea:5c:2b:ba:1e:6a:61:b3:df:0e:96:76:ba:6f:d5:e7:75:f4:
         15:07:73:24:a2:69:1f:c2:a1:a1:1d:af:e3:0d:9a:e5:4c:98:
         bf:3a:4d:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:21 2026 by rpki-client