Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
File:                     328EDB76383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          +nqzlPuV0MHTJ+4S2S0Nu+k/HevxF1u4cYkYwAyCCHg=
Subject key identifier:   48:7E:56:E8:03:BB:3A:6C:8C:82:9A:1F:79:28:97:A2:1C:72:4B:0D
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       380E
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
Signing time:             Mon 30 Mar 2026 15:10:14 +0000
ROA not before:           Mon 30 Mar 2026 15:10:14 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135536
IP address blocks:        61.45.251.0/24 maxlen: 24
                          2401:4601:251::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14350 (0x380e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Mar 30 15:10:14 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69ca9256-ab92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:30:6e:db:5a:a3:39:2a:6b:60:09:f8:bf:cb:
                    6e:8e:9a:0f:f4:fa:fe:6d:d0:28:c2:53:19:b6:78:
                    93:63:e2:80:b6:1f:6a:17:b3:42:8d:3e:be:3a:fa:
                    f0:67:af:c7:fc:30:60:33:d4:be:e9:66:53:b2:4d:
                    ee:c3:6e:70:3e:c0:38:d4:ea:9f:74:dc:73:4d:f3:
                    d1:af:f5:75:5f:6b:6d:3f:6e:2c:12:85:de:11:ee:
                    7c:61:ac:66:96:00:48:d0:5f:be:a5:0c:c9:0f:ec:
                    d0:37:15:14:ab:41:08:96:75:39:d8:29:8c:e4:9c:
                    5d:5b:da:e2:b3:3f:7b:e0:fa:62:94:39:ef:28:71:
                    28:70:3e:4a:0e:bb:76:1c:80:1b:ab:47:4b:77:14:
                    ec:ef:db:be:c9:60:f0:7a:a0:5c:3c:76:f7:1e:55:
                    fb:17:d5:bb:b1:c0:b5:ad:84:48:e6:68:f8:cc:07:
                    68:17:43:ff:03:f7:ab:e7:a9:47:f5:13:72:cb:98:
                    15:f7:b8:ff:1a:e7:a1:e4:41:66:64:93:c8:61:bf:
                    94:30:6e:07:ac:d1:69:3d:60:b6:d6:2a:4e:89:96:
                    89:06:c9:13:b7:d6:28:42:cb:d8:04:94:29:bb:95:
                    a7:db:fb:c4:ef:a6:b0:39:50:8f:8c:66:fd:d2:d2:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7E:56:E8:03:BB:3A:6C:8C:82:9A:1F:79:28:97:A2:1C:72:4B:0D
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.251.0/24
                IPv6:
                  2401:4601:251::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:4b:e7:4d:f7:3e:70:de:34:7a:a4:d6:d7:23:5d:0e:59:b6:
         3a:c6:4c:98:6d:4e:3a:93:36:15:c3:b8:68:49:0b:f6:3f:d5:
         4d:ca:d6:15:91:e7:0e:7a:ef:54:f7:dc:a9:af:14:78:90:1f:
         d8:98:c3:76:1a:3b:1d:8f:98:58:2e:61:52:d1:d6:fd:f8:b7:
         5c:df:d3:d5:48:1a:64:d7:7c:35:b6:f1:f1:16:89:7b:7e:73:
         a2:f0:b0:ed:d7:fe:4f:56:5d:58:43:44:78:02:2f:70:9e:11:
         98:08:91:0d:f4:07:48:ed:43:f5:bb:88:18:74:06:43:5e:97:
         6e:7d:41:71:78:37:aa:66:dd:53:ea:3a:79:9f:05:35:26:20:
         cf:22:46:6f:74:3a:b1:f5:27:1d:55:66:e0:e0:e0:38:07:8e:
         02:f0:5e:52:2f:b8:bf:f8:c6:aa:75:63:f9:2b:75:37:55:d4:
         ed:a4:3d:fc:d0:d3:25:08:d6:c9:6c:2e:76:61:76:4e:e6:41:
         a8:60:94:76:fc:f5:a1:33:ce:d5:dc:91:b9:4e:3c:dc:f9:84:
         87:ec:68:e7:a4:59:3c:b2:59:d2:01:f5:29:42:40:54:bd:0d:
         6c:93:32:77:fe:91:6a:ed:82:8b:db:ee:d3:d0:38:f6:84:83:
         36:4f:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:10 2026 by rpki-client