Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
File:                     331F345A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          Rfvf6Vj64V/DcT+xX9bZ8JiVA8egzGFFRJ+JQllzS44=
Subject key identifier:   B2:86:BE:DC:89:B6:8D:0B:C1:50:BF:22:87:9B:20:07:A1:33:0B:8E
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       380F
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
Signing time:             Mon 30 Mar 2026 15:10:17 +0000
ROA not before:           Mon 30 Mar 2026 15:10:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135537
IP address blocks:        61.45.252.0/24 maxlen: 24
                          2401:4601:252::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14351 (0x380f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Mar 30 15:10:17 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69ca9259-b85c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:01:4d:ef:46:42:c6:79:3a:b2:a1:62:3f:3e:
                    9b:04:43:ce:03:2c:d8:83:cc:59:cf:c0:2d:00:0d:
                    e6:64:dd:e6:ab:72:23:47:55:a5:2a:d3:0a:c9:b6:
                    89:4d:a0:2a:c6:7d:31:0f:a7:cb:ba:e8:33:55:2a:
                    14:29:be:6d:ff:b0:1e:5e:22:f7:5a:8f:58:82:86:
                    d7:c7:15:50:62:97:2c:5f:11:ab:c6:8f:dd:36:ff:
                    0d:3f:26:83:b5:c9:62:70:14:5f:c8:c4:c7:ad:94:
                    bf:db:31:88:0f:ff:bf:d3:6a:6d:12:d1:51:4a:50:
                    9e:d4:79:2d:19:ae:24:a1:8c:d0:3a:44:75:26:a4:
                    b6:8e:e4:24:2a:b9:34:f2:f6:ed:64:f8:55:92:6c:
                    ae:32:c6:c5:fe:75:1e:e0:cd:77:cb:cb:35:3f:14:
                    cd:7f:4a:af:e1:53:cd:8b:64:5f:e5:50:96:ce:e8:
                    e3:8c:75:f6:a9:7d:2e:53:24:02:00:83:e8:70:e0:
                    07:66:8f:4e:d5:4f:ba:9d:18:5f:92:ac:74:05:d2:
                    35:d7:be:ac:48:44:a4:59:93:24:0d:10:8a:db:ef:
                    82:af:0b:79:ba:6c:3e:ed:21:eb:50:b9:63:2d:b5:
                    46:b9:99:4d:71:e0:1a:02:ea:b7:a5:24:f7:b6:fd:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:BE:DC:89:B6:8D:0B:C1:50:BF:22:87:9B:20:07:A1:33:0B:8E
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.252.0/24
                IPv6:
                  2401:4601:252::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:32:f5:27:5e:01:d9:e1:75:01:02:f6:72:d1:ff:29:ed:19:
         92:82:a1:80:cf:60:e0:36:40:fc:c0:fb:13:07:3e:f9:7d:d2:
         5d:02:0b:a5:66:75:b8:69:a0:c2:66:56:1c:24:cb:0f:0e:91:
         a5:e1:f5:55:49:a1:f1:82:42:1f:11:97:f2:d2:7c:34:1c:64:
         74:c0:11:54:b4:cb:91:b6:95:d4:7f:51:e4:d6:c1:18:10:31:
         a1:b5:b4:2a:3d:85:5c:47:c0:11:8e:0b:18:71:fd:39:91:4e:
         cb:51:1e:53:89:39:dc:76:44:9d:ec:6c:3b:ac:fa:01:d6:01:
         d2:43:fb:63:b9:25:32:99:03:b0:1c:b7:78:65:d5:98:33:c7:
         fd:26:d0:e9:4b:98:cc:b2:91:61:b2:42:ac:30:22:50:5d:0a:
         d0:4e:d0:75:a6:f9:a8:e6:b4:d5:27:50:ff:f3:73:06:ed:32:
         e4:aa:19:a7:d5:7d:52:72:dd:18:92:96:5f:9c:fa:79:58:65:
         ee:b5:a7:b7:26:ec:b6:1d:1d:67:98:2b:e1:27:9a:e6:09:07:
         68:59:15:67:12:23:13:5e:e8:52:1f:c8:1c:88:56:6e:55:13:
         07:b5:ba:b6:65:04:62:09:02:fa:2c:99:82:a1:01:4b:71:c8:
         b0:ce:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:36 2026 by rpki-client