Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
File:                     331F345A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          c64Vl37mpYyYPtB+a7iS5BAfnlfof6VQdScRe1f9gTs=
Subject key identifier:   EA:5B:C4:F7:76:E6:E6:90:4A:8E:0B:5B:CC:E8:4F:77:4E:9B:F2:5A
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       3741
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa
Signing time:             Fri 27 Feb 2026 05:54:14 +0000
ROA not before:           Tue 30 Dec 2025 15:10:10 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135537
IP address blocks:        61.45.252.0/24 maxlen: 24
                          2401:4601:252::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14145 (0x3741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:10 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a13186-1c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ba:f7:5c:1e:d2:5f:bc:c1:ca:91:da:ea:4b:
                    89:1c:d7:cd:a6:6e:72:5d:df:19:0b:70:3e:97:38:
                    c9:66:f7:9a:b8:ea:f7:5e:d4:d0:f9:69:72:f8:33:
                    96:99:a5:67:08:74:ed:32:c2:8e:eb:f5:26:a4:41:
                    1c:44:63:f8:91:23:3f:c7:31:86:f9:ee:92:49:00:
                    d6:f2:3c:7d:c4:08:a5:9d:2f:aa:0a:c1:0a:89:2a:
                    a2:56:75:d5:8b:32:fe:fb:d5:95:89:4c:9e:85:c0:
                    6c:a9:46:c7:03:ce:6e:90:c5:f4:f4:ce:e6:fd:7c:
                    09:bb:c8:c6:af:dd:87:09:60:8d:42:6b:d8:c2:55:
                    93:60:c5:1f:46:32:9d:22:e2:8b:b9:fd:9c:24:3c:
                    1a:09:ca:7a:99:11:f2:1d:42:f9:3f:09:2d:13:b3:
                    ba:89:9f:41:3e:6d:a5:16:60:a8:b4:4c:b9:6f:28:
                    84:d0:02:32:cb:1a:31:b7:ba:ba:9a:29:64:94:cf:
                    36:4f:df:e9:68:84:93:b9:5b:77:b4:e0:68:94:4c:
                    a6:0e:f2:af:54:26:5a:36:e2:c5:df:35:4e:e8:d7:
                    93:39:54:7f:fc:8e:ff:fe:74:63:07:97:a5:78:03:
                    2f:bd:26:23:db:b5:90:e2:54:c9:ed:13:67:a6:8c:
                    69:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:C4:F7:76:E6:E6:90:4A:8E:0B:5B:CC:E8:4F:77:4E:9B:F2:5A
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/331F345A383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.252.0/24
                IPv6:
                  2401:4601:252::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:0d:46:0b:bd:86:97:6b:dc:59:a0:c6:2b:05:f5:53:17:89:
         03:8f:c4:fa:44:8e:3f:b4:74:30:e2:2c:60:10:9d:9b:b7:ba:
         81:7f:8e:3d:d6:1d:2e:45:98:9d:09:47:f8:d5:8d:3d:b2:9b:
         3b:08:21:02:57:4f:a3:be:06:f1:44:bb:6e:14:78:f4:3b:fa:
         af:bf:d9:44:5f:3d:98:b8:17:a4:45:c5:32:40:72:3d:35:bd:
         31:70:cb:66:b7:08:e0:27:c0:02:a0:7b:1a:04:f4:3b:62:a4:
         48:58:77:25:21:40:4e:8a:e8:f0:52:d6:66:3b:a5:3c:f4:cb:
         66:e1:cf:df:75:fe:62:f8:2e:b0:50:af:12:8d:98:26:c7:fb:
         71:69:33:5d:5e:73:c3:74:76:1a:c5:b0:a2:12:31:a4:92:16:
         df:90:36:d4:59:bb:d2:16:42:9a:49:88:3f:7f:e8:b0:67:82:
         c9:e9:68:ae:45:f4:21:3e:a5:2d:23:69:97:0a:e2:cd:21:31:
         a7:5e:93:0b:58:08:42:fb:cc:ae:0d:e1:32:8f:20:64:71:3d:
         67:c6:25:87:a0:d3:bf:73:36:ac:d7:3c:92:53:25:9b:27:9c:
         cc:a9:60:8e:4f:36:82:31:be:44:3a:18:4a:26:a2:ca:db:1f:
         db:5c:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:57 2026 by rpki-client