Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/9EDE26C813A211F095A2D46DC4F9AE02.roa
File:                     9EDE26C813A211F095A2D46DC4F9AE02.roa (raw, json)
Hash identifier:          Ary8U4tBT8Im3G2GhHqczDR/KwwdFpSrthTkusiqfQo=
Subject key identifier:   59:F9:F0:E9:7D:CB:8C:34:6E:35:38:F0:51:FC:7E:37:73:2A:67:1E
Certificate issuer:       /CN=A91EB96C/serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
Certificate serial:       A8
Authority key identifier: 95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/9EDE26C813A211F095A2D46DC4F9AE02.roa
Signing time:             Fri 27 Feb 2026 07:25:01 +0000
ROA not before:           Fri 27 Feb 2026 07:25:01 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153561
IP address blocks:        163.61.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB96C, serialNumber=95B1040CF3BFEC05CE841DAFA9A9508B70997F1C
        Validity
            Not Before: Feb 27 07:25:01 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a146cd-2185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:33:ae:26:03:41:ed:ef:5a:ad:93:64:d9:41:
                    2f:84:99:d9:15:dd:7f:c1:ba:fd:4e:f7:3e:c3:a3:
                    b7:49:34:48:9f:ed:4f:39:4a:ac:0c:b3:e2:e9:97:
                    b4:33:ff:93:bb:d4:78:a4:e5:d1:0c:4e:18:ca:38:
                    66:f1:e1:a7:a8:d6:2b:66:89:ae:18:81:6e:06:ad:
                    e4:9e:1c:b2:5d:d9:ae:4c:8c:dd:9a:1f:47:20:3d:
                    18:9e:7d:28:06:cf:3f:c7:56:73:6d:23:77:bb:e0:
                    b8:cd:64:01:14:05:7c:98:eb:85:45:f1:55:c7:a2:
                    92:74:d3:18:5c:f5:0a:37:9c:39:68:bd:fd:ef:d9:
                    b1:60:13:01:66:9f:70:db:9a:9e:ae:a9:e8:69:69:
                    47:b8:46:99:4f:0b:eb:54:7a:a7:22:44:af:10:03:
                    a2:98:22:36:37:e7:af:fd:14:90:3b:38:84:b0:21:
                    68:b0:13:d3:fb:e6:6a:07:77:a0:96:19:da:19:f7:
                    c8:ef:08:89:3b:9e:51:be:f9:9b:42:19:bc:cf:d4:
                    3f:3d:98:d9:e2:41:8c:22:2d:05:7b:56:a2:64:2a:
                    d3:76:09:c6:3b:cb:72:89:0c:28:e3:40:1a:4b:2c:
                    93:95:45:ff:12:58:64:f2:55:7b:32:9f:f8:b8:66:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F9:F0:E9:7D:CB:8C:34:6E:35:38:F0:51:FC:7E:37:73:2A:67:1E
            X509v3 Authority Key Identifier:
                keyid:95:B1:04:0C:F3:BF:EC:05:CE:84:1D:AF:A9:A9:50:8B:70:99:7F:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/lbEEDPO_7AXOhB2vqalQi3CZfxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lbEEDPO_7AXOhB2vqalQi3CZfxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB96C/4D2BA8A013A211F091EB636DC4F9AE02/9EDE26C813A211F095A2D46DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:76:72:c1:d5:aa:ac:55:fd:72:2b:a8:7d:64:02:95:df:ee:
         0c:a1:12:b6:c3:82:b0:16:e9:90:c8:fe:51:2b:23:2e:e4:3e:
         c5:30:cf:0c:3a:9e:2e:00:5d:7d:33:72:bf:cd:5e:a9:fb:e2:
         70:30:e9:74:b7:ca:82:af:2d:17:a6:79:a1:08:37:7a:bd:a5:
         2e:e4:c5:1d:d9:d7:7c:27:8a:c5:1f:b1:86:08:95:29:55:f1:
         aa:64:07:02:7e:97:1a:ba:f9:4a:ba:1a:4d:94:c3:6c:e0:cd:
         6b:0b:81:a8:9d:99:0b:99:8b:3a:04:cf:ad:ac:10:44:4a:58:
         79:fe:bb:95:57:dc:11:3e:7f:49:6e:5c:20:b2:00:ce:9e:db:
         30:70:d9:8c:25:1e:fe:20:38:c9:b4:70:a6:e4:2f:9c:9b:75:
         a9:78:12:0c:f5:bf:a6:1c:3f:28:4d:df:7a:71:2b:40:34:2a:
         bd:7b:92:5d:4c:92:30:8f:45:63:c2:ff:12:bd:29:72:6b:82:
         f3:98:c5:25:a4:46:e6:ad:98:d8:e9:ab:31:1b:a7:ba:9d:dd:
         4e:a0:c1:c3:e7:a2:ec:ac:90:9f:83:8d:45:7f:db:87:16:13:
         40:76:d6:7e:70:f3:da:5a:4e:3a:09:33:8e:b4:2c:6d:a3:de:
         c4:08:ce:c8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUI5NkMxMTAvBgNVBAUTKDk1QjEwNDBDRjNCRkVDMDVDRTg0MURBRkE5QTk1MDhC
NzA5OTdGMUMwHhcNMjYwMjI3MDcyNTAxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDDA02OWExNDZjZC0yMTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zOuJgNB7e9arZNk2UEvhJnZFd1/wbr9Tvc+w6O3STRIn+1POUqsDLPi6Ze0
M/+Tu9R4pOXRDE4Yyjhm8eGnqNYrZomuGIFuBq3knhyyXdmuTIzdmh9HID0Ynn0o
Bs8/x1ZzbSN3u+C4zWQBFAV8mOuFRfFVx6KSdNMYXPUKN5w5aL3979mxYBMBZp9w
25qerqnoaWlHuEaZTwvrVHqnIkSvEAOimCI2N+ev/RSQOziEsCFosBPT++ZqB3eg
lhnaGffI7wiJO55RvvmbQhm8z9Q/PZjZ4kGMIi0Fe1aiZCrTdgnGO8tyiQwo40Aa
SyyTlUX/Elhk8lV7Mp/4uGZ3WwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFn58Ol9
y4w0bjU48FH8fjdzKmceMB8GA1UdIwQYMBaAFJWxBAzzv+wFzoQdr6mpUItwmX8c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjk2Qy80RDJCQThBMDEz
QTIxMUYwOTFFQjYzNkRDNEY5QUUwMi9sYkVFRFBPXzdBWE9oQjJ2cWFsUWkzQ1pm
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xiRUVEUE9fN0FYT2hCMnZxYWxRaTNDWmZ4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUI5NkMvNEQyQkE4QTAxM0EyMTFGMDkxRUI2MzZEQzRGOUFFMDIvOUVERTI2Qzgx
M0EyMTFGMDk1QTJENDZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoz0ZMA0GCSqGSIb3DQEBCwUAA4IBAQCHdnLB1aqsVf1yK6h9ZAKV
3+4MoRK2w4KwFumQyP5RKyMu5D7FMM8MOp4uAF19M3K/zV6p++JwMOl0t8qCry0X
pnmhCDd6vaUu5MUd2dd8J4rFH7GGCJUpVfGqZAcCfpcauvlKuhpNlMNs4M1rC4Go
nZkLmYs6BM+trBBESlh5/ruVV9wRPn9JblwgsgDOntswcNmMJR7+IDjJtHCm5C+c
m3WpeBIM9b+mHD8oTd96cStANCq9e5JdTJIwj0Vjwv8SvSlya4LzmMUlpEbmrZjY
6asxG6e6nd1OoMHD56LsrJCfg41Ff9uHFhNAdtZ+cPPaWk46CTOOtCxto97ECM7I
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:42:30 2026 by rpki-client