Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa
File:                     61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa (raw, json)
Hash identifier:          dQJ3RW7hJaU0g8iPp7h8PfqQXue8K1gg2a56fyB2vzA=
Subject key identifier:   B1:D7:96:D7:95:13:F7:0E:E3:A0:D9:4F:09:4C:A7:F4:93:FE:82:8B
Certificate issuer:       /CN=A91F4D54/serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
Certificate serial:       C6
Authority key identifier: AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:58:39 +0000
ROA not before:           Tue 15 Apr 2025 06:42:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        203.56.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl
                          rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4D54, serialNumber=AF761257DE2C9DA5F33E71C6419E267A862DFB62
        Validity
            Not Before: Apr 15 06:42:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e39f-4974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:ce:27:c2:bd:41:9e:32:90:28:bf:cf:27:
                    99:14:a0:88:f4:5d:15:a0:8b:f4:0e:e2:d2:d4:71:
                    e4:2a:a5:fb:1d:3c:5e:4a:55:b8:4c:6a:36:6b:cb:
                    f2:6b:59:34:dd:12:d3:ba:9e:d5:56:bc:73:b3:31:
                    73:9f:be:3f:7b:aa:93:97:07:cb:ce:4f:7f:c4:78:
                    51:ff:5c:fd:07:43:c3:2d:7d:ac:67:da:63:8a:59:
                    bb:77:ab:86:8a:35:b8:a1:65:22:53:39:f7:b8:0c:
                    48:61:82:53:d6:f5:2e:8a:da:0b:71:18:e1:d6:2e:
                    5b:5b:2c:51:df:3e:ca:08:fc:f6:cb:51:dd:1b:f6:
                    fc:6d:c7:bb:bb:04:76:b6:96:69:40:30:ff:47:1d:
                    ad:a7:6a:b0:3d:4f:ee:fa:42:d4:6f:d9:bb:14:d5:
                    62:1d:92:42:16:d1:9e:22:ce:41:60:9a:e9:f3:6e:
                    ac:9f:a9:96:d3:a5:09:0d:11:f5:4c:52:a6:8c:1c:
                    5e:12:bf:b9:83:da:33:df:78:d3:ec:ab:d2:d2:29:
                    67:7e:c4:f1:e1:5e:e8:5f:a1:09:67:e1:21:4f:ad:
                    17:2c:a9:dc:24:7a:93:f4:89:17:28:c3:c4:1d:99:
                    5a:60:a6:3a:b0:50:f8:de:2a:cd:9b:3d:eb:d3:5f:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D7:96:D7:95:13:F7:0E:E3:A0:D9:4F:09:4C:A7:F4:93:FE:82:8B
            X509v3 Authority Key Identifier:
                keyid:AF:76:12:57:DE:2C:9D:A5:F3:3E:71:C6:41:9E:26:7A:86:2D:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/r3YSV94snaXzPnHGQZ4meoYt-2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r3YSV94snaXzPnHGQZ4meoYt-2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4D54/D2877DB6E9EB11EFA4542B18C4F9AE02/61AAFCCAE9EC11EFB6D6D21BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.56.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:5b:e9:45:3b:f1:ac:15:ca:d3:48:df:e6:5f:80:55:61:d3:
         6a:59:68:23:06:52:cb:14:a1:6a:bb:c8:d1:fb:89:a8:66:3f:
         dc:98:82:e5:fb:24:d6:9c:e7:4c:3c:3b:4f:89:5f:65:10:af:
         6f:5d:91:e6:b1:cf:9d:8f:ac:f3:c8:72:47:5c:55:77:ce:e3:
         6f:6a:6c:70:c8:3c:40:84:d7:b6:4f:01:6b:60:53:51:33:5d:
         6e:fa:a1:a5:13:7f:ca:52:fc:6f:a7:20:6a:d6:71:ca:8b:7e:
         85:ed:db:e8:e8:91:f6:b1:36:6e:50:72:4a:f0:9a:ef:e2:88:
         e1:dd:29:cb:cd:fe:0a:dd:0f:05:8b:e0:7f:d6:0a:52:d1:32:
         b1:c3:38:48:ee:6d:41:1b:a5:be:a2:7c:02:3a:b9:cf:35:ca:
         5e:d5:7e:66:fc:5e:68:0a:ea:a1:59:0b:a4:ac:36:44:16:0f:
         7d:13:98:0f:4c:11:ea:ff:ad:b3:91:4e:40:f1:9e:94:20:7b:
         21:62:4a:ef:fc:72:ce:c8:ea:43:6e:a6:8c:e2:c6:30:e1:bb:
         50:9c:25:14:52:7f:8c:c1:df:52:94:e3:64:3f:1c:81:34:57:
         d8:98:ae:57:d8:65:5f:a0:79:c5:e4:db:fe:d6:c0:d8:4b:05:
         f0:d7:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:47 2026 by rpki-client