Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
File:                     40660E781E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          JcolN5GDOq4JGmIGZLcsoK2onjpHwh4ppSwklP8oHVg=
Subject key identifier:   8D:02:3E:BD:61:BF:39:30:3F:54:11:E1:3C:74:42:C0:DF:6C:8B:E8
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C05
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:02 +0000
ROA not before:           Mon 06 Jul 2026 15:12:02 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23683
IP address blocks:        61.91.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15365 (0x3c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:02 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5c2-0b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c4:9d:3f:9a:6e:fe:e6:87:e0:6e:27:96:d3:
                    b4:c8:87:4d:13:b2:ed:1e:be:fe:22:74:d8:f5:57:
                    11:a1:76:e9:81:7e:bc:3f:10:37:4b:02:42:97:8e:
                    09:52:db:69:68:7b:8f:4d:bf:d8:12:8c:70:15:17:
                    92:6b:16:f2:10:bc:b0:9d:07:d6:b0:6c:cc:5b:96:
                    de:67:63:bc:73:ab:67:74:cb:bc:07:5c:a1:94:ee:
                    ec:b3:b0:58:28:d7:ca:3a:de:a8:ea:49:65:4c:ec:
                    be:01:70:02:b6:f8:ba:71:46:7c:50:26:38:b4:dc:
                    ca:18:fd:29:9d:f9:1a:27:58:59:13:6b:08:e5:31:
                    34:42:de:b4:02:75:58:a4:ec:da:b5:97:00:30:6b:
                    c4:eb:c8:0f:bd:49:81:d5:0d:b7:ef:00:73:f7:d0:
                    e9:16:20:9a:72:5d:3f:0a:36:18:65:8b:33:fc:76:
                    10:40:a7:1b:a8:66:5f:46:09:2b:09:58:00:ab:91:
                    01:47:62:11:74:2f:b7:7d:76:1b:5f:7e:a8:0b:72:
                    fe:b0:f9:11:59:35:94:54:de:23:b3:f4:15:82:fa:
                    fd:d3:24:89:f4:f1:ef:f1:be:ad:7a:4c:77:fc:a1:
                    e1:56:32:bc:c9:89:ba:6b:b7:4e:5e:17:ed:6d:8e:
                    04:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:02:3E:BD:61:BF:39:30:3F:54:11:E1:3C:74:42:C0:DF:6C:8B:E8
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/40660E781E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:44:60:ac:42:30:73:16:a6:c0:e9:b9:92:1d:fb:33:e3:
         45:ce:24:ba:0c:1b:87:59:02:5a:9c:cc:46:d0:e7:15:ec:cd:
         b8:23:56:17:77:9f:ba:82:29:31:98:2c:c7:c9:12:af:2e:ba:
         d7:f4:e8:02:c5:e6:d6:61:b0:9f:43:eb:73:64:f8:a8:ec:5e:
         7f:27:cc:e2:eb:e9:6f:30:e4:91:b5:c4:18:7f:d0:bf:b6:73:
         f6:60:4c:b5:ed:56:5e:e7:af:35:30:d3:5e:06:30:6e:38:77:
         a9:b6:1e:b7:9f:c8:ec:4e:71:db:86:b8:81:24:dd:1a:00:dd:
         a2:f6:5a:62:29:14:82:91:5f:05:ee:54:e0:21:a6:3d:8b:7a:
         d5:1d:54:e8:9e:9e:88:57:92:48:09:b4:e8:1c:93:3c:57:23:
         d0:8b:cf:12:ef:cd:3d:ac:b7:60:57:ae:ce:8d:c9:34:60:d1:
         79:74:8c:15:22:ac:aa:44:2f:db:64:f3:4c:30:37:71:76:a6:
         56:c5:75:ed:b1:fc:95:c3:78:00:0a:73:81:c7:32:95:66:be:
         25:ed:01:81:89:df:5a:04:6e:3e:6f:91:7a:a0:9a:3e:bb:85:
         26:66:0f:a3:33:b4:c7:8a:39:0d:23:d4:a6:35:c3:4d:f8:09:
         b0:d9:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:03 2026 by rpki-client