Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
File:                     4D541B161E0111E9A590C837C4F9AE02.roa (raw, json)
Hash identifier:          vjfKDyCgTrXpAkwOhYuN/9iIvAjsFqksPPawHtosyAE=
Subject key identifier:   38:0A:FF:9D:72:29:EA:97:08:20:4F:DB:9B:02:BD:EE:45:ED:F8:A5
Certificate issuer:       /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial:       3C1B
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 15:12:48 +0000
ROA not before:           Mon 06 Jul 2026 15:12:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45200
IP address blocks:        61.91.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
                          rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 14:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15387 (0x3c1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
        Validity
            Not Before: Jul  6 15:12:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4bc5f0-c03d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:a2:e5:88:f2:8b:2f:ac:7a:d6:53:32:57:
                    84:04:39:22:e8:85:3a:a0:b2:22:f0:0f:c8:87:f8:
                    af:dd:80:9f:08:4e:26:2d:2e:5e:a2:ab:17:c3:44:
                    2c:ef:90:45:65:e9:d4:69:82:4a:92:01:82:8a:95:
                    3d:9c:30:c6:e7:e1:32:d1:e7:1e:82:10:d0:b0:13:
                    34:12:15:3e:b3:89:35:49:30:06:f4:26:13:4b:38:
                    b9:0a:ea:dd:7b:ce:24:64:93:f9:35:f4:0b:50:1a:
                    95:8d:18:85:d0:01:f9:84:91:59:3c:09:52:44:14:
                    99:55:8b:f1:95:77:c5:70:2f:25:bb:d3:95:f6:3d:
                    31:36:31:ed:63:40:50:9f:1a:b9:7c:f3:6e:8d:96:
                    69:94:ad:d2:c1:34:3c:8b:05:f8:32:57:50:f4:95:
                    51:b9:44:37:8a:e7:03:58:94:39:2f:3f:c2:44:f4:
                    6a:ca:e3:74:a0:1f:30:77:17:96:ec:98:54:ca:ab:
                    2b:23:3e:ca:e6:74:b9:07:97:24:65:2a:f3:7a:3c:
                    a2:85:87:8b:14:da:e7:22:b1:53:6a:05:25:6b:ad:
                    80:5c:77:7f:3b:cf:81:67:dc:fe:e2:69:a1:a7:aa:
                    47:7b:08:c6:39:bc:0b:6d:0b:c7:6d:52:18:45:6a:
                    16:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:FF:9D:72:29:EA:97:08:20:4F:DB:9B:02:BD:EE:45:ED:F8:A5
            X509v3 Authority Key Identifier:
                keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/4D541B161E0111E9A590C837C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.91.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:cd:ef:b9:c1:e2:2c:f5:a3:b0:b3:c8:e2:ad:10:da:c6:53:
         8f:33:5e:69:1d:46:10:a5:21:d3:f6:d0:bc:b9:91:57:75:86:
         24:bf:6e:b2:1b:2f:30:a9:aa:94:a9:b8:f4:f3:48:d4:f5:4a:
         c0:9e:85:6a:9b:77:96:e8:85:bc:e4:09:45:5e:9c:5e:78:f5:
         30:1d:af:30:ce:41:7e:6f:31:8f:9b:00:be:49:23:b2:56:f0:
         cd:61:62:71:5f:6b:99:31:c0:8e:ba:81:f8:44:19:89:58:0a:
         a3:d7:4f:74:83:2c:3a:c2:d8:57:10:5f:5f:94:16:a3:61:4d:
         a4:e4:28:df:bf:01:3a:38:2d:05:d9:cd:99:73:e5:39:89:5d:
         04:55:63:4f:bb:ef:06:6a:1f:b3:84:7e:09:bf:e3:c0:b4:8e:
         58:8f:68:bc:31:d3:53:21:38:9a:4c:7e:2b:8f:4b:5a:1e:2f:
         0b:78:7c:6e:af:b5:b2:ae:9e:f7:7b:89:27:2d:d0:7a:f7:38:
         47:2a:b7:07:25:ae:0d:96:1d:a4:99:43:f0:88:bd:a4:8d:a0:
         cd:d7:20:69:91:6b:af:11:f6:13:1b:58:ed:6e:95:75:01:ae:
         d3:c6:b8:6f:8f:a0:7f:92:ef:5d:67:8a:6c:e8:fd:41:1a:97:
         4c:16:15:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:06 2026 by rpki-client