Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/3317EBC2B68611F0BC9B1221C4F9AE02.roa
File:                     3317EBC2B68611F0BC9B1221C4F9AE02.roa (raw, json)
Hash identifier:          zVxDTwAetCXVmMpePwtsaLZWEolZH6weh4rLStqE95U=
Subject key identifier:   99:6A:CA:52:4E:99:C9:B6:7D:0B:96:71:70:43:16:FF:25:3B:B7:83
Certificate issuer:       /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial:       CB
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/3317EBC2B68611F0BC9B1221C4F9AE02.roa
Signing time:             Tue 03 Feb 2026 13:01:59 +0000
ROA not before:           Tue 03 Feb 2026 13:01:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     131471
IP address blocks:        163.61.128.0/24 maxlen: 24
                          163.61.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
                          rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
        Validity
            Not Before: Feb  3 13:01:59 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6981f1c7-9498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e3:19:fa:8a:74:c2:7b:50:d6:1a:c1:09:7d:
                    b5:42:c2:1a:77:64:09:30:b3:c6:bb:89:77:c5:bc:
                    54:37:d9:21:85:fc:a7:67:cc:48:84:87:cd:42:2d:
                    35:97:a8:8d:d1:e5:4a:db:51:b5:90:fe:b9:20:1d:
                    1b:41:bd:1e:b8:82:80:e7:9c:42:10:d7:e4:73:c7:
                    48:6a:47:7b:29:0c:d6:f5:1b:9b:12:87:2c:c1:2e:
                    d1:85:d9:4f:58:2f:af:1d:c5:17:d6:77:4c:52:c7:
                    b3:4b:2b:84:0c:fd:17:13:30:ee:63:0c:36:3d:a1:
                    2b:ba:41:f9:a4:e4:d5:e6:26:06:a4:52:05:08:6c:
                    c4:60:36:53:a0:de:5a:d1:13:7b:03:b6:30:d2:8c:
                    a9:75:93:fa:7f:32:58:76:f7:7e:c3:ec:78:b8:1f:
                    30:ff:af:93:51:fb:52:00:07:19:ce:b8:09:3c:be:
                    e0:00:fa:16:b0:7a:3b:02:98:1a:f1:b5:ce:f7:3b:
                    ee:4f:9c:21:90:f1:38:cc:a1:bc:2c:88:c9:93:3b:
                    d0:be:28:89:84:02:e8:dd:dc:bf:57:6d:61:6f:7c:
                    4f:43:02:0c:0b:61:d5:38:b5:50:9e:22:5f:23:05:
                    54:7b:98:cf:db:68:36:f2:ec:5d:03:51:18:53:17:
                    8f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6A:CA:52:4E:99:C9:B6:7D:0B:96:71:70:43:16:FF:25:3B:B7:83
            X509v3 Authority Key Identifier:
                keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/3317EBC2B68611F0BC9B1221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:47:da:bd:e5:74:07:57:5c:d0:13:13:13:3e:7c:54:6a:0b:
         d5:f9:3b:98:66:66:a0:53:20:c9:fe:ed:f1:49:d9:33:59:c9:
         e2:9e:19:68:34:57:b5:4b:e1:c7:05:a8:54:30:99:e9:3f:ee:
         bf:26:44:3d:20:1d:99:3a:5e:d1:2d:78:df:11:27:3a:fa:6e:
         4b:dc:17:fa:e2:e8:93:8a:9c:cc:df:23:87:c1:b1:21:f7:13:
         ee:b2:13:dd:c9:c2:b1:bf:04:73:7c:e1:25:12:73:35:a5:bb:
         b8:e1:5b:5d:0f:c6:53:b1:41:a7:73:66:20:20:5a:13:c3:96:
         1e:e4:93:a2:f1:df:2e:30:de:d7:31:da:e0:1f:6b:00:63:3d:
         52:08:f4:5c:d4:0f:5a:de:a2:52:b0:5d:5d:e9:a9:23:67:21:
         35:81:a0:66:2e:e0:96:01:ea:5c:a4:79:b7:e2:af:d7:42:bc:
         ed:bc:05:a3:2f:f0:88:e3:51:a5:19:44:2b:51:93:55:d5:25:
         e1:c9:23:b8:b7:82:ba:ee:3c:bd:8b:e8:6a:96:06:9f:0d:01:
         5f:2d:77:74:2b:14:a4:fa:3b:8d:e9:f1:c8:41:6a:4d:bb:80:
         19:8b:39:0c:4a:96:33:19:5d:f6:a7:41:58:56:07:57:8f:4f:
         08:20:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:51:01 2026 by rpki-client