Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/A801B786055211F1AC4F64FE2A3D8C67.roa
File:                     A801B786055211F1AC4F64FE2A3D8C67.roa (raw, json)
Hash identifier:          q72z60cZ6WINAMTAmZNi9B2ywwhzErv8MUiPxFqzU0Q=
Subject key identifier:   DA:10:24:52:A1:78:AE:BD:62:77:68:2A:A0:65:9C:1C:CF:5F:5B:12
Certificate issuer:       /CN=A9194EB9/serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
Certificate serial:       26
Authority key identifier: 2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/A801B786055211F1AC4F64FE2A3D8C67.roa
Signing time:             Fri 03 Apr 2026 08:44:27 +0000
ROA not before:           Fri 03 Apr 2026 08:44:27 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     453620
IP address blocks:        163.61.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl
                          rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:12:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194EB9, serialNumber=2BBF8EAA81FB6CBDBFF0E159DC72EC1C93E1FF80
        Validity
            Not Before: Apr  3 08:44:27 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf7deb-1acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:bd:61:e8:d5:0e:97:e0:a5:f2:19:bc:a4:
                    3e:45:3c:a8:68:0a:64:dd:72:4e:38:1f:e6:8a:7f:
                    21:3b:95:37:1f:c4:e8:1d:2d:ae:29:81:bd:92:02:
                    fb:ff:c7:c8:08:90:2b:29:56:a2:09:61:3b:8c:c7:
                    f1:c4:7c:2b:a3:ea:25:69:5e:cb:1d:21:6c:9e:1c:
                    e0:c9:1c:e5:a3:79:15:a8:88:36:a6:8e:3f:49:a1:
                    6e:67:af:6e:d8:0d:a2:f0:26:ee:34:76:90:27:d4:
                    f9:c3:42:d6:6a:59:79:94:c3:a3:ad:73:44:a5:72:
                    25:93:29:d5:75:c9:7e:d0:ce:a9:31:21:e0:35:30:
                    79:0d:0c:99:d6:4f:f4:c0:e1:58:04:b1:17:ef:ee:
                    68:ba:62:48:01:02:ed:c4:f1:ca:ea:90:0d:f9:24:
                    59:72:14:9f:10:52:45:51:cc:6a:f7:ed:19:99:02:
                    22:a4:79:ec:91:50:fc:17:b1:a0:00:55:6f:af:55:
                    01:fc:82:9c:3b:90:3d:8c:7b:a2:ea:b7:f0:d6:05:
                    a3:f1:dc:a7:af:47:ea:bf:92:7b:52:2b:cd:46:7e:
                    84:a3:1f:89:ce:39:d8:cc:3d:ca:68:cb:97:d7:09:
                    ea:44:cd:94:36:c8:c3:b6:04:f6:c8:68:b8:f2:a4:
                    cc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:10:24:52:A1:78:AE:BD:62:77:68:2A:A0:65:9C:1C:CF:5F:5B:12
            X509v3 Authority Key Identifier:
                keyid:2B:BF:8E:AA:81:FB:6C:BD:BF:F0:E1:59:DC:72:EC:1C:93:E1:FF:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7-OqoH7bL2_8OFZ3HLsHJPh_4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194EB9/EA046814022C11F19D3D0141193D8C67/A801B786055211F1AC4F64FE2A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:3d:07:d3:02:df:b8:92:54:64:14:c8:bc:06:7b:95:81:79:
         cf:d3:4d:97:b9:44:9b:c7:d8:3c:fc:90:cb:0f:97:39:b0:dd:
         3d:70:9a:e2:a8:e8:6d:ce:99:9f:8e:36:75:25:d7:a1:a2:01:
         66:d7:02:0d:35:4e:7f:9e:33:8c:2c:a1:3e:51:5e:16:b1:b1:
         19:08:a4:74:d1:61:42:e3:6f:f4:c3:b3:90:53:47:a1:50:33:
         36:96:89:0d:52:09:3a:c6:12:37:c2:41:0d:5e:96:40:62:61:
         f3:96:0f:c2:20:f6:35:7c:90:41:c3:0d:bd:69:97:ec:50:cb:
         01:a0:6b:29:87:7b:7b:ff:fc:ca:7d:4d:bc:b1:64:da:b2:7d:
         a1:05:92:c6:01:cf:db:0d:32:1e:06:f2:97:7f:30:73:cc:46:
         b3:56:1c:a8:16:b8:ff:ce:6a:5d:7c:e2:56:9d:d1:a4:e5:88:
         a8:b8:d2:2e:2b:59:e7:80:ac:f8:d2:4d:d1:88:88:7e:f0:40:
         df:46:01:bf:4a:5e:8d:fb:b5:37:83:69:f1:3a:aa:6c:58:25:
         48:42:d7:a3:c1:e7:9b:18:33:db:65:e2:76:60:21:ad:2a:cd:
         75:69:54:ff:9a:e9:9a:73:d1:1e:33:81:97:09:6f:66:38:bd:
         7f:9c:a7:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 23:51:03 2026 by rpki-client