Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
File:                     7BF6BA42E91A11EF804C4B57C4F9AE02.roa (raw, json)
Hash identifier:          LzFnSgF5fJeJl/6hW+un70CZDkl9rjX22N/j2ZoEE/Q=
Subject key identifier:   23:2B:8B:D4:8F:33:F0:78:F6:C2:EB:EB:40:8D:DB:7E:9A:30:74:28
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       014E
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
Signing time:             Sat 03 Oct 2026 06:54:15 +0000
ROA not before:           Sat 03 Oct 2026 06:54:15 +0000
ROA not after:            Mon 01 Feb 2027 00:00:00 +0000
asID:                     153557
IP address blocks:        163.61.14.0/24 maxlen: 24
                          163.61.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 05:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Oct  3 06:54:15 2026 GMT
            Not After : Feb  1 00:00:00 2027 GMT
        Subject: CN=6ac0a697-ca98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:e6:b6:f5:ff:18:a8:5a:54:a4:67:70:be:
                    4a:9f:d1:a9:56:1a:36:c6:ee:aa:fe:73:b4:92:f4:
                    a7:59:62:d3:8a:e6:55:57:25:d0:58:d4:57:a6:3c:
                    03:84:2f:62:ab:97:46:2c:e0:c0:6f:fc:95:be:65:
                    bd:4a:8a:99:b2:fc:d6:44:57:52:09:8c:91:5f:63:
                    64:5e:fe:53:9b:b9:aa:79:54:3a:41:b9:00:fe:76:
                    17:cf:6a:ed:10:be:58:e5:73:f0:02:28:89:14:72:
                    e1:eb:de:5e:21:80:84:b5:97:f5:22:c9:8c:71:e6:
                    d0:77:3a:30:20:ae:13:7f:56:2c:fe:2b:94:94:c5:
                    ef:b0:34:4a:dd:40:27:d2:f1:09:88:bb:86:cc:ca:
                    64:26:f8:da:fb:a6:50:5d:91:52:cf:3d:8e:cf:d6:
                    32:99:d0:2f:2b:d8:46:49:41:3e:ae:1e:0a:33:38:
                    72:37:31:e7:ed:3d:69:89:e1:9b:0e:0c:60:e1:ca:
                    ed:b8:f2:6c:53:65:f3:43:ec:ee:7b:b3:4a:50:04:
                    1d:35:36:21:42:f8:6a:3c:fb:16:0e:3d:65:5f:12:
                    c3:73:d3:9e:4e:d2:7f:f8:b9:1d:b3:34:0d:1f:c0:
                    17:80:3d:0a:46:81:b0:d1:3d:33:21:e4:d0:b5:55:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:2B:8B:D4:8F:33:F0:78:F6:C2:EB:EB:40:8D:DB:7E:9A:30:74:28
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:c1:99:ad:21:98:27:a8:ec:40:19:12:57:0b:a4:37:9c:1c:
         6c:f9:f7:fc:60:2d:b4:18:d8:9f:fd:bb:61:56:22:09:0b:ef:
         50:ef:3e:67:3d:21:f2:08:e0:84:4e:2a:8f:16:01:8f:98:5b:
         4f:b1:f6:f2:aa:42:20:bc:75:ee:6b:b4:af:c2:73:38:ef:c8:
         14:5a:8b:c5:d7:40:ea:82:01:78:ce:d0:29:1f:9b:d7:d0:e6:
         47:1a:b6:fd:f9:b0:98:60:64:4d:09:a8:22:97:9e:3d:c3:d3:
         64:93:ee:44:69:55:22:1f:1e:b7:03:f4:79:af:26:4c:19:ad:
         a6:2d:88:c4:ac:a5:cb:c5:cb:9c:45:16:58:98:e7:6e:53:b3:
         fa:47:e0:f4:f8:d5:21:b1:6c:c8:a6:43:c1:26:4d:9b:20:6b:
         71:86:65:94:cc:68:83:ea:aa:f9:74:7c:67:97:30:6e:a4:32:
         01:15:ab:00:f7:01:d5:1a:38:1f:a9:a2:40:b3:07:d9:e6:3a:
         04:2b:7e:bb:b4:92:1f:d9:7c:26:6f:22:5a:3f:50:30:66:65:
         c3:73:25:3c:03:26:f6:00:5c:70:12:33:70:e6:c4:7b:3c:ff:
         45:23:b5:7f:fe:d6:49:72:d4:78:4f:11:78:13:a9:6b:fb:4c:
         f6:ed:0b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:59 2026 by rpki-client