Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/61BCB5467F5F11F1BEA7A26F5FA30FBC.roa
File:                     61BCB5467F5F11F1BEA7A26F5FA30FBC.roa (raw, json)
Hash identifier:          SeQUnFSLQHOFUsaseN6yWVAw0Pri/I36or2wIB3les8=
Subject key identifier:   60:94:6D:D0:9E:0F:5B:2B:D5:DF:65:55:7A:3B:2C:17:93:45:C9:55
Certificate issuer:       /CN=A91185B8/serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
Certificate serial:       0279
Authority key identifier: 0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/61BCB5467F5F11F1BEA7A26F5FA30FBC.roa
Signing time:             Wed 15 Jul 2026 08:07:41 +0000
ROA not before:           Wed 15 Jul 2026 08:07:41 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     63983
IP address blocks:        165.86.40.0/22 maxlen: 22
                          165.86.44.0/22 maxlen: 22
                          165.86.71.0/24 maxlen: 24
                          165.86.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl
                          rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 02:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91185B8, serialNumber=0F90692A1EEFE7F0A1AC68B5E1AC09F7026971CC
        Validity
            Not Before: Jul 15 08:07:41 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a573fcd-6e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:95:b2:d0:27:d9:4c:9c:ba:fc:10:c7:96:
                    ff:8e:96:7c:27:bc:ef:1a:28:5c:63:9a:ea:09:a5:
                    f1:fc:26:97:77:64:19:c2:2c:6c:a7:e0:bb:74:84:
                    91:e5:42:e3:0f:8f:71:56:8a:fe:96:ac:92:67:91:
                    7b:61:d1:40:27:51:ae:59:05:22:de:16:30:a3:c0:
                    7e:2c:c0:b4:b6:c2:c9:89:55:61:06:6a:8b:f5:cd:
                    8f:29:27:69:db:62:21:ab:a1:dc:3f:33:91:2c:a5:
                    e9:ef:00:a4:e4:44:27:d5:53:c7:52:3f:e4:c2:ab:
                    05:0f:b9:40:e9:a5:48:d0:e3:c6:d7:17:ba:eb:1a:
                    79:d7:f0:9e:d4:44:75:0f:29:91:f8:6e:e3:c5:f3:
                    3e:0c:5f:e4:1c:94:be:48:b2:c8:03:7a:86:f2:f5:
                    c9:cc:52:60:35:40:b5:8b:27:b3:f6:a1:ab:41:8a:
                    4d:06:9a:37:89:3b:a9:a0:d7:e0:ee:fd:e3:e2:0e:
                    1e:6a:01:e5:b0:e1:73:35:c5:ca:a0:ac:78:47:94:
                    14:12:60:77:b0:3d:bd:86:7a:a1:6e:65:b8:00:0b:
                    31:22:a3:b4:86:c9:f0:b8:9f:fb:27:d8:50:8f:2a:
                    44:b6:a4:09:36:d5:fb:45:8f:bd:d5:1b:88:b9:d2:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:94:6D:D0:9E:0F:5B:2B:D5:DF:65:55:7A:3B:2C:17:93:45:C9:55
            X509v3 Authority Key Identifier:
                keyid:0F:90:69:2A:1E:EF:E7:F0:A1:AC:68:B5:E1:AC:09:F7:02:69:71:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/D5BpKh7v5_ChrGi14awJ9wJpccw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D5BpKh7v5_ChrGi14awJ9wJpccw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/CFA3409ABE3111EDB4FF7D34C4F9AE02/61BCB5467F5F11F1BEA7A26F5FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.86.40.0/21
                  165.86.71.0/24
                  165.86.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:68:4b:7d:f2:14:67:1b:7b:bf:c5:29:53:ab:1c:1b:81:c7:
         60:f5:74:49:ff:01:05:49:2b:02:ca:70:16:4e:8c:bc:0b:37:
         80:c5:06:2f:32:58:2d:ed:5f:53:ee:ab:14:cd:cf:2c:81:d5:
         f1:aa:29:49:ef:a8:46:d7:fb:fa:a3:1c:46:d4:91:3b:17:be:
         dd:f9:46:2b:c2:18:f0:9d:42:be:01:c5:7a:fb:a6:64:1d:c5:
         ad:f2:21:be:59:47:43:98:bc:6e:a5:86:d3:6a:03:97:3f:fe:
         e8:7b:9d:69:6f:86:81:97:f5:ac:26:28:a8:7c:4b:51:46:a5:
         e5:02:eb:4c:dc:af:8b:0a:c9:b7:97:f3:5d:9c:fb:58:da:0c:
         0e:67:6e:fe:a2:ef:ae:a7:de:3a:89:14:de:2c:66:d8:4e:20:
         22:b9:b3:45:f2:2c:42:0f:ec:70:6d:10:75:13:cd:1d:3a:9e:
         8b:bd:52:7d:b2:94:64:59:06:df:9c:4e:bc:64:03:f0:d4:5e:
         fb:67:23:2f:fc:2e:ca:99:09:19:1a:b4:9b:50:20:a3:c4:04:
         c2:b3:bb:c9:0e:01:bc:8e:50:1e:7e:34:9b:e1:95:09:f2:d3:
         88:c7:f0:9c:f6:17:8c:fe:92:a7:9f:88:18:98:4c:52:81:63:
         08:0f:f8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:41 2026 by rpki-client