Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6A165268BE4A11F1B3C6EB026711F970.roa
File:                     6A165268BE4A11F1B3C6EB026711F970.roa (raw, json)
Hash identifier:          wb+aUiQB3/QurXUDfD+2NVRoo0v8JFWhcak0UxQmpyQ=
Subject key identifier:   12:F6:33:99:AC:75:E8:3E:E7:FA:2C:BB:F2:F0:B4:06:54:94:44:C4
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0E69
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6A165268BE4A11F1B3C6EB026711F970.roa
Signing time:             Fri 02 Oct 2026 10:17:04 +0000
ROA not before:           Fri 02 Oct 2026 10:17:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     219182
IP address blocks:        61.18.217.0/24 maxlen: 24
                          61.18.219.0/24 maxlen: 24
                          61.18.221.0/24 maxlen: 24
                          61.18.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3689 (0xe69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Oct  2 10:17:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6abf84a0-9236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:5d:27:07:da:cd:7d:ed:7f:08:c5:57:e8:
                    70:77:72:32:70:ca:41:2c:8b:7c:4d:de:9f:df:d5:
                    cc:cd:03:27:59:fc:69:bf:2e:43:60:6b:37:6e:62:
                    bb:a3:7c:7b:22:87:f5:c1:cf:7f:aa:78:00:56:00:
                    ad:cb:22:2c:76:ea:04:44:fb:98:cb:21:56:18:b3:
                    f9:ea:65:61:09:36:23:91:40:31:55:ce:8a:16:e1:
                    22:1a:03:d2:c3:8b:d1:33:1c:cb:c9:9e:ed:b7:7a:
                    4d:08:98:31:9b:61:6a:e8:2e:62:c0:e6:35:f7:cd:
                    9b:a7:5c:07:60:de:c6:76:0f:27:9d:5a:d7:9a:86:
                    a1:40:1e:ee:c4:66:15:a2:0b:fc:cf:b9:37:6d:54:
                    a3:17:34:71:a2:9a:5d:63:b5:0a:3a:60:47:32:ba:
                    b2:e4:7d:7d:36:ae:33:45:fa:50:f5:77:e1:5f:ac:
                    da:42:f3:b2:65:3b:61:bc:7b:94:a5:d8:08:fd:3a:
                    fb:9b:6d:2e:2e:e1:1d:ee:01:4b:79:19:32:ba:29:
                    c6:5d:20:90:91:a5:de:cd:0e:58:c1:e2:90:e5:97:
                    02:94:b1:b1:2e:8c:37:89:df:f0:73:eb:f4:5d:23:
                    eb:60:8a:ef:bb:aa:b9:8d:28:d3:55:e0:a6:8f:22:
                    fa:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F6:33:99:AC:75:E8:3E:E7:FA:2C:BB:F2:F0:B4:06:54:94:44:C4
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/6A165268BE4A11F1B3C6EB026711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.18.217.0/24
                  61.18.219.0/24
                  61.18.221.0/24
                  61.18.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:59:85:29:ca:94:38:8f:ad:f9:37:11:44:e6:45:e3:cc:c4:
         80:f8:f4:2a:7d:30:f1:1a:77:91:dd:f5:60:a4:2a:7f:d5:7d:
         cc:8f:44:b0:fb:b2:53:60:7e:15:c9:ea:e6:1b:38:b9:f1:d6:
         86:9d:02:79:bd:bb:da:f3:e4:67:f3:da:3e:2f:2c:ed:13:51:
         2d:27:19:22:b6:c6:ff:9b:37:64:ae:42:1e:62:b9:ff:af:12:
         7a:9f:6e:1f:6f:43:4c:12:f0:05:a2:d6:e6:41:72:ac:c4:fe:
         de:2d:e6:0e:57:1b:fb:30:84:a5:a4:ef:15:f5:6b:24:67:f7:
         58:16:9e:56:5a:b1:19:a0:74:c9:47:26:24:83:b1:da:e0:8f:
         95:6d:dd:27:b2:d2:3b:b5:ac:7e:db:92:72:8c:f2:77:b6:02:
         14:b1:3f:0a:f1:5c:0a:de:91:87:ed:ca:83:d1:1c:82:0e:a5:
         12:43:3c:e0:5a:5d:24:88:cd:be:ba:d6:f1:b6:44:6c:82:f3:
         50:70:0a:14:ec:25:9d:e3:03:53:c3:b0:8e:ee:f8:10:04:8e:
         3f:eb:8e:6a:65:b8:04:51:5e:e4:b7:4d:7f:21:42:be:61:29:
         9a:67:2a:0f:4d:76:c5:0b:e0:38:34:ed:30:ff:5f:94:8a:86:
         9f:13:14:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:22 2026 by rpki-client