Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa
File:                     6BD4BB16F83111EFBA64911FC4F9AE02.roa (raw, json)
Hash identifier:          6s9v+4to3xQAtqSl3C8OB5mvof4ZuN1zgnPAVV1Aeng=
Subject key identifier:   6C:09:43:0C:B6:53:6E:F0:8A:3F:12:D8:D9:21:66:CB:B4:77:AA:9F
Certificate issuer:       /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial:       DF
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 06:41:45 +0000
ROA not before:           Fri 03 Apr 2026 06:41:45 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153568
IP address blocks:        163.61.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
        Validity
            Not Before: Apr  3 06:41:45 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf6129-6675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5a:01:46:c5:78:ce:88:e0:4d:f5:a2:8d:b8:
                    1b:c0:7a:21:81:d0:61:b9:73:68:22:96:4b:f2:b7:
                    22:dd:a9:f2:78:15:40:7a:34:65:b8:cb:6d:e9:4c:
                    a8:87:7b:d3:f3:5d:65:53:5e:31:a4:67:db:07:85:
                    90:d7:eb:6b:62:d8:0a:e1:bd:bf:77:f0:7f:94:77:
                    76:fa:4f:6e:5c:6b:a1:34:15:1e:92:e6:1f:5d:34:
                    95:e9:3a:a1:20:82:25:78:82:f1:7c:74:ae:6f:8b:
                    d1:ab:9c:96:1e:c9:0b:ee:c6:f0:75:25:c2:01:5b:
                    12:1f:f2:02:50:ba:8c:d0:8e:91:e6:70:7f:f9:47:
                    ff:26:30:1d:32:97:f5:25:b8:f8:18:f8:38:0d:97:
                    87:46:8f:5e:d9:a0:2d:f5:78:dd:f7:57:d5:9f:56:
                    12:86:7f:7d:ce:0b:c0:d8:97:5f:62:ae:3e:97:5f:
                    d5:82:ad:7e:b9:f5:44:78:ab:d2:c1:50:44:ac:bd:
                    63:38:4e:5b:3d:89:aa:99:53:53:b7:5e:c0:ae:6e:
                    80:34:d2:e9:52:2e:97:39:cd:d3:70:f4:c4:c7:d5:
                    57:0a:d7:22:63:d5:39:01:29:1b:2c:98:8f:a3:90:
                    dd:9c:1a:38:b5:4d:77:b1:fe:ba:0a:e7:7f:1d:3d:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:09:43:0C:B6:53:6E:F0:8A:3F:12:D8:D9:21:66:CB:B4:77:AA:9F
            X509v3 Authority Key Identifier:
                keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/6BD4BB16F83111EFBA64911FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:d3:54:bf:bf:76:70:33:ba:8c:ef:e3:16:2c:c8:d4:d7:
         1d:ba:5f:5e:d5:c6:00:fb:cd:33:bf:32:07:7f:0a:51:3f:5a:
         56:76:b2:e3:81:25:3a:62:0a:37:10:1d:31:4f:f1:f3:90:61:
         d9:e6:02:96:8e:c7:5f:0d:00:0c:c5:2b:ff:ce:6e:3f:a3:b8:
         b1:75:73:b1:b0:89:71:9c:9c:a4:d5:f4:c7:c2:94:0a:c9:a5:
         39:93:a9:5f:c1:6e:2e:fd:62:ea:83:50:a4:26:4d:0e:f6:66:
         fa:e3:2b:b7:08:1f:01:76:c1:12:86:cb:0f:e1:3e:26:82:61:
         25:ab:f3:28:8d:a5:3d:cb:34:eb:20:b2:0d:14:07:4e:15:21:
         4f:b1:20:9b:5f:4a:bd:2e:ba:27:c2:e4:ae:db:c2:16:5a:08:
         2c:28:b7:98:03:24:fb:c2:68:6a:a5:7b:34:6f:b4:f0:82:ed:
         da:bc:d3:1a:ed:dd:9a:6f:b2:f7:53:18:f3:9a:83:3a:de:1e:
         df:c7:3f:3e:2c:14:ba:16:35:5a:f5:df:c8:f9:a0:09:36:29:
         15:52:79:91:fc:40:8d:be:39:7a:3f:a0:8b:91:4f:6c:b1:71:
         32:48:4b:ea:6e:a6:49:66:1f:29:ce:9a:d0:5e:6b:ed:7c:f6:
         41:7d:0d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:51:25 2026 by rpki-client