Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa
File:                     D56D67B0F48711EFBB2D9D73C4F9AE02.roa (raw, json)
Hash identifier:          csaBSpZzq59GMLhCxwkq41kKwaXSwMxp+Vf9tiYrdrg=
Subject key identifier:   88:16:A0:2A:D7:2B:49:98:45:49:FB:96:CF:15:56:69:46:EA:B0:63
Certificate issuer:       /CN=A914A75A/serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
Certificate serial:       CD
Authority key identifier: 58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa
Signing time:             Fri 27 Mar 2026 06:42:09 +0000
ROA not before:           Fri 27 Mar 2026 06:42:09 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133214
IP address blocks:        163.61.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl
                          rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A75A, serialNumber=58EEE52D2AE092EC5586E070E6462C36350FA6E1
        Validity
            Not Before: Mar 27 06:42:09 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c626c1-36e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:f7:6d:8c:97:f8:2a:e0:33:bd:83:65:e4:
                    57:75:c4:5c:02:0f:1b:84:09:61:c2:cf:16:22:7d:
                    52:bd:7a:11:37:4a:af:da:7e:62:5e:f2:e0:c9:02:
                    8e:68:5b:c3:fb:44:23:25:4b:34:84:0c:5d:d5:65:
                    4f:65:bb:dc:71:05:2a:7c:39:34:ff:41:60:60:2c:
                    01:27:bb:4a:c0:88:6a:6e:8c:df:e0:4d:ce:19:fb:
                    3e:05:cf:f4:a9:b7:56:5e:84:6d:12:b3:0c:f5:78:
                    40:af:78:8d:d0:2a:c6:5e:64:94:8c:2d:67:e2:be:
                    47:67:e5:64:be:3e:2f:c3:35:81:bd:6f:23:25:6e:
                    a7:06:9f:ae:36:2c:d4:5d:a7:02:e0:a0:84:e7:07:
                    9c:41:f5:ce:8a:b1:9a:ac:bd:2a:c7:0d:6e:41:97:
                    cb:a6:89:6c:5a:57:7b:8f:3b:d1:9d:13:ad:b1:4a:
                    ce:d5:62:7a:0f:a3:9c:42:15:33:c4:af:6a:3a:46:
                    fc:07:f2:ca:c1:8a:86:8e:9c:7b:83:f8:7d:4b:19:
                    15:e6:93:c9:d5:f8:4c:1e:44:c4:fe:4b:de:32:78:
                    44:e7:ec:d2:b5:de:49:e6:d5:6e:bb:20:a9:78:01:
                    2d:1d:5f:2b:d3:3a:d7:f7:51:cc:ab:f8:a9:38:07:
                    02:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:16:A0:2A:D7:2B:49:98:45:49:FB:96:CF:15:56:69:46:EA:B0:63
            X509v3 Authority Key Identifier:
                keyid:58:EE:E5:2D:2A:E0:92:EC:55:86:E0:70:E6:46:2C:36:35:0F:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/WO7lLSrgkuxVhuBw5kYsNjUPpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WO7lLSrgkuxVhuBw5kYsNjUPpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A75A/3FAA7C54F48711EF849A2772C4F9AE02/D56D67B0F48711EFBB2D9D73C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:bb:71:80:32:20:07:12:d0:e3:ea:7b:21:a3:47:f2:fe:d3:
         5f:88:b3:85:50:d4:c6:8a:29:8d:83:58:5f:22:f5:d3:01:c2:
         30:96:dd:73:f9:3d:9e:4e:58:df:b1:a5:a4:71:9b:c4:8c:b2:
         30:e1:30:b0:70:39:8e:84:05:a5:74:74:a9:eb:68:fc:5e:0f:
         3a:30:aa:13:65:ba:35:a5:f1:4b:08:f3:03:ce:ce:b6:85:02:
         4a:b8:e1:60:09:72:90:5a:a8:7f:8f:2e:34:eb:38:12:09:a3:
         b6:d3:c7:38:3b:ec:dc:82:48:ab:3e:ef:0b:da:f1:97:a1:b2:
         46:5c:7e:1f:20:72:77:97:c0:63:b6:2c:82:71:e5:0c:13:d1:
         e6:19:1b:14:ff:e8:3e:0d:d3:df:9c:21:24:06:e1:88:62:22:
         e7:23:a9:15:2a:cc:ac:2a:67:e8:be:d8:26:72:5d:c1:b0:08:
         a2:95:de:ef:6e:f6:8c:ef:c5:53:2a:01:e6:b6:62:10:23:1b:
         dc:6c:6a:22:d7:53:a7:8b:71:f8:63:22:5e:63:07:da:e9:3e:
         54:09:da:a1:fd:85:ef:c3:4f:6b:a8:c7:5f:f7:da:72:ff:68:
         54:4d:7d:ac:e0:0b:a3:5b:d1:b0:44:94:1f:ee:51:69:a0:c7:
         0b:df:d3:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:36:03 2026 by rpki-client