Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa
File:                     61D8F6CCDC8D11F0969601B93D6F56BC.roa (raw, json)
Hash identifier:          ddJZo//lHq9Ctx7y0h5Z1hWR5denN2+4dnjr/28CZNY=
Subject key identifier:   1C:A5:05:D6:0A:65:57:A6:10:B0:CC:0E:32:2F:3F:9E:B5:D7:E0:04
Certificate issuer:       /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial:       083D
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa
Signing time:             Wed 26 Aug 2026 22:44:01 +0000
ROA not before:           Wed 26 Aug 2026 22:44:01 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     55740
IP address blocks:        14.96.183.0/24 maxlen: 24
                          14.97.20.0/24 maxlen: 24
                          14.97.48.0/24 maxlen: 24
                          2406:e00:800::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
                          rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 22:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
        Validity
            Not Before: Aug 26 22:44:01 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8f6c31-2bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fe:ee:9c:2e:e9:42:73:ba:79:91:17:a0:54:
                    bd:c1:56:50:e6:ab:8c:17:85:60:17:53:00:89:cd:
                    30:f0:e3:ce:32:fe:9f:46:b0:86:09:74:be:da:1d:
                    4f:08:1d:47:b1:02:51:cd:7f:02:80:d0:b7:9e:eb:
                    6d:7b:53:2d:67:ab:b4:10:87:b3:45:45:5a:fc:08:
                    6a:2c:15:f1:27:75:e7:dc:69:9f:9c:a0:7f:45:09:
                    b5:74:92:73:10:af:2d:19:55:ca:f2:e8:2d:46:f4:
                    61:92:ec:c1:2c:d6:fd:5e:e2:27:65:3d:6e:a8:89:
                    c9:76:7f:45:4b:33:a4:11:3c:2f:2b:1d:be:85:66:
                    d3:04:b4:61:d7:27:1c:99:04:fc:d1:e5:9e:27:f3:
                    a9:96:05:86:cc:48:fc:b1:75:5a:94:b8:ae:a3:3e:
                    70:ca:e4:22:e5:b3:04:c9:09:bc:5b:09:da:d1:f0:
                    b2:96:7d:af:3b:41:65:64:d4:99:23:ca:2b:0f:e3:
                    9b:8b:ba:a7:12:8e:fd:18:9e:d4:36:77:9a:8e:6e:
                    de:62:a2:ac:ba:e1:47:bc:17:9b:ab:d5:7b:7c:d8:
                    13:44:77:e5:33:63:20:98:5a:36:90:87:74:07:e2:
                    73:71:50:83:f9:6a:3c:31:c2:58:bd:24:d2:53:08:
                    8e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A5:05:D6:0A:65:57:A6:10:B0:CC:0E:32:2F:3F:9E:B5:D7:E0:04
            X509v3 Authority Key Identifier:
                keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/61D8F6CCDC8D11F0969601B93D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.96.183.0/24
                  14.97.20.0/24
                  14.97.48.0/24
                IPv6:
                  2406:e00:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:ba:cb:4a:6f:2f:7d:e8:cc:97:d4:5d:cf:ea:6d:c9:f0:ed:
         31:56:e0:33:b2:5c:b4:89:9b:51:2b:bc:2f:c3:aa:10:c4:fd:
         ae:3c:56:60:c8:0d:8a:62:1d:cf:e9:ae:33:14:a9:57:d6:dd:
         59:92:92:f0:f0:3a:b8:28:52:42:df:89:7d:20:9c:c7:18:49:
         d1:70:53:b5:f2:ab:93:7a:26:52:3e:45:6f:c9:c9:f4:c4:0d:
         e2:c9:52:76:d5:4c:be:8e:fe:2c:3f:4c:1e:1f:f1:7a:f8:72:
         ae:99:4f:1f:d2:78:ee:28:5f:eb:cb:a1:ca:c9:82:80:d3:15:
         52:c1:c1:fd:1d:d3:ee:8f:01:ab:80:23:1d:81:5e:b7:e7:49:
         4c:44:3e:0a:6f:21:5f:02:d0:aa:a4:85:88:6a:e7:48:0d:c9:
         7b:2a:b2:62:86:d8:fb:7d:cc:29:d1:3a:ab:0d:be:fc:c0:05:
         2c:f3:e0:66:95:af:59:b2:74:b4:1f:8e:d1:59:ae:54:0b:d8:
         ab:7a:3c:58:44:0b:44:7f:34:51:40:1a:8a:79:a8:b7:ce:92:
         6a:49:ad:54:0e:fe:55:f9:c4:f7:a8:e6:cc:62:38:95:08:fb:
         8c:15:48:dc:49:cd:8b:5d:22:c9:69:14:c8:ef:fd:f7:e2:ae:
         43:f0:72:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:01:23 2026 by rpki-client