Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/17D98518FD6911EFA889E84DC4F9AE02.roa
File:                     17D98518FD6911EFA889E84DC4F9AE02.roa (raw, json)
Hash identifier:          NFFJXgXuoaxMrml8Oh8vxaW8xrfeeiE5Wfe+px5WY+k=
Subject key identifier:   2B:6F:C2:3F:1D:8C:91:4B:36:D8:D0:1E:F6:7F:D6:ED:CB:10:A4:FC
Certificate issuer:       /CN=A91A030C/serialNumber=103922EB77D940717C819E28C9664629480BBCE5
Certificate serial:       D4
Authority key identifier: 10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/17D98518FD6911EFA889E84DC4F9AE02.roa
Signing time:             Sun 29 Mar 2026 06:41:35 +0000
ROA not before:           Sun 29 Mar 2026 06:41:35 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151133
IP address blocks:        163.61.238.0/23 maxlen: 23
                          163.61.238.0/24 maxlen: 24
                          163.61.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl
                          rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:08:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A030C, serialNumber=103922EB77D940717C819E28C9664629480BBCE5
        Validity
            Not Before: Mar 29 06:41:35 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c8c99f-8ad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:d2:8a:3f:d9:8c:d0:1e:92:55:fa:2e:fe:
                    97:68:f7:01:88:c0:6c:34:07:49:0a:c0:43:b5:55:
                    58:e8:97:53:ab:0c:57:94:2d:5e:35:aa:9c:3f:24:
                    12:49:04:0c:bf:35:ac:32:69:82:c1:97:0a:5d:c3:
                    ea:53:92:cb:1d:2a:78:98:d8:12:69:e0:f0:c8:83:
                    9c:fe:4d:fe:02:56:7a:9d:af:4a:5e:e1:41:4e:e4:
                    3a:0f:ad:1a:7e:97:58:ee:d6:b9:34:26:30:fb:e6:
                    9a:bf:97:9b:6a:0d:79:49:f2:a7:9f:47:0a:b2:54:
                    9c:a1:e0:c4:81:6f:17:49:73:e4:62:e7:e4:8f:4b:
                    0a:be:3a:63:3f:f8:24:bb:ab:aa:5a:8a:79:68:a4:
                    50:dc:f6:4a:64:62:9e:df:28:63:7c:b1:88:7d:7c:
                    0f:fa:ad:ae:b2:2e:8c:9f:56:8d:8d:f1:86:ec:5d:
                    ad:bb:6a:d6:89:74:5f:d2:d4:e9:7b:ae:43:9f:34:
                    8a:10:4b:f4:d5:76:bc:42:5c:e5:db:ff:9e:4b:c4:
                    3a:2b:e9:b7:14:76:e0:f5:61:f5:93:a6:f7:5c:e5:
                    01:2f:07:7e:75:70:f4:36:a4:05:23:95:b3:f2:c7:
                    6e:73:22:1d:c6:2d:a3:55:4f:8b:8a:47:4b:58:a2:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6F:C2:3F:1D:8C:91:4B:36:D8:D0:1E:F6:7F:D6:ED:CB:10:A4:FC
            X509v3 Authority Key Identifier:
                keyid:10:39:22:EB:77:D9:40:71:7C:81:9E:28:C9:66:46:29:48:0B:BC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/EDki63fZQHF8gZ4oyWZGKUgLvOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EDki63fZQHF8gZ4oyWZGKUgLvOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A030C/A7036700F47611EFBE466D7FC4F9AE02/17D98518FD6911EFA889E84DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:e8:86:9a:5c:de:6c:91:15:12:f7:95:5c:76:a6:a2:2d:
         d9:bb:91:0a:93:bd:5c:f3:34:c8:89:26:16:36:f7:d4:89:32:
         9e:97:a9:7b:83:1b:9f:19:0b:9d:9e:88:5b:e5:0d:23:83:28:
         d7:57:9f:e1:21:2f:17:9f:c5:14:d4:bc:b4:f1:ed:fe:95:bd:
         9d:6f:23:a5:1b:1f:96:fc:0e:0f:18:7e:c0:31:08:1a:62:c4:
         45:d4:6e:02:35:31:38:aa:88:5f:57:8b:50:55:5f:67:f0:fb:
         bf:a8:9f:7a:08:f9:cb:73:5a:b8:c0:55:0a:9d:68:62:b8:44:
         cb:7a:f1:37:67:59:52:f5:00:46:e2:d9:3f:cc:8c:22:b3:14:
         e9:49:4e:a9:31:df:5a:b0:25:a5:b0:47:fe:bb:b0:7c:5a:79:
         58:86:30:6a:54:bb:7d:74:97:fc:93:ff:04:39:31:62:56:28:
         97:b6:f6:53:a1:79:85:0f:5d:63:95:ad:d1:06:7d:55:f6:30:
         f5:2e:2d:6b:62:b0:fb:34:08:85:2f:5e:24:d0:7b:0c:4e:4d:
         69:5f:0c:f4:9c:bd:2d:93:6b:15:65:33:ba:f4:14:bb:6e:5c:
         cb:9d:eb:1b:cb:41:3a:9a:7c:72:62:12:e7:22:43:85:d2:e6:
         2a:89:94:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 11:34:35 2026 by rpki-client