Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FD63D5BEE90C11EFB9D98326C4F9AE02.roa
File:                     FD63D5BEE90C11EFB9D98326C4F9AE02.roa (raw, json)
Hash identifier:          VJiboECQcz4EPJ3s89go0nGoquID30lt86NixvuBLSQ=
Subject key identifier:   51:C9:B7:22:67:CE:08:BB:60:0F:AB:02:EA:26:60:E8:56:66:1B:09
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       D4
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FD63D5BEE90C11EFB9D98326C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:43:21 +0000
ROA not before:           Tue 03 Mar 2026 06:43:21 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     14618
IP address blocks:        163.61.113.0/24 maxlen: 24
                          2001:df5:1440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 05:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Mar  3 06:43:21 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a68308-162b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:29:4a:e9:4b:69:fc:ea:61:46:08:0f:d2:11:
                    e1:b7:09:51:be:69:48:79:d4:97:0d:f4:ce:a3:f6:
                    15:14:e8:e1:6d:e6:f2:22:5e:02:dd:fc:48:31:b6:
                    8a:9d:51:55:34:60:4e:54:68:25:e2:6d:78:ba:cb:
                    0a:e2:a3:17:fc:eb:32:3b:5c:84:99:e6:30:67:d6:
                    ba:2f:19:cc:a8:a6:19:06:e0:12:db:d8:68:91:89:
                    46:a0:f9:fb:5a:ba:18:d4:f6:95:83:a2:0b:87:12:
                    8c:03:a5:65:09:c5:8d:3d:80:4f:55:6e:d3:c0:1f:
                    bc:90:fc:60:ff:00:e2:45:a8:82:75:15:af:f6:5a:
                    1b:7c:fb:00:ac:64:7d:28:49:f7:cd:5d:37:43:52:
                    3d:9a:c2:98:81:f2:15:3b:5d:ec:14:8e:4d:d1:5b:
                    e3:34:6d:bf:36:c1:c4:35:5f:34:69:8d:39:5a:c2:
                    16:81:60:f6:8a:52:87:99:ea:bf:41:13:3d:90:1e:
                    6e:a6:e0:d8:8a:14:be:44:a4:5c:6e:29:83:6d:dc:
                    f0:3c:c4:47:ec:76:9a:86:e7:9c:5b:3f:74:9d:00:
                    65:d2:9f:5b:b3:bb:98:3b:3e:dd:a1:dd:8c:bc:a5:
                    84:1b:9a:30:d7:be:df:3b:47:e6:57:27:44:a6:bb:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:B7:22:67:CE:08:BB:60:0F:AB:02:EA:26:60:E8:56:66:1B:09
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FD63D5BEE90C11EFB9D98326C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.113.0/24
                IPv6:
                  2001:df5:1440::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:f0:04:35:d8:61:79:5d:a0:ea:ed:ee:56:d9:17:33:02:38:
         7a:23:9b:e7:2c:21:bf:61:4f:71:99:63:4f:70:38:91:26:74:
         1a:f7:1c:40:fd:82:fc:85:6f:ad:ed:cd:29:ab:83:e6:a1:cb:
         46:94:03:c4:68:2b:bf:c1:70:41:a3:b2:1d:1b:63:57:2a:68:
         f5:26:60:f9:fb:1f:d3:20:3b:55:8f:b4:89:ea:83:a5:e0:9c:
         13:82:97:36:7e:5c:84:87:95:f3:06:08:25:95:9d:a4:87:40:
         63:21:dc:7f:7c:7a:63:c7:3f:1e:e9:6f:f3:07:af:91:05:82:
         a4:ee:ad:d4:d4:33:80:40:46:ae:68:d0:da:29:26:11:ad:aa:
         ce:81:a0:c7:bc:7b:95:7c:60:27:32:50:04:b2:e9:07:47:33:
         90:c3:88:51:dd:9f:00:a9:ec:5a:97:3e:dc:20:37:93:e5:92:
         82:35:90:0b:7e:08:25:0c:bf:7e:e9:a3:e9:df:09:bb:fc:4a:
         92:73:1c:0c:bc:d5:39:bb:a2:0d:11:72:8f:7c:3c:29:41:b6:
         6c:05:9a:ec:5f:f4:c4:aa:bc:66:28:3e:61:88:f1:90:b1:1f:
         1a:51:78:59:3a:db:88:c2:b4:49:aa:d0:d0:cf:7e:f3:31:65:
         2c:ed:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:38:12 2026 by rpki-client