Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
File:                     FDE6938CE90C11EFB9D98326C4F9AE02.roa (raw, json)
Hash identifier:          uOYxYsUyV5d201wkHKNC5KliU1I0MfAZOgIjo4393UM=
Subject key identifier:   F3:5C:FC:8C:93:A7:F0:F0:A2:EA:BC:68:47:C0:90:4C:DD:E5:BE:96
Certificate issuer:       /CN=A91A0A2E/serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
Certificate serial:       D5
Authority key identifier: 6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:43:23 +0000
ROA not before:           Tue 03 Mar 2026 06:43:23 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        163.61.113.0/24 maxlen: 24
                          2001:df5:1440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 05:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A2E, serialNumber=6A3EF67182DBB0F6CCF3CA41378C0119806AE9BD
        Validity
            Not Before: Mar  3 06:43:23 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a6830a-0831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9b:c1:d2:c4:75:11:6b:77:32:7e:74:7e:89:
                    85:b4:a6:62:98:87:b8:fe:70:9e:61:84:d6:f5:b3:
                    bc:5f:53:f7:0e:ca:7c:aa:b9:65:26:e6:d2:6e:75:
                    a3:2c:67:bc:86:84:1b:8f:65:c1:ea:24:5b:5f:c0:
                    2b:70:69:94:ed:2c:5f:56:b3:8a:ba:0e:da:6d:8a:
                    54:2d:66:ab:bd:ce:c0:99:24:ca:ac:9d:bb:46:ed:
                    20:2f:97:dc:92:9d:32:76:ce:db:5a:da:a5:3e:92:
                    00:49:d2:d7:f1:49:92:b7:38:c9:5c:8c:3c:f4:bf:
                    78:01:1e:81:aa:22:68:13:f0:4f:94:0e:95:96:84:
                    e1:53:e9:c6:f7:27:ee:3a:c2:69:58:4b:7f:87:76:
                    9b:58:5f:86:49:d8:22:ab:df:bd:4c:3b:ef:79:7f:
                    52:b3:a0:94:a5:5f:2c:f3:d0:83:78:af:89:8e:30:
                    4e:23:07:f9:d9:78:f7:77:99:1f:29:c7:e1:b8:a0:
                    0e:a4:d2:10:ee:47:1e:15:a7:a7:0d:1d:da:12:69:
                    e5:50:be:53:a6:4e:15:94:82:34:55:2a:12:9e:f8:
                    37:7d:c2:ea:6d:48:3c:da:79:b6:2e:89:d1:a6:68:
                    95:43:ad:d9:64:1f:e7:80:4e:db:ad:64:66:3a:a4:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5C:FC:8C:93:A7:F0:F0:A2:EA:BC:68:47:C0:90:4C:DD:E5:BE:96
            X509v3 Authority Key Identifier:
                keyid:6A:3E:F6:71:82:DB:B0:F6:CC:F3:CA:41:37:8C:01:19:80:6A:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/aj72cYLbsPbM88pBN4wBGYBq6b0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aj72cYLbsPbM88pBN4wBGYBq6b0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A2E/C836C7B2E90B11EF82185824C4F9AE02/FDE6938CE90C11EFB9D98326C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.113.0/24
                IPv6:
                  2001:df5:1440::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:05:52:38:28:4b:a9:c1:7e:0a:b3:44:e5:17:bf:3f:65:84:
         79:57:aa:8a:8b:c7:37:d1:c9:f1:b7:03:61:bd:34:9d:69:7f:
         50:54:08:5f:2e:f3:94:fa:95:34:0b:a4:44:18:85:9a:0d:7b:
         79:d0:3c:23:bc:25:5d:a8:16:06:75:22:ee:72:20:be:c7:a5:
         29:c7:79:5b:6a:48:fd:11:99:d9:47:86:65:f2:d2:89:da:6d:
         b7:7e:96:81:8b:4a:7b:7a:9e:9c:53:ac:b8:80:b9:2e:1f:1b:
         ca:ff:58:76:5b:ad:6c:ab:50:ff:cc:8d:5d:db:c1:78:91:bd:
         b7:97:b6:03:e7:60:60:1e:4e:d2:6b:04:ea:cc:ce:1f:99:db:
         cd:34:02:73:23:96:7c:69:01:b8:e1:d8:e5:9f:46:a8:45:c4:
         76:1a:31:11:fa:49:a2:46:4e:2c:cf:9b:4b:20:1e:c5:7f:3f:
         80:e5:61:2e:13:54:00:fc:26:25:a1:36:66:8f:63:51:69:f2:
         8b:a7:7f:73:9e:4d:92:92:a0:cd:99:ee:28:97:2a:e2:1e:ca:
         1f:d5:71:65:94:95:2b:cc:94:9d:f9:48:e1:5f:63:3c:be:2f:
         56:16:89:09:55:15:3b:73:76:27:28:4e:05:a9:08:92:c2:b9:
         42:3a:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:32:54 2026 by rpki-client