Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/1E2A57A4C0E411F1A831D8747011F970.roa
File:                     1E2A57A4C0E411F1A831D8747011F970.roa (raw, json)
Hash identifier:          GAuK+MFr/7oRVU4NiTouplBZKLF2zcdwy44/C6c3xMw=
Subject key identifier:   2C:79:35:C0:66:A5:36:F8:21:CD:15:86:25:73:B5:23:EC:9E:84:F1
Certificate issuer:       /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial:       018F
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/1E2A57A4C0E411F1A831D8747011F970.roa
Signing time:             Mon 05 Oct 2026 17:42:22 +0000
ROA not before:           Mon 05 Oct 2026 17:42:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154408
IP address blocks:        163.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 Oct 2026 06:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
        Validity
            Not Before: Oct  5 17:42:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ac3e17e-e1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6a:64:17:81:a1:51:c8:f0:a4:79:3e:95:7d:
                    6f:64:6e:04:24:bb:68:16:56:9b:2d:dd:1f:55:0c:
                    20:3f:c3:65:ed:f8:70:87:74:81:bb:35:e4:df:69:
                    c8:1c:ab:c6:34:bc:fb:3b:ed:83:e8:92:ff:f5:96:
                    97:b2:6a:1c:2a:55:b3:ea:f0:26:7f:1c:8b:52:22:
                    74:dd:8b:52:88:86:26:b9:36:b8:fd:0b:d8:15:5b:
                    b5:81:0a:5d:a5:33:80:96:08:09:31:9c:6a:a1:1b:
                    0a:2c:f3:77:b5:26:c6:32:51:db:96:27:b9:d0:4c:
                    78:f4:26:5e:1d:71:f5:49:2a:86:7e:3a:0c:f4:40:
                    9e:0a:0f:0d:ee:d8:f7:94:4f:42:fd:75:96:21:2d:
                    9f:60:5e:a6:98:64:83:39:a8:51:60:92:2e:eb:13:
                    10:ff:84:57:39:a2:fb:76:81:61:c0:ab:c5:ea:57:
                    46:2e:6c:e7:d5:5e:b1:f8:3f:48:28:61:d7:aa:f7:
                    a9:50:bf:87:08:16:57:5b:15:ac:90:b3:44:ed:a9:
                    bd:4e:24:8b:8f:89:94:3c:3e:92:56:cf:6c:6b:d5:
                    5a:45:bb:59:2e:f2:64:d0:37:4e:77:71:7d:ff:be:
                    2f:4d:e4:67:24:55:25:48:3a:d5:e7:6e:5c:ed:c3:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:35:C0:66:A5:36:F8:21:CD:15:86:25:73:B5:23:EC:9E:84:F1
            X509v3 Authority Key Identifier:
                keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/1E2A57A4C0E411F1A831D8747011F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:43:99:98:49:55:e1:ee:a4:5b:20:e3:76:07:fd:51:8d:
         b8:be:4e:d5:26:d4:df:d7:24:36:c8:42:7f:5a:ad:98:a5:7e:
         fc:65:21:09:ca:b4:6c:d4:17:27:87:21:8b:bc:cc:02:7b:69:
         b7:3c:c9:02:fa:5b:a7:34:26:c9:91:49:d6:ef:85:f8:22:e5:
         57:65:bc:fa:2f:8d:f5:e0:c8:d5:3d:77:9c:d6:e6:ce:79:62:
         f1:2d:cc:ee:cc:98:8c:8e:75:e2:74:8c:d0:6a:9a:0b:e6:d6:
         d2:72:3e:bb:3f:18:85:35:0d:1f:0d:81:09:8b:d8:3c:cf:de:
         5e:68:4f:87:8e:32:91:3f:dc:65:d2:21:95:1e:f0:0c:77:61:
         16:60:7a:f6:34:41:c5:9b:fa:b4:c3:8f:48:c8:d2:e1:f3:71:
         45:7f:57:af:bf:c4:e0:f4:e7:01:23:7a:00:58:78:f6:69:0e:
         a8:90:7c:0e:f6:a7:9d:05:3f:47:fc:ea:ea:61:81:96:db:d0:
         67:72:08:8c:0d:c8:16:1f:59:bd:9e:07:b6:e3:88:69:58:41:
         91:8c:24:33:c8:bc:27:7c:76:e9:2a:4d:b4:ad:32:71:9b:ce:
         e8:86:89:ba:3c:6a:59:42:9a:b7:c9:1f:6f:e3:6b:17:aa:e0:
         22:1a:da:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:42 2026 by rpki-client