Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/1A4CE8285CE811F1AFE8153695833773.roa
File:                     1A4CE8285CE811F1AFE8153695833773.roa (raw, json)
Hash identifier:          LiFEOIoplWS8LYZV1zbsfpk76nfGlC9TBMdAT7BDFCc=
Subject key identifier:   C9:8E:4C:5F:B9:5C:96:B6:50:38:7D:EB:3D:F7:1C:B5:42:99:14:54
Certificate issuer:       /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
Certificate serial:       012A
Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/1A4CE8285CE811F1AFE8153695833773.roa
Signing time:             Sun 31 May 2026 11:58:57 +0000
ROA not before:           Sun 31 May 2026 11:58:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     138926
IP address blocks:        163.61.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
        Validity
            Not Before: May 31 11:58:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1c2281-a484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:8b:8c:a2:d3:27:6d:a0:29:0f:3a:1e:bd:
                    a0:28:96:cf:07:54:2b:70:75:d8:65:f9:ae:72:59:
                    c0:9c:2c:f6:95:cd:c2:07:09:46:57:3f:2f:f6:ad:
                    8d:89:8e:86:ff:8b:7d:21:03:f3:92:1c:87:35:7c:
                    df:70:a2:ef:35:ef:67:88:fa:23:03:52:ca:08:2c:
                    f5:9f:88:67:d9:7b:0d:36:37:06:d5:5f:8f:d3:5a:
                    31:e2:4a:04:0d:40:e9:7a:94:8c:0d:cc:2e:4a:46:
                    d4:b9:6b:8a:96:42:39:01:21:34:eb:68:ff:1f:66:
                    1c:a7:a5:e3:aa:8d:cf:05:0c:6b:1f:76:74:c2:a0:
                    1a:02:02:3e:af:d0:9e:1a:69:e9:f4:69:51:bb:d0:
                    a5:a2:7e:98:bc:c2:26:46:19:d7:ac:b1:6f:1b:d0:
                    4f:f4:a5:29:c0:0e:0a:2d:6b:f9:d6:f5:e8:fc:3f:
                    ec:f7:7a:cb:2d:9a:5b:35:d1:16:1f:13:4c:45:67:
                    c9:4a:cf:f3:ab:ed:16:80:e0:3b:d9:17:be:b1:51:
                    78:85:e6:62:7a:82:f3:e9:10:b4:83:98:8a:95:46:
                    70:07:0f:d3:ad:61:16:ce:f2:6a:8b:a2:c9:a6:2d:
                    02:39:d7:07:e2:56:4b:ed:07:7b:53:0d:e5:f4:db:
                    f0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8E:4C:5F:B9:5C:96:B6:50:38:7D:EB:3D:F7:1C:B5:42:99:14:54
            X509v3 Authority Key Identifier:
                keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/1A4CE8285CE811F1AFE8153695833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:3b:5a:b2:b9:7f:a5:3d:80:1e:81:91:47:27:99:ad:43:cb:
         76:7c:16:d7:04:8e:0f:2e:a3:d4:9a:1a:2e:6d:2e:86:30:2f:
         84:c1:0f:a6:33:89:d9:26:8b:61:cd:b6:76:26:9f:6e:48:1a:
         c8:8d:fe:5c:d3:1c:99:a5:97:0f:45:6f:78:48:41:54:82:89:
         42:b2:79:4b:9f:25:66:6d:f3:ea:eb:aa:ee:7a:13:c7:4d:c8:
         ec:de:2c:31:81:76:59:aa:de:80:80:98:2a:6e:48:fc:88:9f:
         ba:bf:7a:36:09:db:29:79:46:f2:54:39:1f:0b:54:66:18:09:
         75:d3:ed:30:7c:ce:50:c7:6a:d8:44:e2:71:be:d2:47:d4:f4:
         e3:0d:36:56:42:59:7f:4d:aa:bf:21:63:19:1e:4e:cd:c3:0e:
         24:8c:ab:b4:d6:3b:c5:46:28:6a:52:b2:db:06:d7:c3:7d:50:
         e4:b1:75:b0:5f:76:5a:f5:56:70:1b:26:1d:d7:7e:ad:9f:ad:
         54:01:1f:81:0e:35:17:47:72:31:f7:1c:d1:cd:4f:5f:cb:7b:
         09:7e:60:72:6f:21:fb:60:0e:07:04:73:b4:91:c8:96:a9:87:
         d6:43:23:e6:45:3a:56:60:de:02:60:99:b4:f2:03:b5:19:9e:
         bc:bb:6b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 00:53:36 2026 by rpki-client