Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
File:                     B772717A9AB611F1A85C11C64311F970.roa (raw, json)
Hash identifier:          7Ucf7gwZDT+qsc3+0OoUZYQmZxODwb+cri8OV1eYBt8=
Subject key identifier:   4E:2A:E5:6F:68:0D:14:40:28:0E:78:E3:07:F1:5E:C0:DB:37:93:E5
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       0226
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa
Signing time:             Tue 18 Aug 2026 03:41:38 +0000
ROA not before:           Tue 18 Aug 2026 03:41:38 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     197537
IP address blocks:        61.16.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 03:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Aug 18 03:41:38 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a83d472-fc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:ce:0d:c1:c3:58:63:a8:de:33:89:61:2d:
                    49:4b:70:d9:6a:6e:6f:d3:a4:fa:42:da:fa:0b:83:
                    8b:84:6d:e3:1f:08:26:3b:35:df:6f:cc:4c:1e:fd:
                    4e:3d:be:6c:d2:dc:b6:d6:41:3a:62:99:e4:43:65:
                    d4:1c:d5:32:cc:42:9f:c2:9a:2f:89:ed:c8:bc:e3:
                    c6:b7:f7:69:02:9b:19:4a:f7:e6:61:4f:7e:ad:11:
                    e7:42:88:6d:0a:c4:cd:17:7f:71:34:6f:12:5c:ea:
                    4e:0d:e4:92:b2:fe:9e:96:55:95:c4:a9:5f:3d:64:
                    96:f6:e9:02:e5:92:e4:8f:2d:41:e7:1e:97:10:09:
                    2c:4f:60:cf:7e:5c:5e:35:1a:ca:c3:10:21:59:be:
                    d4:66:41:7f:c9:a9:91:a3:09:8b:d8:2d:14:2a:db:
                    bd:6c:a8:b5:27:14:22:f7:28:da:a2:d2:f2:a5:50:
                    d9:65:95:c0:19:59:14:1a:64:00:b1:54:db:78:8d:
                    ba:2d:63:9d:71:0b:c0:6c:79:59:a7:d0:5d:22:4e:
                    e6:7d:2d:f0:0f:50:1a:f5:63:6e:70:f7:ff:53:1f:
                    9e:f4:8f:9e:51:12:44:96:c2:14:5c:94:ff:43:28:
                    77:42:f6:a5:fd:4d:b9:61:3f:34:c2:d2:c7:a7:a6:
                    17:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2A:E5:6F:68:0D:14:40:28:0E:78:E3:07:F1:5E:C0:DB:37:93:E5
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/B772717A9AB611F1A85C11C64311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.16.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:69:ee:82:7f:e1:21:8f:cb:47:d5:61:56:c4:bf:5e:2b:4f:
         e1:f4:d2:98:72:7f:39:81:b8:e0:ab:84:f2:23:2b:6d:c7:83:
         6c:4f:08:c0:79:3d:cc:2d:5e:56:83:2b:24:75:07:5b:a0:74:
         04:86:bd:fc:82:ff:c7:71:b2:9f:62:d5:cf:ef:f8:77:18:c7:
         c7:94:b1:61:cf:5a:7b:2a:39:d5:71:c5:79:ba:f6:74:25:6a:
         a3:78:7d:00:70:3e:25:ca:f3:1d:31:fc:b2:6b:2a:42:61:a3:
         91:c4:ef:01:27:8b:3d:32:86:c2:5f:f4:4c:29:b7:f2:b6:9f:
         b3:02:76:5f:72:a3:79:cc:4b:8e:af:1e:2c:1c:8e:23:c0:64:
         22:66:40:ed:d6:29:c8:3a:40:06:ca:6f:a2:a7:1d:01:31:7c:
         60:c3:1d:69:dc:2d:3b:a3:1c:61:7f:18:76:23:c2:0d:30:e2:
         99:d7:8f:d4:84:23:fe:1b:72:01:ff:c7:ea:22:d7:65:97:c8:
         6b:46:a5:f5:f9:10:8c:85:73:71:1d:25:8d:5b:39:aa:54:75:
         86:db:b7:77:e9:6d:78:47:38:c2:54:3d:45:12:c2:a7:fd:b8:
         8b:f9:00:32:5b:c2:ef:62:f9:d3:92:e3:16:4f:61:ab:a3:32:
         3a:2c:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:48:55 2026 by rpki-client