Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B61774A4D9DF11EFB722C742C4F9AE02.roa
File:                     B61774A4D9DF11EFB722C742C4F9AE02.roa (raw, json)
Hash identifier:          K/m2a9ngKa6moyBMKEpXRF5zdMnYdabzk/Bqhdzc11M=
Subject key identifier:   E6:36:4D:4B:61:92:81:13:96:BD:C0:A1:66:FD:59:BC:7B:82:E1:08
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       2854
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B61774A4D9DF11EFB722C742C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:38:45 +0000
ROA not before:           Tue 08 Apr 2025 15:53:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     10141
IP address blocks:        210.14.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 15:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10324 (0x2854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Apr  8 15:53:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a487b5-ee47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:82:f2:43:1b:83:a3:eb:ea:88:44:07:c9:
                    a6:94:20:83:c1:e4:51:25:d2:f2:fc:25:a4:7c:a3:
                    9a:79:25:ae:cb:c0:42:33:19:e8:14:de:cd:ea:0c:
                    bd:32:c0:99:45:fe:e9:46:5c:44:e6:62:40:98:2b:
                    3b:0d:d6:48:ee:eb:b2:d3:a9:b0:f4:a7:f2:19:4f:
                    25:4a:a4:12:f2:e1:7a:ea:04:35:df:d7:ae:73:fb:
                    c0:f1:7e:73:b9:45:70:ee:a1:44:fe:98:96:2b:d8:
                    2c:d1:ff:61:ce:47:ba:a0:9e:0c:7b:e7:82:b2:d9:
                    63:60:fc:4a:d0:39:aa:9d:f6:96:ce:c8:5f:a0:b8:
                    29:90:5e:12:3f:3a:a0:41:dd:73:07:cf:68:60:31:
                    43:ed:25:39:e1:e3:17:d3:d2:ae:6f:b1:db:01:e4:
                    21:06:be:6e:f6:78:57:5f:1b:f9:89:df:01:02:83:
                    83:c7:6d:6d:8e:ea:35:20:f0:94:0d:0e:83:d9:28:
                    db:a6:a3:77:1d:ad:75:be:30:73:c5:25:f9:44:9d:
                    4b:ab:fd:8d:f0:eb:a2:a2:da:f8:db:a1:5f:c8:83:
                    7c:b0:a8:58:37:7d:54:7f:51:db:af:27:68:1a:ec:
                    3f:fa:68:c0:8f:d9:aa:4c:ae:7f:bc:2b:8a:6c:f8:
                    4f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:36:4D:4B:61:92:81:13:96:BD:C0:A1:66:FD:59:BC:7B:82:E1:08
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/B61774A4D9DF11EFB722C742C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.14.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f1:aa:60:24:5a:a4:9c:8e:10:e8:a6:c6:b5:f4:44:6f:6f:
         c6:f8:39:25:a4:8f:cd:ff:86:ed:d1:73:4c:77:17:40:61:7f:
         4c:77:18:3b:a5:33:3e:5b:58:41:58:f1:fe:e2:49:fe:22:1b:
         5c:68:e0:fd:43:d3:54:7c:26:3d:e1:f0:e2:96:e2:ee:7c:a0:
         3a:06:59:74:90:1c:ba:8e:85:12:60:91:95:dd:b6:0e:7e:df:
         bf:3c:ef:26:c1:b3:be:f2:b3:2b:6e:38:8b:69:fa:09:e4:ef:
         45:47:64:fc:a8:01:8a:0c:5c:fe:de:5b:f6:ad:a7:fa:62:d3:
         53:e7:c9:bd:45:6a:db:86:77:de:5c:31:55:c9:ad:a8:02:89:
         10:4b:bb:36:3d:24:5d:11:dc:ca:67:ad:8c:6f:fd:a8:36:5f:
         8b:46:12:e8:88:10:ec:c0:99:e6:aa:7d:ff:da:55:be:4d:50:
         b5:2e:14:41:1d:6e:76:fd:5c:29:42:7d:eb:ad:9a:69:92:09:
         df:63:53:e0:60:95:6a:70:86:ba:61:63:38:29:15:27:9a:da:
         4f:93:13:ec:e4:7c:b2:0c:17:8e:08:43:1c:20:88:9b:65:0b:
         05:82:d4:f8:7d:3d:73:5f:2a:cc:c0:39:5d:0c:a5:d5:8f:bc:
         29:ba:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:23:08 2026 by rpki-client