Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa
File:                     3204348A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          MSV3LxUccxEzwztjgTuOrU079DQ34EyY8pN67xZnvTc=
Subject key identifier:   5B:46:FC:E2:3B:70:AD:A4:50:4C:FF:D4:2D:8B:3C:3D:D1:F9:5B:5D
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       37E5
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:20:52 +0000
ROA not before:           Tue 30 Dec 2025 15:10:08 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135535
IP address blocks:        61.45.250.0/24 maxlen: 24
                          2401:4601:250::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14309 (0x37e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:08 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a49194-5432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:2d:39:0f:75:1d:66:89:41:3e:3f:0d:de:05:
                    81:5d:bc:51:86:45:89:12:ac:0c:c7:a1:12:96:2d:
                    67:a4:c4:a1:0f:b0:0d:89:07:03:1e:1b:c3:76:68:
                    df:47:77:e9:9c:5a:fc:f8:bd:e6:0b:8f:cb:10:d6:
                    2c:d4:9d:f0:aa:48:fc:fc:e5:96:39:93:a2:dc:e7:
                    3e:0e:6c:d7:91:00:d6:f9:4b:c1:c9:3b:73:88:9f:
                    e4:a1:e5:84:c6:ab:ac:9e:21:f5:a7:22:22:29:50:
                    1f:0d:55:e9:7f:28:d0:ae:c2:0a:cf:92:25:64:9c:
                    b9:96:1a:c2:04:e8:93:19:b5:6f:42:12:b1:c8:f5:
                    ec:f9:35:06:0b:59:51:df:5b:e6:da:6f:a3:75:66:
                    6a:d0:27:4f:c6:ee:ce:c2:22:d5:f3:47:59:52:e1:
                    1c:b1:2a:8e:d8:16:9d:14:cc:c6:07:2b:54:89:55:
                    10:d3:5b:7c:66:c3:db:d9:ca:c9:76:88:bc:6a:97:
                    ae:c0:c0:2c:23:59:f1:d0:00:3e:88:12:51:ea:74:
                    27:6b:d2:2a:01:60:cb:c2:a7:da:42:a2:6a:c2:1b:
                    e5:a1:67:e5:c1:a9:f7:c9:d2:a9:63:b8:a1:7f:b7:
                    8d:5c:f4:95:6c:f7:f9:d3:71:87:c0:99:d5:21:18:
                    78:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:46:FC:E2:3B:70:AD:A4:50:4C:FF:D4:2D:8B:3C:3D:D1:F9:5B:5D
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/3204348A383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.250.0/24
                IPv6:
                  2401:4601:250::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:c6:b2:34:e6:61:9f:be:0c:1d:8f:d0:3e:57:79:30:7b:61:
         6d:78:f5:32:8d:18:63:03:48:c6:57:5e:1f:27:85:8c:b3:ee:
         6b:98:b0:38:90:86:f3:7e:0f:db:95:c6:b2:e4:da:c6:df:23:
         34:18:9f:2b:3a:1b:56:3c:d9:ec:74:c2:cb:4e:84:3f:8f:ff:
         84:13:4d:81:cb:ef:8e:16:d0:6b:10:2d:40:33:b2:6a:fa:0b:
         12:2f:e0:fd:ef:62:20:38:40:91:e9:85:1c:ed:ec:d7:6c:0b:
         64:4e:5c:fe:bd:c3:8c:09:af:b1:c3:c4:04:fd:44:62:0f:1a:
         25:fb:e6:f7:ab:b4:31:3c:d6:22:d8:d2:20:11:8a:19:c1:48:
         e4:14:4e:7b:57:b5:20:ac:21:66:a3:30:c0:5c:34:46:bd:47:
         eb:89:fb:83:51:63:c0:96:39:a9:83:94:de:3e:4a:b4:22:de:
         65:52:cc:06:ce:12:93:a0:4a:59:31:d3:93:1d:a3:7a:6f:f7:
         29:7c:83:aa:22:0b:bf:92:81:98:1c:cb:47:f3:b9:09:75:de:
         14:ef:cb:dc:6d:42:58:83:ba:63:0d:b0:92:70:ab:3c:3e:dd:
         54:26:e6:0e:a4:4e:cc:ed:94:94:fc:50:8f:a6:28:b5:6b:f8:
         6b:b0:da:8b
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICN+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2
OTYwQkUyNjgwHhcNMjUxMjMwMTUxMDA4WhcNMjYwNDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTE5NC01NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhC05D3UdZolBPj8N3gWBXbxRhkWJEqwMx6ESli1npMShD7ANiQcDHhvDdmjf
R3fpnFr8+L3mC4/LENYs1J3wqkj8/OWWOZOi3Oc+DmzXkQDW+UvByTtziJ/koeWE
xqusniH1pyIiKVAfDVXpfyjQrsIKz5IlZJy5lhrCBOiTGbVvQhKxyPXs+TUGC1lR
31vm2m+jdWZq0CdPxu7OwiLV80dZUuEcsSqO2BadFMzGBytUiVUQ01t8ZsPb2crJ
doi8apeuwMAsI1nx0AA+iBJR6nQna9IqAWDLwqfaQqJqwhvloWflwan3ydKpY7ih
f7eNXPSVbPf503GHwJnVIRh4/wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFFtG/OI7
cK2kUEz/1C2LPD3R+VtdMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE
NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMzIwNDM0OEEz
ODM2MTFFNkIyMjgyQjVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAPS36MA8EAgACMAkDBwAkAUYBAlAwDQYJKoZIhvcNAQELBQADggEB
AAPGsjTmYZ++DB2P0D5XeTB7YW149TKNGGMDSMZXXh8nhYyz7muYsDiQhvN+D9uV
xrLk2sbfIzQYnys6G1Y82ex0wstOhD+P/4QTTYHL744W0GsQLUAzsmr6CxIv4P3v
YiA4QJHphRzt7NdsC2ROXP69w4wJr7HDxAT9RGIPGiX75vertDE81iLY0iARihnB
SOQUTntXtSCsIWajMMBcNEa9R+uJ+4NRY8CWOamDlN4+SrQi3mVSzAbOEpOgSlkx
05Mdo3pv9yl8g6oiC7+SgZgcy0fzuQl13hTvy9xtQliDumMNsJJwqzw+3VQm5g6k
TsztlJT8UI+mKLVr+Guw2os=
-----END CERTIFICATE-----
Generated at Thu Mar 19 17:20:36 2026 by rpki-client