Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
File:                     328EDB76383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          /OHY5sp1sBAjqbNUDfbLE232C2zLovbSjzEt0F1Micw=
Subject key identifier:   AF:55:8C:4A:87:48:D7:D2:86:03:84:97:41:8D:F5:16:ED:D0:ED:36
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       37E6
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:20:53 +0000
ROA not before:           Tue 30 Dec 2025 15:10:09 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135536
IP address blocks:        61.45.251.0/24 maxlen: 24
                          2401:4601:251::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14310 (0x37e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:09 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a49195-a4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:66:39:6a:68:26:13:7d:ba:6e:ec:14:d2:
                    38:08:ad:57:e8:38:11:4d:59:81:cc:5a:9c:0d:da:
                    01:11:2b:ea:ad:87:ea:11:54:c6:2d:61:e3:bb:36:
                    ae:2b:80:df:ce:d3:f3:31:03:50:a9:c3:8a:d4:8b:
                    ec:4b:36:ef:f4:b0:e2:d7:f1:15:6d:1f:b6:58:67:
                    78:39:17:57:78:65:cb:03:f0:cc:29:46:54:b5:ad:
                    72:f4:4c:40:c7:4a:b4:76:f4:be:a7:80:5f:d3:12:
                    e7:a2:6f:a0:8c:1c:13:11:ea:53:a4:bf:c2:2f:42:
                    32:29:df:12:fa:57:72:27:92:1c:5b:a2:c8:de:7a:
                    34:4e:64:ff:74:b3:ff:72:c4:f4:ad:c4:ca:82:62:
                    2d:5d:eb:6b:27:cc:90:6e:ae:6e:ca:5c:9d:0f:1c:
                    cf:28:b8:a0:70:a1:6e:92:76:ec:07:c5:2f:c7:67:
                    f4:32:1e:b7:ab:c0:bd:a6:1e:7f:12:2d:6f:2b:3e:
                    e5:49:7a:82:fe:fb:0f:df:53:3d:6f:7e:a9:13:ff:
                    e5:d6:22:71:07:0d:a4:c2:23:20:54:be:e3:5f:c2:
                    31:27:66:79:16:32:39:d8:0e:d0:dd:af:b9:8b:7d:
                    95:bc:36:ff:99:63:47:7e:47:0f:08:96:3e:56:c8:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:55:8C:4A:87:48:D7:D2:86:03:84:97:41:8D:F5:16:ED:D0:ED:36
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/328EDB76383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.251.0/24
                IPv6:
                  2401:4601:251::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:f6:32:1b:79:06:b3:ca:a6:c4:13:26:3e:bf:a3:42:c0:78:
         4a:84:9f:7d:ad:01:af:ce:ad:c6:97:3d:16:96:df:0e:97:13:
         2d:45:16:7b:cf:ea:6a:46:db:03:9b:5e:0c:8c:cf:ee:55:e4:
         8b:99:c8:fe:0a:c2:33:6b:78:37:87:9e:79:78:26:e3:fa:1f:
         7f:85:02:d8:ea:30:c9:8f:87:cb:1a:38:2c:a0:f2:9f:dc:ea:
         c0:1b:c6:ad:ee:42:86:93:08:40:23:cd:a7:87:e4:a2:8a:0a:
         20:46:9a:8c:ba:97:11:97:1b:51:41:93:5d:54:ad:fa:6c:96:
         5b:69:43:7a:6f:2d:08:58:ee:35:27:2d:79:39:49:a2:5b:ca:
         92:b3:1c:bf:f4:32:6c:c0:ce:3a:35:fc:fb:bf:ee:a0:d4:bb:
         0c:b5:bc:0a:46:56:1c:38:d5:c2:73:2a:55:a9:dd:96:2f:67:
         42:66:02:9f:58:5d:19:9b:54:55:75:d0:cc:3e:8a:60:1a:9a:
         a5:86:de:95:4f:d4:80:73:53:06:82:ab:44:8d:f1:dd:2b:93:
         26:40:d1:69:dd:ff:2f:8b:f3:fc:4f:ba:70:44:b7:54:95:43:
         ad:33:3e:de:56:12:f0:09:12:8d:ec:ee:a7:c3:94:13:d0:a5:
         e5:63:7a:88
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICN+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2
OTYwQkUyNjgwHhcNMjUxMjMwMTUxMDA5WhcNMjYwNDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTE5NS1hNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJNmOWpoJhN9um7sFNI4CK1X6DgRTVmBzFqcDdoBESvqrYfqEVTGLWHjuzau
K4DfztPzMQNQqcOK1IvsSzbv9LDi1/EVbR+2WGd4ORdXeGXLA/DMKUZUta1y9ExA
x0q0dvS+p4Bf0xLnom+gjBwTEepTpL/CL0IyKd8S+ldyJ5IcW6LI3no0TmT/dLP/
csT0rcTKgmItXetrJ8yQbq5uylydDxzPKLigcKFuknbsB8Uvx2f0Mh63q8C9ph5/
Ei1vKz7lSXqC/vsP31M9b36pE//l1iJxBw2kwiMgVL7jX8IxJ2Z5FjI52A7Q3a+5
i32VvDb/mWNHfkcPCJY+Vsh6nwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFK9VjEqH
SNfShgOEl0GN9Rbt0O02MB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE
NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0
bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvMzI4RURCNzYz
ODM2MTFFNkIyMjgyQjVEQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAPS37MA8EAgACMAkDBwAkAUYBAlEwDQYJKoZIhvcNAQELBQADggEB
AJb2Mht5BrPKpsQTJj6/o0LAeEqEn32tAa/OrcaXPRaW3w6XEy1FFnvP6mpG2wOb
XgyMz+5V5IuZyP4KwjNreDeHnnl4JuP6H3+FAtjqMMmPh8saOCyg8p/c6sAbxq3u
QoaTCEAjzaeH5KKKCiBGmoy6lxGXG1FBk11UrfpslltpQ3pvLQhY7jUnLXk5SaJb
ypKzHL/0MmzAzjo1/Pu/7qDUuwy1vApGVhw41cJzKlWp3ZYvZ0JmAp9YXRmbVFV1
0Mw+imAamqWG3pVP1IBzUwaCq0SN8d0rkyZA0Wnd/y+L8/xPunBEt1SVQ60zPt5W
EvAJEo3s7qfDlBPQpeVjeog=
-----END CERTIFICATE-----
Generated at Thu Mar 19 17:24:43 2026 by rpki-client