Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/ED201F92735211F18A4BA3827BEE528E.roa
File:                     ED201F92735211F18A4BA3827BEE528E.roa (raw, json)
Hash identifier:          YFYwfIKijDnRvlm19fu/WqR9dhjYqqwvizBn8uO3FcQ=
Subject key identifier:   47:F1:75:EA:78:49:B7:BE:1C:44:D5:37:78:9A:5E:76:46:C1:47:39
Certificate issuer:       /CN=A91F83B6/serialNumber=563CA4D968531E880C344A3D52950D0DD3E71B8D
Certificate serial:       04
Authority key identifier: 56:3C:A4:D9:68:53:1E:88:0C:34:4A:3D:52:95:0D:0D:D3:E7:1B:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vjyk2WhTHogMNEo9UpUNDdPnG40.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/ED201F92735211F18A4BA3827BEE528E.roa
Signing time:             Mon 29 Jun 2026 00:39:03 +0000
ROA not before:           Mon 29 Jun 2026 00:39:03 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141414
IP address blocks:        163.61.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.crl
                          rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vjyk2WhTHogMNEo9UpUNDdPnG40.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Jul 2026 05:54:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83B6, serialNumber=563CA4D968531E880C344A3D52950D0DD3E71B8D
        Validity
            Not Before: Jun 29 00:39:03 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a41bea7-5332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:8b:02:ae:75:95:34:d8:5a:50:4d:15:9e:
                    10:39:8f:28:cf:d7:1a:09:fa:36:2e:34:53:f2:4b:
                    08:31:b2:a1:ce:88:7f:83:8e:5a:83:24:68:a4:6b:
                    8d:a0:1b:97:60:e1:3c:fa:b5:0b:3e:c7:69:93:78:
                    63:24:03:b2:d6:c5:7f:ea:a1:5b:29:09:49:ff:f5:
                    c8:ee:62:ac:83:85:6f:68:2f:03:90:b7:f4:64:56:
                    be:41:8e:02:2b:76:a2:af:98:35:d1:b8:01:f3:79:
                    bf:6a:15:ca:75:97:4c:45:15:95:21:55:76:e6:89:
                    6a:63:c5:b1:09:93:15:6a:cc:be:99:3d:bd:5f:2c:
                    87:99:8c:6f:ac:7b:6c:09:06:b3:a0:5c:99:de:b0:
                    58:50:53:f1:c5:77:94:0b:96:e3:47:d0:e2:8b:e5:
                    10:f9:b9:cb:0e:33:12:cd:38:79:48:53:22:c1:69:
                    eb:2a:64:3c:1b:46:25:6b:3c:29:b1:a0:a0:dd:94:
                    12:5e:22:2a:16:30:03:ff:6a:a9:d5:1d:44:c2:d7:
                    a8:ee:c4:41:6d:9f:89:0d:c6:ef:6a:c7:22:7d:87:
                    1a:bf:f8:4a:8d:1b:dc:72:1d:f1:dc:04:78:e5:fd:
                    91:d0:5f:7b:87:b0:2b:f7:b3:24:65:3d:c0:da:60:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F1:75:EA:78:49:B7:BE:1C:44:D5:37:78:9A:5E:76:46:C1:47:39
            X509v3 Authority Key Identifier:
                keyid:56:3C:A4:D9:68:53:1E:88:0C:34:4A:3D:52:95:0D:0D:D3:E7:1B:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/Vjyk2WhTHogMNEo9UpUNDdPnG40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vjyk2WhTHogMNEo9UpUNDdPnG40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/ED201F92735211F18A4BA3827BEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:9a:69:0a:d3:46:28:1f:53:0d:d3:b3:12:21:e1:78:51:
         02:e4:c0:92:48:08:d2:db:34:1f:71:4d:88:cd:57:18:ad:69:
         c0:a7:94:ef:ca:f3:59:f1:9d:8d:91:dd:ac:fb:31:e1:27:f4:
         2f:ad:f5:cd:14:57:8a:f3:32:5f:a8:fb:ea:7c:97:49:f7:15:
         63:16:3c:3a:0b:6e:c4:da:d2:99:39:bf:45:00:cc:5a:2f:f2:
         fe:6a:92:84:00:8f:e2:1c:1b:98:e6:0d:79:7f:99:74:6b:01:
         23:bb:9a:0c:19:d8:e2:37:f3:fd:4c:20:6a:11:d5:3a:f5:98:
         ab:c1:4f:2c:b2:68:55:d6:3a:d1:bd:a0:32:bb:1e:3f:a1:fb:
         e6:c5:4d:25:3e:36:f3:3d:91:44:a6:e7:75:23:5f:cd:3a:65:
         7e:fb:cc:c3:f7:91:d1:7c:57:61:97:1e:44:89:35:91:b6:7f:
         df:7a:62:ec:b2:97:b6:35:ad:2a:89:55:f4:dd:6f:11:62:6c:
         44:90:09:07:6e:23:38:fa:c5:86:7f:88:fc:c9:2d:19:ae:de:
         47:65:e8:16:42:04:f8:a3:ee:81:f4:2c:49:1b:4a:a1:4c:cf:
         2a:68:a7:6f:cc:dc:59:40:57:08:2a:d7:6c:98:78:e6:c8:c0:
         95:db:1e:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jul 5 08:35:45 2026 by rpki-client