Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/61EFB2ACAC3611EDA5995F3FC4F9AE02.roa
File:                     61EFB2ACAC3611EDA5995F3FC4F9AE02.roa (raw, json)
Hash identifier:          lxrRVOjIONZ0+sk1QUPdtSqTSIWnhV1Sgp2inbSvE0o=
Subject key identifier:   36:A9:0E:5E:23:1F:17:FC:78:C6:72:BA:9A:9B:93:CB:FB:61:14:6E
Certificate issuer:       /CN=A911647C/serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
Certificate serial:       0B6E
Authority key identifier: 43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/61EFB2ACAC3611EDA5995F3FC4F9AE02.roa
Signing time:             Wed 11 Mar 2026 06:22:43 +0000
ROA not before:           Wed 11 Mar 2026 06:22:43 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     24462
IP address blocks:        59.148.165.0/24 maxlen: 24
                          202.77.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl
                          rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2926 (0xb6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911647C, serialNumber=436B2C5F03F91CA741C6A249DC015A6D544A62A6
        Validity
            Not Before: Mar 11 06:22:43 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69b10a33-cba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:73:0e:f2:96:e2:96:2d:5e:fc:2a:ba:ba:
                    8c:0a:a0:6e:de:36:76:6c:da:de:e5:27:13:24:06:
                    36:6c:5d:e2:62:a5:91:a8:ca:bf:63:64:a8:fc:e5:
                    bf:b7:c8:15:96:c6:7f:b0:26:b1:99:30:c3:6d:8e:
                    c5:f3:25:5d:34:4f:62:0d:b8:50:76:17:52:66:5f:
                    1b:fb:34:f6:22:21:11:6b:e8:8d:50:e7:67:76:4a:
                    a5:cd:b4:4d:e3:4a:0d:41:28:49:01:4b:96:b3:cc:
                    7c:eb:4c:6b:2e:fd:a1:8a:83:b4:d7:39:70:c8:03:
                    b7:c5:e9:3d:46:ab:6d:91:e7:92:e7:49:d9:b1:af:
                    3b:61:c8:f3:cf:73:aa:f8:c0:11:a4:e3:97:d7:81:
                    2e:d5:6e:4d:60:ef:05:bf:ee:ea:97:98:c8:e6:98:
                    a9:b8:e9:a8:57:c4:23:be:48:39:88:7d:f0:d5:d5:
                    7e:b0:25:c5:37:33:03:c1:51:d3:a5:87:12:55:11:
                    ef:08:25:10:74:01:22:80:e2:83:49:62:0c:1e:de:
                    d2:9b:ce:e6:d7:e5:b4:22:7b:06:4b:24:c1:84:fa:
                    e3:96:12:7c:77:be:82:46:d9:d6:66:dc:0b:0a:9b:
                    dc:aa:7d:13:b5:44:54:67:1f:b0:41:58:59:07:cc:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A9:0E:5E:23:1F:17:FC:78:C6:72:BA:9A:9B:93:CB:FB:61:14:6E
            X509v3 Authority Key Identifier:
                keyid:43:6B:2C:5F:03:F9:1C:A7:41:C6:A2:49:DC:01:5A:6D:54:4A:62:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q2ssXwP5HKdBxqJJ3AFabVRKYqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911647C/437CC406851311EAAA0B0A7FC4F9AE02/61EFB2ACAC3611EDA5995F3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.148.165.0/24
                  202.77.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:45:93:dc:10:b5:88:28:06:38:d5:b9:1c:00:65:80:65:
         9f:8e:84:74:b1:bf:e2:9d:2c:a7:80:16:c2:07:71:3e:0d:ea:
         e8:d7:6f:19:fc:2c:d4:5f:dd:80:68:2d:4e:e7:a9:38:7a:97:
         15:5a:93:b5:54:96:b2:de:af:d7:8c:04:3b:4a:92:52:7d:ed:
         0e:b6:d1:3e:9b:fd:8f:01:5e:6e:2d:c8:7e:16:2f:73:d1:3b:
         5c:ea:fe:f6:4f:50:07:31:b5:60:b3:a1:f5:35:cc:ba:ab:e4:
         b8:37:f9:46:90:e0:ee:0b:b4:6e:de:fb:a8:4e:fb:1a:91:24:
         d5:df:35:6c:4f:13:a0:e8:78:3f:21:31:4c:e1:06:e0:eb:7a:
         bc:91:c0:c0:24:b2:70:ee:3e:95:b4:b5:95:17:f4:56:b0:72:
         12:62:54:34:3f:bc:93:5b:a3:1d:dc:44:b9:3f:7c:cd:15:32:
         ee:7f:c3:2e:4a:e3:88:75:5d:e3:24:6d:b6:ac:67:00:f6:d7:
         70:fe:70:2d:cb:99:0a:e5:f6:c5:a2:ed:7b:0e:06:7e:1f:51:
         62:e9:8d:f9:90:1a:af:5f:82:64:3f:42:d8:31:d2:a6:d3:4d:
         3e:b5:e4:2e:fa:ab:87:57:0b:ed:d9:bc:4e:0e:19:3c:e1:ef:
         76:94:2f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:07 2026 by rpki-client