Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
File:                     2235EF78F12011F0BFBF3F154E6F56BC.roa (raw, json)
Hash identifier:          PdAz+4W9gV7DG5blKrt0fnM9lwbclCTxlZE4svm7VgA=
Subject key identifier:   F4:F1:28:DA:6B:52:6F:17:6C:84:C3:DC:9E:69:3F:E4:C7:15:EC:69
Certificate issuer:       /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial:       24
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa
Signing time:             Tue 03 Mar 2026 08:45:42 +0000
ROA not before:           Tue 03 Mar 2026 08:45:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     134186
IP address blocks:        163.61.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
        Validity
            Not Before: Mar  3 08:45:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a69fb6-5c3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6f:27:f3:b2:45:b2:88:fe:81:2c:9f:21:f0:
                    dd:ec:2b:a9:ce:f5:26:be:07:4e:36:fa:13:e3:4e:
                    3d:a0:45:7a:bc:21:2b:88:e1:fd:78:85:ec:a0:b0:
                    8c:48:1a:da:d8:e0:9b:58:5e:20:03:00:d7:52:0c:
                    d7:06:aa:c1:ba:f7:90:b7:b9:f7:aa:b0:c5:9d:b0:
                    a2:8e:61:dd:9a:56:38:27:50:46:12:f6:1d:c7:d7:
                    c3:87:09:02:0e:a8:97:a4:17:8d:aa:15:3f:54:91:
                    21:ea:65:29:af:97:f4:77:3b:b6:97:03:31:2d:b9:
                    e3:d5:38:e1:c8:7e:10:f1:4c:ab:90:37:3f:a0:60:
                    82:99:4e:34:9c:bc:ec:6b:83:43:71:32:ba:30:d1:
                    a8:22:e6:7d:71:d3:fb:c2:d0:dd:ff:70:24:ba:bb:
                    ed:21:e5:34:31:b5:a3:f1:3b:2e:d8:c5:e9:58:d2:
                    f8:7d:54:8e:55:dd:55:49:42:26:b9:da:4a:47:cc:
                    60:b1:17:9b:59:5b:46:12:70:ae:15:13:1e:cb:ea:
                    e2:cb:3f:70:1e:de:30:22:8a:4a:ca:da:fe:0e:7e:
                    3a:08:24:b9:3a:e0:7d:44:17:7f:af:3b:0f:f4:24:
                    33:fd:bd:ae:80:d3:1f:db:fe:f9:cd:86:6f:f8:6a:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F1:28:DA:6B:52:6F:17:6C:84:C3:DC:9E:69:3F:E4:C7:15:EC:69
            X509v3 Authority Key Identifier:
                keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/2235EF78F12011F0BFBF3F154E6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:80:c2:1a:9c:b7:48:5c:8e:fc:9b:c2:32:a2:a5:9e:22:be:
         51:8d:b4:bd:86:a2:35:29:47:09:8e:24:3a:2a:68:81:86:02:
         36:5f:14:6f:0f:ea:64:7d:6b:2c:ee:a7:41:ca:9c:10:eb:bf:
         bb:43:f6:b4:ad:8d:51:90:f7:ef:f2:fa:68:5c:1d:3e:a2:55:
         5d:8e:52:cc:65:c7:c2:85:be:78:13:94:1e:ef:bd:13:d7:2e:
         d0:a0:e8:df:f1:e3:7e:8c:b5:c6:d2:a2:f6:78:19:c1:1e:7c:
         7a:56:f3:28:75:e9:81:dd:9a:05:85:02:13:d2:d4:73:1e:5e:
         4a:a6:c9:8b:a0:4a:5b:4a:d6:7a:5d:88:60:d6:fc:b9:1d:ae:
         a0:f0:90:f9:bc:d9:0b:47:9c:28:38:61:38:e5:5c:3f:a8:ef:
         0a:7b:bc:30:a9:ce:a2:76:12:df:b3:88:69:79:af:5e:ec:76:
         79:59:8d:5e:9b:ff:ce:73:2f:16:08:50:10:8b:20:c6:92:1b:
         5d:f7:a1:56:d7:ef:a8:36:95:0d:f3:bb:1f:6a:83:49:7f:8f:
         de:f4:7d:4b:78:5f:28:21:b3:70:72:fe:8a:23:b4:13:8e:0b:
         23:ae:2b:54:41:2e:c6:af:12:0c:24:8e:d1:13:6a:0c:bd:90:
         cc:81:b8:f3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:05 2026 by rpki-client