Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
File:                     30376074EF8811EFABCDFD34C4F9AE02.roa (raw, json)
Hash identifier:          VTSafZ+7u6OX5754WOMalwu0CW4B42L0MtvZncW5Mw0=
Subject key identifier:   93:8B:AB:AA:1E:D1:79:1B:C3:AD:A5:42:90:74:FD:D5:E4:98:06:8E
Certificate issuer:       /CN=A912CA2D/serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
Certificate serial:       E3
Authority key identifier: 2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 06:43:42 +0000
ROA not before:           Tue 03 Mar 2026 06:43:41 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     9664
IP address blocks:        163.61.198.0/23 maxlen: 24
                          2401:f1e0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl
                          rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:59:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CA2D, serialNumber=2D5B9B954CD173B73FF087DEA61879E48051D23B
        Validity
            Not Before: Mar  3 06:43:41 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a6831d-9553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c3:81:8e:01:10:e0:ac:36:c5:14:bd:d8:d0:
                    a8:43:b7:41:39:8f:d3:9c:ee:ce:85:cf:b2:28:83:
                    fa:63:ed:94:d2:56:85:c8:22:4e:96:43:4e:d8:0a:
                    ba:86:44:eb:42:95:f3:0b:1a:5f:ce:18:16:a9:23:
                    3d:b6:36:9f:b1:69:0a:67:0a:57:5c:8b:75:f3:d1:
                    f9:b3:cd:65:e5:17:6e:c9:16:a8:43:a7:2e:3c:f9:
                    ec:2d:b4:50:0c:e9:ff:29:fe:d1:22:cb:51:ac:2d:
                    fe:a4:e4:02:cf:78:52:c5:25:15:db:c2:b6:b5:b1:
                    4c:a1:b4:d8:d5:56:b3:4d:6b:12:2c:73:02:15:4a:
                    af:7f:5c:f0:f7:ce:50:6c:7e:d5:ff:c1:a9:f3:ae:
                    c6:bd:f9:e3:cf:45:67:19:29:c2:17:18:ae:a2:49:
                    87:9b:d3:5e:a2:ed:ba:b8:dd:7b:63:a4:39:61:e7:
                    15:64:24:da:5d:89:9f:23:df:a0:16:f6:b9:a5:51:
                    dd:f0:ee:4d:e8:c2:55:ef:07:e3:1b:1b:f2:d9:4c:
                    d1:a3:3c:9e:87:23:04:50:d1:c6:f0:1a:5c:53:de:
                    f7:d0:24:ce:c0:4e:df:ea:88:43:0d:a8:e7:f5:21:
                    54:73:89:25:2e:ae:c0:1c:a4:d0:b6:db:cf:fe:0c:
                    8c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8B:AB:AA:1E:D1:79:1B:C3:AD:A5:42:90:74:FD:D5:E4:98:06:8E
            X509v3 Authority Key Identifier:
                keyid:2D:5B:9B:95:4C:D1:73:B7:3F:F0:87:DE:A6:18:79:E4:80:51:D2:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/LVublUzRc7c_8Ifephh55IBR0js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVublUzRc7c_8Ifephh55IBR0js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA2D/256187F2EF8711EFA7B1C230C4F9AE02/30376074EF8811EFABCDFD34C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.198.0/23
                IPv6:
                  2401:f1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:ad:93:90:e1:0e:ab:a2:e5:07:62:06:90:69:e5:89:7f:fa:
         e6:c5:7f:e9:7d:41:3d:15:36:c0:74:85:d8:90:df:8b:cc:da:
         6e:fd:4a:b8:21:ed:5d:0e:5d:37:9a:0f:78:cb:cf:af:37:b1:
         40:1a:a2:c7:3f:0c:a2:92:20:89:b1:34:74:60:bd:e0:94:bf:
         7f:15:bb:30:a6:83:a9:41:b9:ad:e4:26:0d:73:9c:77:ef:ec:
         ef:b3:89:01:12:eb:2c:2d:39:11:db:34:2b:70:c4:b9:52:49:
         31:90:4c:f0:53:cd:bc:d5:bb:06:43:5b:12:eb:82:29:b5:b4:
         b8:bc:7c:de:3f:1c:94:50:35:76:8d:e5:24:85:0c:cb:ee:db:
         a1:65:fd:c4:b7:6c:58:91:90:8c:49:9f:71:41:6c:d4:70:ca:
         5f:55:b3:a2:f4:6a:52:98:6a:47:5d:0d:81:94:47:76:4d:6c:
         75:52:16:ca:df:b5:32:c9:31:8d:16:fd:20:eb:c9:cd:f6:74:
         99:51:6c:f2:c2:f4:93:57:6f:56:53:4b:88:d5:3e:c6:16:16:
         7d:16:93:2b:e0:19:31:2a:ee:f7:0c:4e:a1:89:8b:11:75:8e:
         0c:e1:ea:58:37:96:20:ca:fb:b1:37:4c:39:ec:57:83:15:63:
         f7:45:98:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:12 2026 by rpki-client