Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa
File:                     9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa (raw, json)
Hash identifier:          E47slZkZUSxL3blqpxWmejtiKRk74l+RdUUIQ3bo/bo=
Subject key identifier:   75:BC:E4:1A:78:9B:D4:04:C0:23:A1:8C:50:59:A9:2A:AF:54:9A:8B
Certificate issuer:       /CN=A912E31D/serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999
Certificate serial:       C9
Authority key identifier: E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa
Signing time:             Mon 09 Mar 2026 06:37:44 +0000
ROA not before:           Mon 09 Mar 2026 06:37:44 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153610
IP address blocks:        163.61.156.0/23 maxlen: 23
                          163.61.156.0/24 maxlen: 24
                          163.61.157.0/24 maxlen: 24
                          2001:df5:19c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl
                          rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E31D, serialNumber=E628220F3FD00F417B9972E1D4A0F641696E7999
        Validity
            Not Before: Mar  9 06:37:44 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ae6ab8-7b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:f6:09:11:59:7f:a7:fc:ae:47:21:b8:76:
                    87:a5:0c:7c:ac:44:ad:b9:21:a4:0e:c5:8d:72:06:
                    13:59:f0:bb:41:dc:6f:b3:6c:6a:1f:41:79:ee:a9:
                    52:13:da:11:63:39:d8:29:ad:0b:12:ba:02:d7:cc:
                    16:f2:8c:56:2d:c9:1b:ec:de:18:26:8c:32:3f:04:
                    af:67:1d:62:ff:9c:67:00:7c:98:d9:d8:fb:85:86:
                    90:fb:92:d7:1c:d9:7b:82:ff:b3:ff:90:87:a7:21:
                    32:f3:eb:f0:61:35:31:5a:57:76:68:83:d5:fa:17:
                    7c:84:56:36:bc:f0:eb:97:59:99:2a:62:6b:14:cf:
                    ff:ac:4e:e1:e4:0f:88:f9:0a:76:66:06:26:b0:08:
                    78:ba:f8:f7:f9:26:56:12:e2:d9:9f:36:81:6b:b0:
                    c1:a8:3e:b6:a5:2f:f0:be:cc:c5:aa:7e:45:a7:f9:
                    6a:f8:e3:7b:a9:01:2a:b6:b6:75:cc:d8:2c:0b:49:
                    51:3e:f6:09:be:c9:69:a1:fc:0d:a9:4e:8e:b2:75:
                    da:a4:45:bd:be:c1:95:68:4f:35:5d:64:f0:ab:a3:
                    6a:6f:8c:77:af:2a:57:e8:f6:df:f9:37:fc:c4:ea:
                    8f:df:5c:61:4f:01:3b:04:64:bb:c8:93:09:20:33:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BC:E4:1A:78:9B:D4:04:C0:23:A1:8C:50:59:A9:2A:AF:54:9A:8B
            X509v3 Authority Key Identifier:
                keyid:E6:28:22:0F:3F:D0:0F:41:7B:99:72:E1:D4:A0:F6:41:69:6E:79:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/5igiDz_QD0F7mXLh1KD2QWlueZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5igiDz_QD0F7mXLh1KD2QWlueZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E31D/2CF6B8B0F9C911EFA54F762AC4F9AE02/9CDF0C0CFA4311EFAEC6A81AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.156.0/23
                IPv6:
                  2001:df5:19c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:eb:e9:4f:2c:c6:0f:80:1d:10:1d:04:2c:3a:01:b2:40:91:
         cf:0b:ba:ca:cb:13:9a:8d:3f:79:f3:15:77:e8:00:73:19:32:
         90:0a:31:7b:ff:a5:20:a7:66:49:9a:9b:36:fe:e1:4c:c3:30:
         7c:52:6b:d2:5a:f9:87:18:04:18:ef:06:c9:67:d7:30:fb:94:
         17:1e:12:92:7d:bc:cd:11:72:7a:a1:14:7f:96:43:b0:20:f9:
         71:39:6e:75:c0:3c:ec:9b:61:ee:b4:e5:50:92:33:48:cd:d5:
         b4:93:00:fd:e5:6a:a7:4d:25:80:a2:cc:09:b7:94:93:2f:c9:
         c6:66:26:e6:23:e8:25:bb:f7:de:be:d2:ef:7f:c0:d1:0d:00:
         19:84:b3:eb:57:f8:aa:35:41:06:e5:99:ce:f8:24:33:51:29:
         6e:f0:07:f9:94:f5:20:dc:bd:20:1a:99:57:73:ce:39:6c:07:
         81:30:e7:a0:cc:06:0e:9c:b9:04:08:0a:41:83:d9:a0:59:1c:
         49:58:d8:73:5d:2f:a5:86:3c:2c:1e:91:c1:a5:60:5f:8c:a3:
         29:f0:0f:c9:61:08:aa:3e:94:1c:91:bd:0d:59:7d:f4:bc:ea:
         5b:0c:19:e0:37:93:c1:b0:7d:97:0b:0f:7d:ee:b9:cb:93:00:
         c1:6a:87:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:31 2026 by rpki-client