Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
File:                     A7B64E90EA7311EF83DF9312C4F9AE02.roa (raw, json)
Hash identifier:          kAGTtiStnHMpbONE8q36czkYvOAd/yxjeZDFDMyjrzg=
Subject key identifier:   24:2D:73:FD:2D:18:8E:E2:2E:51:75:13:11:B7:EB:8A:61:FD:A9:53
Certificate issuer:       /CN=A9147BCF/serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
Certificate serial:       CF
Authority key identifier: 0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa
Signing time:             Tue 17 Mar 2026 05:43:27 +0000
ROA not before:           Tue 17 Mar 2026 05:43:27 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     131476
IP address blocks:        163.61.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl
                          rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:15:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147BCF, serialNumber=0C8559D233DBFBAFBD1032229985DF3DF91348FC
        Validity
            Not Before: Mar 17 05:43:27 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b8e9fe-71ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:4e:42:da:65:c7:af:b3:64:98:37:b0:29:
                    2b:2b:cd:e0:88:bf:26:d1:17:d2:b9:75:c9:21:ca:
                    4c:4b:18:d8:0e:66:f9:9d:30:9e:a0:79:6e:3e:36:
                    a6:aa:67:dd:e4:d1:7d:88:ef:39:c2:fd:65:c7:d3:
                    3b:bb:bf:4c:6a:61:e0:63:f2:f4:e3:a9:7c:52:d7:
                    41:c1:43:d7:c7:ad:50:9b:b7:d8:61:79:63:e0:f0:
                    ab:5c:40:10:a0:da:d3:e5:98:1e:5a:e0:2a:a9:78:
                    c7:e3:31:35:f1:69:92:97:84:70:0b:94:a6:00:23:
                    cc:f6:4f:81:fc:fa:e0:46:37:33:8e:7b:ae:d3:bb:
                    74:21:28:13:d7:be:ee:5c:6e:6a:be:bf:0c:14:bb:
                    ee:86:0d:22:19:a0:f1:41:45:58:4a:73:e7:23:e3:
                    fa:30:8a:09:4a:e6:44:6d:01:15:df:24:a3:c6:7b:
                    ac:8b:ce:80:b6:bb:9b:92:47:25:97:4d:f2:b9:ee:
                    37:1c:72:97:1e:aa:2d:a0:12:e6:7b:c6:85:60:04:
                    d2:61:b7:77:1a:01:21:a0:58:d8:cc:d1:30:35:2a:
                    2b:9a:50:be:2b:6c:7a:01:53:77:5d:ab:b1:25:c6:
                    74:33:b5:ba:3d:c4:ba:87:43:8a:9e:45:a8:f6:51:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:73:FD:2D:18:8E:E2:2E:51:75:13:11:B7:EB:8A:61:FD:A9:53
            X509v3 Authority Key Identifier:
                keyid:0C:85:59:D2:33:DB:FB:AF:BD:10:32:22:99:85:DF:3D:F9:13:48:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/DIVZ0jPb-6-9EDIimYXfPfkTSPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DIVZ0jPb-6-9EDIimYXfPfkTSPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147BCF/5E78B614EA7311EFAC8BC911C4F9AE02/A7B64E90EA7311EF83DF9312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:97:ad:a4:c5:1c:26:76:43:c0:5c:8a:9b:2e:4e:a5:43:8d:
         e3:47:2f:f8:70:be:23:d2:f4:50:cd:12:dc:62:9c:d5:eb:07:
         84:29:b0:a7:d1:29:13:ab:9b:93:99:f5:87:33:4a:7a:84:b6:
         e4:5b:48:18:0e:bf:17:28:0e:5c:68:6d:71:f1:2b:3b:4a:2a:
         85:ad:21:88:13:b2:f1:ba:c8:7c:89:17:97:30:0e:47:e6:84:
         19:89:3b:81:c8:f1:47:e3:9b:1c:70:85:65:a9:76:aa:83:9f:
         48:84:b2:f7:9a:06:7a:75:d7:0a:0e:9c:fb:47:c3:58:b0:39:
         1b:a4:78:e7:8a:d6:1f:f6:7c:c7:51:7e:7f:ea:f7:83:a8:65:
         be:3a:43:a2:e4:d7:db:87:3f:3c:db:5e:bd:bd:df:c8:ae:4a:
         10:8f:03:68:6c:85:37:93:25:ba:b8:f2:7e:cb:a4:62:0b:cc:
         eb:e4:27:63:45:ee:7f:b3:e7:89:80:73:35:64:e8:3c:b6:42:
         9c:47:57:69:e2:05:cc:34:6d:86:83:80:c1:c2:82:d7:9a:97:
         fa:5f:5d:9e:0f:f5:10:6a:12:28:cb:53:ce:6d:25:58:90:f2:
         eb:e4:7b:65:67:8e:cc:7c:c5:6b:18:a6:8d:cf:01:10:20:69:
         00:a3:2f:b6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDdCQ0YxMTAvBgNVBAUTKDBDODU1OUQyMzNEQkZCQUZCRDEwMzIyMjk5ODVERjNE
RjkxMzQ4RkMwHhcNMjYwMzE3MDU0MzI3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWI4ZTlmZS03MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqgVOQtplx6+zZJg3sCkrK83giL8m0RfSuXXJIcpMSxjYDmb5nTCeoHluPjam
qmfd5NF9iO85wv1lx9M7u79MamHgY/L046l8UtdBwUPXx61Qm7fYYXlj4PCrXEAQ
oNrT5ZgeWuAqqXjH4zE18WmSl4RwC5SmACPM9k+B/PrgRjczjnuu07t0ISgT177u
XG5qvr8MFLvuhg0iGaDxQUVYSnPnI+P6MIoJSuZEbQEV3ySjxnusi86Atrubkkcl
l03yue43HHKXHqotoBLme8aFYATSYbd3GgEhoFjYzNEwNSormlC+K2x6AVN3Xaux
JcZ0M7W6PcS6h0OKnkWo9lE3+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCQtc/0t
GI7iLlF1ExG364ph/alTMB8GA1UdIwQYMBaAFAyFWdIz2/uvvRAyIpmF3z35E0j8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0N0JDRi81RTc4QjYxNEVB
NzMxMUVGQUM4QkM5MTFDNEY5QUUwMi9ESVZaMGpQYi02LTlFRElpbVlYZlBma1RT
UHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RJVlowalBiLTYtOUVESWltWVhmUGZrVFNQdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDdCQ0YvNUU3OEI2MTRFQTczMTFFRkFDOEJDOTExQzRGOUFFMDIvQTdCNjRFOTBF
QTczMTFFRjgzREY5MzEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoz1UMA0GCSqGSIb3DQEBCwUAA4IBAQAml62kxRwmdkPAXIqbLk6l
Q43jRy/4cL4j0vRQzRLcYpzV6weEKbCn0SkTq5uTmfWHM0p6hLbkW0gYDr8XKA5c
aG1x8Ss7SiqFrSGIE7Lxush8iReXMA5H5oQZiTuByPFH45sccIVlqXaqg59IhLL3
mgZ6ddcKDpz7R8NYsDkbpHjnitYf9nzHUX5/6veDqGW+OkOi5Nfbhz882169vd/I
rkoQjwNobIU3kyW6uPJ+y6RiC8zr5CdjRe5/s+eJgHM1ZOg8tkKcR1dp4gXMNG2G
g4DBwoLXmpf6X12eD/UQahIoy1PObSVYkPLr5HtlZ47MfMVrGKaNzwEQIGkAoy+2
-----END CERTIFICATE-----
Generated at Fri Mar 27 11:09:05 2026 by rpki-client