Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E69748DC6DF611F1B777025960A30FBC.roa
File:                     E69748DC6DF611F1B777025960A30FBC.roa (raw, json)
Hash identifier:          C//rKa9yA9fyrED7Ux20OUbSGtse50S9A2ZwpZcPsE4=
Subject key identifier:   A0:2A:12:B1:38:AB:F4:AC:02:23:09:5A:68:3E:52:18:B7:A2:B0:72
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3D14
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E69748DC6DF611F1B777025960A30FBC.roa
Signing time:             Mon 22 Jun 2026 04:57:42 +0000
ROA not before:           Mon 22 Jun 2026 04:57:42 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     3949
IP address blocks:        61.251.110.88/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 Jul 2026 00:14:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15636 (0x3d14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jun 22 04:57:42 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a38c0c6-db05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2a:77:1c:1a:60:3d:a4:cc:9d:a5:7b:95:5c:
                    2e:85:52:67:cd:ba:77:32:f3:c1:7f:a5:de:36:56:
                    05:57:b6:03:23:f6:be:59:e3:e3:17:08:69:3c:cd:
                    87:5c:86:48:e4:15:b9:2f:94:08:52:db:ae:36:86:
                    8e:68:65:b5:12:49:5e:03:aa:b0:70:ee:08:a0:21:
                    d9:a5:0e:4c:80:3e:46:09:ee:a9:24:f5:fe:bc:99:
                    3a:43:33:fc:02:d1:6e:cd:53:6e:4a:e1:24:27:49:
                    ea:83:4a:93:18:56:f4:91:d3:f5:a8:bd:74:35:c7:
                    8d:96:95:be:cd:61:38:63:32:80:53:56:70:7c:ec:
                    d9:b5:60:83:29:b7:47:02:e3:2d:e2:39:42:bb:b5:
                    53:6f:43:c3:ec:e6:ca:04:28:00:76:f1:00:5d:8e:
                    e4:51:ea:6f:61:cf:d1:be:73:fe:18:d6:b4:41:77:
                    d3:99:98:36:97:50:4b:10:eb:98:b8:6e:3f:a2:e3:
                    8c:ba:38:0c:09:66:5b:92:43:f4:d0:4b:7c:fb:8f:
                    35:8d:d0:e8:b9:08:3d:5b:a9:fc:bf:75:1f:01:ae:
                    e8:97:7c:d8:48:2c:f6:24:e4:dc:3a:d7:53:76:06:
                    51:0e:81:52:ed:8e:8c:5f:25:95:5b:f2:32:b2:3c:
                    bc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2A:12:B1:38:AB:F4:AC:02:23:09:5A:68:3E:52:18:B7:A2:B0:72
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/E69748DC6DF611F1B777025960A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.251.110.88/29

    Signature Algorithm: sha256WithRSAEncryption
         a4:18:d2:97:ef:42:0c:a6:11:6c:6d:4f:ab:5e:7b:63:20:8b:
         75:88:37:ca:46:29:d3:03:af:fb:eb:00:ec:33:f2:b5:e5:f5:
         28:91:22:44:86:3f:28:3c:53:af:8a:08:7e:c6:41:62:2b:52:
         59:b8:f6:76:ec:6f:31:d1:31:6a:b2:41:ed:d2:00:91:35:f2:
         d0:ce:f1:fd:3d:06:1d:a7:d7:ad:96:a7:36:94:62:b4:e5:ca:
         45:02:1d:6c:51:2f:f1:80:ce:f5:da:99:a3:fe:78:d9:36:58:
         96:1f:3a:20:8f:0c:8d:24:fe:4d:87:b6:ae:75:3c:0c:d2:88:
         2e:48:02:61:52:70:57:77:2f:58:31:76:05:1f:fc:76:a8:c8:
         14:39:87:ed:3a:38:ee:8c:7d:9b:24:20:29:18:91:d4:3a:b4:
         73:d0:0b:e3:bc:01:23:27:7f:f0:b0:0a:12:5f:ac:ec:95:e2:
         3f:14:ad:c8:b3:b4:95:b1:58:ec:3e:13:12:96:c7:75:c5:89:
         ec:0a:df:b5:b2:3e:d1:fa:e9:9c:fb:03:35:ea:38:35:fb:b9:
         4d:d8:e5:b7:27:23:e6:a5:da:e9:88:28:88:d6:5f:07:01:d3:
         d5:d3:db:75:0a:76:19:44:7b:ab:ad:e8:8c:b3:5f:16:5e:70:
         25:24:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:34:42 2026 by rpki-client