Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/37783B4E20CC11F18B0BA4B30A3D8C67.roa
File:                     37783B4E20CC11F18B0BA4B30A3D8C67.roa (raw, json)
Hash identifier:          17iEav5VXfyebIk1Lzsm3/eDHbY8rmkP6Y6HY3kn4T8=
Subject key identifier:   C8:E1:F5:39:07:03:67:D2:04:3E:14:7D:5B:E2:8C:AD:55:A0:24:5F
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       CF
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/37783B4E20CC11F18B0BA4B30A3D8C67.roa
Signing time:             Mon 16 Mar 2026 00:08:10 +0000
ROA not before:           Mon 16 Mar 2026 00:08:10 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153634
IP address blocks:        163.61.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Mar 16 00:08:10 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69b749ea-f0b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:e3:99:f0:4a:b9:09:5d:c4:e2:ec:6d:7b:
                    05:3f:f7:17:ef:be:df:b6:0b:bd:c7:52:5c:5b:49:
                    c0:ee:93:42:c7:94:97:24:30:7d:29:dd:c8:ca:fd:
                    fd:a1:6f:b6:b2:6c:79:fe:e7:d4:8c:81:8a:2c:f8:
                    a6:b7:db:7f:67:60:27:fe:a9:c0:ad:2a:ac:14:53:
                    b9:d0:80:e1:d7:ed:eb:1b:26:d0:c0:5b:70:e6:d0:
                    88:85:18:ce:34:97:08:f8:a5:bf:9c:13:4e:9a:40:
                    ca:c3:a0:9b:44:3a:e0:0c:c4:bd:25:43:13:30:79:
                    e2:da:79:e4:1c:8b:cd:f5:a4:a3:de:e8:b6:64:79:
                    db:ff:0b:56:ba:b4:8c:d6:a9:04:a4:a9:0e:32:64:
                    f2:12:5a:46:30:41:3b:51:02:f4:f5:b0:9b:28:b1:
                    a5:77:f0:b5:f6:62:8e:07:be:77:52:fb:26:1d:d1:
                    26:5e:d9:8a:80:bb:ad:92:b2:11:67:89:89:70:bf:
                    48:84:df:32:1f:d0:52:d9:52:4c:7c:eb:eb:bc:7e:
                    13:50:17:f2:94:b7:0b:f3:fd:ef:79:39:05:7b:d3:
                    84:c9:d6:ae:dd:9a:35:7d:fa:d5:9c:4c:fd:e2:85:
                    77:d2:24:f5:5d:98:cd:d3:30:12:20:37:e6:2d:1e:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E1:F5:39:07:03:67:D2:04:3E:14:7D:5B:E2:8C:AD:55:A0:24:5F
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/37783B4E20CC11F18B0BA4B30A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:24:a9:75:33:ce:4c:47:30:dd:66:7b:cf:52:4f:93:87:54:
         41:bb:6e:31:7c:b5:af:09:95:a9:c2:1f:7f:be:e7:7e:8c:09:
         8c:33:2a:95:86:b0:ae:6c:b8:19:cc:be:a7:9a:15:4f:bd:f5:
         4f:11:18:1f:a7:3b:18:1e:94:f6:dd:68:f2:ab:f3:41:1d:3e:
         d0:0b:d6:a4:95:29:ef:97:e9:07:87:76:a5:99:db:27:72:0e:
         78:8d:d1:15:80:bb:8f:a6:17:b3:60:5b:db:50:1c:04:29:8e:
         8f:c8:07:81:cd:2a:a3:52:cc:bc:ed:3b:66:45:97:b6:0c:06:
         05:63:ce:44:a0:bd:98:ad:04:03:10:12:e3:4c:c5:ac:5d:3a:
         a7:ed:65:77:1c:8b:d0:29:21:04:8e:6c:c1:fa:80:df:7a:e2:
         d5:cc:8c:b2:1d:d4:34:dd:a7:9d:cc:18:14:e6:d9:31:43:54:
         41:3a:b4:79:0a:85:c5:cd:e7:c0:95:40:e7:94:e9:8b:bd:d9:
         4f:da:29:dc:ce:d4:70:f0:a3:7b:c6:d4:f2:20:e0:90:4e:1f:
         8f:93:d6:b6:95:86:71:7b:f0:78:d6:cd:db:1d:ca:61:c6:65:
         da:76:63:a5:27:48:81:fe:c7:22:9c:4a:3e:7d:b2:e6:f1:da:
         a9:1f:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:46:45 2026 by rpki-client