Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/EF65F3A8B62311F1A9DCAC3C5E11F970.roa
File:                     EF65F3A8B62311F1A9DCAC3C5E11F970.roa (raw, json)
Hash identifier:          nSzU8Vv3wztSYNeyqnflstfGD/R1ZaNKAcQMOFMjR5w=
Subject key identifier:   73:4C:1B:F4:D5:0C:86:14:C8:3C:4A:61:EC:3B:2F:56:F6:16:0F:85
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       0138
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/EF65F3A8B62311F1A9DCAC3C5E11F970.roa
Signing time:             Tue 22 Sep 2026 01:21:28 +0000
ROA not before:           Tue 22 Sep 2026 01:21:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     23470
IP address blocks:        163.61.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 05:31:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Sep 22 01:21:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6ab1d818-ddde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:dc:5a:59:dc:5d:71:13:06:a6:2e:35:f3:
                    73:f9:99:b7:bb:b2:b5:78:c5:d9:10:ed:30:a4:22:
                    18:69:c2:2b:bf:eb:4b:0f:35:e5:5f:65:ca:9f:6d:
                    b3:71:95:38:93:c1:93:03:16:fe:d2:a8:94:0c:c2:
                    59:4a:2b:b7:95:a1:db:98:37:97:e1:8b:f6:62:1d:
                    8e:72:85:29:dd:db:fd:02:68:5e:27:13:0d:c6:2a:
                    67:56:a9:6b:22:45:93:7b:50:57:58:62:a5:b1:9d:
                    99:2a:11:20:ec:ed:d8:1f:62:20:5c:2b:5d:cd:6c:
                    ca:11:f9:45:b7:a9:01:d3:a3:3a:5b:c5:f0:5a:fa:
                    7c:8f:84:91:65:ba:22:72:20:b9:7a:5a:f2:c4:5e:
                    cc:07:2b:49:fc:97:c5:f2:0c:8c:9a:29:83:8f:a3:
                    1e:ce:a5:54:f4:3f:e7:36:3b:7d:28:2f:6b:8a:fa:
                    fe:37:bb:ca:bc:98:74:55:68:8e:34:01:ea:c5:15:
                    58:1c:81:9a:11:b2:b6:dc:0a:3f:ef:d4:e6:16:19:
                    06:ea:b5:ea:f0:07:2e:36:be:47:40:8d:1b:dc:93:
                    31:87:33:73:18:f1:e3:a0:30:1c:a0:7b:43:6c:cb:
                    f2:b4:81:76:49:8b:34:bb:68:ae:86:00:03:18:5d:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:1B:F4:D5:0C:86:14:C8:3C:4A:61:EC:3B:2F:56:F6:16:0F:85
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/EF65F3A8B62311F1A9DCAC3C5E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:6e:c2:0e:78:b2:f9:12:ca:b3:07:99:e6:4d:e7:4a:f2:1e:
         9d:51:81:0c:1f:c0:c5:05:5f:68:a6:47:fd:12:ab:31:1e:62:
         08:9c:45:20:15:fc:de:f8:57:f4:21:7f:f7:b3:3f:e6:22:ca:
         3c:91:d0:25:55:f7:51:a9:15:48:bf:c2:2a:30:41:f9:b2:6f:
         81:76:27:c4:e2:4e:6a:85:b8:ba:a3:9b:57:e2:44:f7:19:46:
         53:18:4d:c3:b1:ae:e8:58:1c:b3:88:38:91:10:55:f0:95:c7:
         4f:f5:33:6b:11:23:6f:0b:8e:17:23:73:79:49:1b:db:08:d1:
         14:cf:08:3d:cb:cb:94:6f:11:7e:55:bd:41:24:b6:90:87:95:
         4b:e8:c8:01:17:fc:27:35:ee:98:1f:14:c8:68:5e:3a:a9:b6:
         0b:e4:4c:d4:6b:18:9a:13:8a:d2:d6:84:86:8b:2b:3e:7e:8e:
         cd:d5:87:57:f4:de:62:6a:c2:05:40:f5:a7:f3:ff:fa:9d:5a:
         42:c7:8e:a8:f4:0f:ce:f7:28:2e:a0:40:7e:49:67:6c:5d:8b:
         39:85:83:87:e6:6e:bd:4b:c8:a0:af:2a:d9:e4:bd:d8:21:71:
         ae:0a:d7:0a:90:a7:8d:b3:f7:67:bb:63:a1:4a:10:3c:dc:d8:
         f1:94:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:12 2026 by rpki-client