Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/563F3D581F3C11F09F3C7F40C4F9AE02.roa
File:                     563F3D581F3C11F09F3C7F40C4F9AE02.roa (raw, json)
Hash identifier:          jqaS9O87XNAGjnOYKmiPW3sMHJfZOBNM9M+7d9FRgko=
Subject key identifier:   5D:6C:26:90:E1:B1:FD:5F:5D:B8:26:AE:B9:5E:2A:F9:6B:C7:07:FD
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       EC
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/563F3D581F3C11F09F3C7F40C4F9AE02.roa
Signing time:             Sat 21 Mar 2026 06:43:09 +0000
ROA not before:           Sat 21 Mar 2026 06:43:09 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        163.61.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Mar 21 06:43:09 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be3dfd-859e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c7:b6:0c:e7:fd:d2:b6:58:41:b5:94:37:53:
                    d4:ab:0c:14:bb:77:41:79:bf:d2:cb:8b:7a:fc:31:
                    bb:7a:11:7a:8b:6a:f2:d0:b1:f5:8e:9d:08:2f:3f:
                    d6:49:4a:5f:e0:b2:0d:27:79:63:0b:3d:e0:9c:d6:
                    3e:c8:2b:50:15:e4:bb:51:25:d4:03:36:ae:d6:a2:
                    6c:8a:c9:ff:18:3a:19:19:c4:30:ba:61:f4:ed:56:
                    52:35:d4:cc:dc:e3:cd:a0:db:35:92:49:34:ea:9b:
                    7d:38:2f:c5:99:9c:8f:c0:05:71:c9:2a:ee:70:32:
                    0a:ed:26:0f:b7:fb:3d:d5:d2:7d:03:d2:11:f9:93:
                    d6:8a:ef:52:11:78:2b:f1:db:e1:b2:4a:35:06:4e:
                    bc:09:41:3d:c0:12:5b:38:63:1b:ff:8d:62:19:2e:
                    f1:4a:99:58:62:7b:1d:ff:b1:e0:db:be:fa:27:32:
                    4a:40:7c:a4:e0:70:c9:e6:81:50:98:02:97:63:d4:
                    97:33:b2:55:f7:73:c4:97:7a:47:5b:6c:f5:ec:28:
                    41:80:69:e8:64:36:38:07:f3:46:66:21:7b:bb:92:
                    b7:6f:78:77:75:42:26:7b:60:48:f7:83:b3:15:4f:
                    7c:b8:ba:0b:1c:81:ed:45:33:0b:a9:a0:15:ea:41:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:6C:26:90:E1:B1:FD:5F:5D:B8:26:AE:B9:5E:2A:F9:6B:C7:07:FD
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/563F3D581F3C11F09F3C7F40C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:70:5b:54:f2:70:c4:1e:f4:13:3e:cd:44:06:0e:53:85:c6:
         09:a2:41:43:e8:ba:a6:ae:82:5a:57:c1:c2:06:1f:d5:ac:fb:
         70:4b:fe:9c:2a:fd:d0:3f:8e:70:5e:91:c4:b9:f3:27:b7:58:
         3c:ee:24:12:67:87:0b:fb:c2:2d:54:5f:02:b8:b4:73:9e:53:
         0b:8d:74:36:dd:d9:68:39:b1:c0:fc:76:ef:13:a7:9b:6d:94:
         10:7e:3e:c7:82:d7:32:4b:5b:de:f5:89:b7:db:ef:a4:6f:65:
         ce:ac:15:b7:ac:c0:71:89:39:9a:be:00:f0:51:83:09:f8:15:
         6f:7d:df:e5:09:4b:ea:e8:f6:5f:43:0c:f0:b9:02:20:32:a9:
         42:d8:d0:59:b7:4c:89:2b:18:71:b2:83:e4:b7:cd:8b:15:e7:
         ba:44:05:eb:89:1f:a6:75:6b:7a:77:34:55:69:0f:f3:ec:41:
         0d:18:a9:49:1a:8c:57:6d:87:b0:d8:d0:28:19:86:be:75:74:
         4f:a7:a2:0b:34:3a:3b:d4:75:36:6a:77:a2:d5:51:74:c0:20:
         3b:34:78:ab:43:d1:de:8e:4e:ee:9b:f3:4b:55:3d:df:2f:73:
         12:f1:b0:91:53:f2:f0:5b:5d:25:c9:f2:9d:b7:61:dc:ec:43:
         ad:28:29:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:20:53 2026 by rpki-client