Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa
File:                     3F9C6E6619B811EF8628ED1FC4F9AE02.roa (raw, json)
Hash identifier:          X/JD5F6JzagP4jGvbC7v5VPWwdxhP5SRxw6JFMbPzxU=
Subject key identifier:   9F:B8:D1:1C:3B:FE:AF:0B:42:62:D1:EC:79:11:8E:70:98:19:EA:92
Certificate issuer:       /CN=A91A4475/serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
Certificate serial:       015F
Authority key identifier: 41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:44:27 +0000
ROA not before:           Tue 03 Mar 2026 05:44:27 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152647
IP address blocks:        202.61.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl
                          rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:13:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4475, serialNumber=41043DAC189E22FF7F5AED8107A3232F4190AF3E
        Validity
            Not Before: Mar  3 05:44:27 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a6753b-5b89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:c9:bc:3f:9d:57:1d:0e:a7:94:60:69:fc:
                    d4:6f:a6:f8:31:9d:c3:c1:45:24:d0:b0:b2:a7:c7:
                    ce:13:fe:ce:3f:2a:53:7d:b2:81:e4:ce:0c:6b:4f:
                    51:d4:0c:75:75:0e:05:92:e6:4c:50:b1:af:e9:1d:
                    98:c8:d1:80:15:bb:6a:f4:eb:d3:71:c7:f0:da:14:
                    dc:81:e6:77:8e:00:59:e9:c9:2b:ee:e6:61:9c:69:
                    fd:2d:1c:44:b9:ab:a9:ad:94:63:76:70:bd:f7:c8:
                    fd:5e:83:3e:b7:98:e4:28:40:c6:3b:43:0c:aa:38:
                    8d:4a:51:dd:f7:cc:c2:98:bc:78:07:e8:c3:dc:ca:
                    98:70:c6:6d:ae:d6:d9:39:f7:0c:32:14:a8:ef:45:
                    81:ae:5a:ad:7d:46:62:59:7b:97:a2:f6:5c:ac:e2:
                    a8:18:97:34:e7:82:11:95:75:3e:16:e8:a5:7c:04:
                    f3:a4:93:02:2d:d9:7c:24:64:b4:52:9e:64:f7:8a:
                    54:b3:32:33:0d:e3:56:c0:d8:22:6b:32:00:71:72:
                    28:79:12:b0:de:0c:6b:6d:a2:49:60:a2:d4:93:37:
                    43:66:16:73:93:37:bf:22:96:25:55:84:d8:10:28:
                    5d:54:30:8f:7b:03:db:cf:11:2b:74:2b:29:07:2d:
                    22:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B8:D1:1C:3B:FE:AF:0B:42:62:D1:EC:79:11:8E:70:98:19:EA:92
            X509v3 Authority Key Identifier:
                keyid:41:04:3D:AC:18:9E:22:FF:7F:5A:ED:81:07:A3:23:2F:41:90:AF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QQQ9rBieIv9_Wu2BB6MjL0GQrz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4475/832470DC18CF11EF8E3F2457C4F9AE02/3F9C6E6619B811EF8628ED1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:84:10:e2:89:a9:3a:72:fb:0c:64:87:88:7b:72:fc:5a:ac:
         07:2d:64:6d:ac:32:2c:ac:a3:7b:10:4b:82:87:b2:93:f8:8b:
         59:8f:7c:fa:f1:77:89:32:36:49:38:7f:97:b4:78:21:5d:fc:
         a4:fb:4b:cc:66:71:22:6a:fb:c9:a0:40:d6:0b:9d:98:56:01:
         d0:b2:a8:67:8f:0e:ed:b0:89:4c:93:e1:0d:2f:c0:42:a1:c8:
         f0:7c:cb:5b:bf:66:2c:54:33:91:8a:19:3b:88:9f:36:d6:1b:
         c3:05:0b:3d:54:34:31:70:4b:a0:48:a5:aa:38:01:bc:77:d9:
         af:e9:05:94:0a:51:27:cc:44:18:c6:9f:5d:96:ff:4f:08:75:
         2a:c6:77:5e:16:72:41:dc:30:46:67:bd:af:b1:13:ed:1e:e3:
         c3:5e:26:03:79:0a:a7:f1:40:84:dd:99:c2:6a:6f:b0:a1:57:
         48:d2:55:81:f0:85:22:61:78:a7:d3:1f:40:e1:8d:85:16:79:
         85:bf:ca:dc:c3:a5:ee:fa:52:79:bc:46:5c:e4:15:cd:c2:2f:
         15:21:1d:fd:18:a9:8c:72:72:97:9a:f2:eb:4a:13:1e:b9:5b:
         d0:b7:aa:20:82:88:22:fd:13:4e:97:6a:8e:4f:08:a4:8b:2a:
         68:de:54:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:26:26 2026 by rpki-client