Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
File:                     61DBE422A88B11EFAF507987C4F9AE02.roa (raw, json)
Hash identifier:          dsx+NKPNaeGu5VjwmCjHB3rJ2l0LHRp9QzffSXcc09g=
Subject key identifier:   DD:0D:B9:73:4C:A3:3D:C0:E8:88:18:49:92:9A:55:8F:41:96:6D:0B
Certificate issuer:       /CN=A91D4A16/serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
Certificate serial:       022F
Authority key identifier: B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:12:32 +0000
ROA not before:           Fri 03 Oct 2025 02:58:55 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     24316
IP address blocks:        203.30.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl
                          rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 02:07:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 559 (0x22f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4A16, serialNumber=B13832FCA4934496236AC3894998C3DD513D7C09
        Validity
            Not Before: Oct  3 02:58:55 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a41110-be05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:14:07:61:bd:02:46:a9:ae:25:eb:d7:5c:31:
                    d6:8f:e0:07:c7:fc:31:da:cb:1f:91:bc:73:5d:3b:
                    aa:bc:c6:ba:fc:a7:df:f4:2c:af:52:e4:85:5b:ce:
                    c0:57:81:cf:96:d7:b4:bb:6f:a6:be:7b:28:c9:75:
                    2d:c4:c0:e3:af:60:11:8d:f0:81:60:30:97:08:f8:
                    3b:28:4a:d8:d1:58:4a:df:a1:3c:24:ca:36:9c:e7:
                    47:40:cc:a7:26:d8:a2:12:5b:b5:2f:43:8f:11:71:
                    5c:5d:56:ea:a3:5b:33:46:84:ef:e3:7a:75:54:09:
                    93:58:93:df:ac:ab:09:7c:c1:da:3d:d1:44:04:16:
                    c4:9c:54:dd:42:b5:39:49:80:c8:08:6f:88:f0:38:
                    4b:53:71:14:0a:0f:ca:81:51:a7:06:b2:d9:da:5a:
                    bd:d3:28:14:bf:03:ec:ab:a9:1c:d9:17:3f:fd:67:
                    ce:f7:d2:fc:34:04:04:da:20:29:83:d9:6e:08:69:
                    e0:33:95:9b:89:66:c5:9b:d4:a5:a8:c5:96:55:3a:
                    76:6e:0f:b2:bf:9f:42:94:a6:a0:c2:7b:31:3d:5f:
                    f0:49:c7:b0:59:33:ad:8c:89:9e:63:ad:2e:7f:9b:
                    52:b4:54:3d:23:c6:43:f4:46:fc:66:8f:44:81:9f:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0D:B9:73:4C:A3:3D:C0:E8:88:18:49:92:9A:55:8F:41:96:6D:0B
            X509v3 Authority Key Identifier:
                keyid:B1:38:32:FC:A4:93:44:96:23:6A:C3:89:49:98:C3:DD:51:3D:7C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/sTgy_KSTRJYjasOJSZjD3VE9fAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sTgy_KSTRJYjasOJSZjD3VE9fAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A16/BAE7EFFECC5311ED81F4C515C4F9AE02/61DBE422A88B11EFAF507987C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:be:40:d3:5d:62:ed:2c:b0:31:aa:29:8f:35:2b:7e:fc:5e:
         f3:77:17:9b:95:41:39:c8:46:a4:a7:0f:39:6b:5e:36:65:fa:
         a6:5f:20:86:7d:51:f4:18:7c:65:61:ab:a7:38:5c:94:26:d0:
         86:fb:de:21:6a:3f:26:9f:7b:cc:c8:e0:50:56:0b:98:92:2f:
         d0:28:b7:e1:a6:48:2a:62:2e:bd:fb:00:30:f4:07:63:4d:4b:
         15:13:b2:29:b2:ff:c1:1e:e3:09:7c:f9:0d:51:88:b9:aa:6c:
         97:85:96:2a:0b:43:0e:07:f6:0b:ec:29:ae:33:ae:01:5a:fb:
         cb:af:f8:ec:e7:41:6b:eb:33:84:fc:35:ad:e4:0a:39:53:99:
         a1:88:0d:ff:ba:04:2f:3e:bd:3e:d5:38:26:c4:b9:c2:a6:36:
         3b:e6:08:85:fa:19:c0:50:59:44:4e:93:51:82:83:8f:0e:6d:
         58:b0:22:1a:19:67:41:c2:52:70:f2:a7:3b:2d:1a:59:e2:4c:
         6a:84:5a:95:f3:af:00:d9:54:fc:63:10:1b:10:d8:3d:49:20:
         da:6f:f1:d4:31:17:06:ff:8f:97:c1:9a:95:43:74:d3:cd:ca:
         33:64:c5:a7:52:1a:6f:85:f5:68:80:28:9a:26:f8:b4:31:2a:
         36:5b:0e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:24:53 2026 by rpki-client