Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa
File:                     88978730772311EBB972032EC4F9AE02.roa (raw, json)
Hash identifier:          0elY5CKBuKEP4Gk2N4idQ0RIcUiU5mZ/koZC9fr1n3s=
Subject key identifier:   F5:22:DB:1E:D5:2F:F7:3A:D6:44:94:62:58:CC:0B:E0:EC:21:38:4F
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       389B
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 15:10:36 +0000
ROA not before:           Wed 30 Sep 2026 15:10:36 +0000
ROA not after:            Sat 30 Jan 2027 00:00:00 +0000
asID:                     135539
IP address blocks:        61.45.254.0/24 maxlen: 24
                          2401:4601:254::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 14:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14491 (0x389b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Sep 30 15:10:36 2026 GMT
            Not After : Jan 30 00:00:00 2027 GMT
        Subject: CN=6abd266c-df96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:94:ec:fb:56:0f:59:c9:32:4e:c8:a1:b7:df:
                    f7:45:25:37:88:d8:31:02:96:7f:d6:6d:7a:34:4f:
                    d6:b0:ae:1c:ab:cc:a4:b0:c2:f3:c6:cf:fc:41:23:
                    53:67:7c:d2:73:9f:ba:01:76:bb:7b:6e:1e:9e:cb:
                    71:31:2f:07:2a:49:ba:47:78:22:10:cd:2d:15:c3:
                    2c:32:5e:a4:36:f5:1e:2d:a0:c5:a1:30:63:99:d5:
                    be:5e:a4:5f:a4:cb:7d:08:c3:5f:3b:c6:a0:ae:b4:
                    b4:5f:87:2b:b5:b1:cc:9b:a3:09:c5:9f:55:5c:09:
                    a3:5a:6f:3d:24:bb:23:b6:c3:a5:02:a4:35:65:bc:
                    e1:3b:27:a5:7a:4d:ee:36:a7:c5:f9:b6:ba:b2:10:
                    79:f9:64:35:66:c5:31:e0:d1:07:34:e2:97:34:c1:
                    ac:dd:ae:60:df:1d:fb:79:0f:8c:4f:d6:c1:8a:4f:
                    aa:ae:6f:96:49:2a:c8:f8:f1:60:79:0c:48:9b:70:
                    cb:5c:ba:25:b7:f3:cc:39:72:da:bf:a1:38:f3:44:
                    46:2a:2c:21:71:c0:8b:55:04:65:8c:b1:2a:24:6a:
                    69:d5:c7:9f:95:dc:08:43:a0:de:48:7d:0f:be:38:
                    fb:f5:5e:b1:db:8d:72:34:0f:5f:62:04:21:73:06:
                    d4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:22:DB:1E:D5:2F:F7:3A:D6:44:94:62:58:CC:0B:E0:EC:21:38:4F
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/88978730772311EBB972032EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.254.0/24
                IPv6:
                  2401:4601:254::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:ea:17:6d:9d:62:1c:5d:55:9d:6f:b5:c4:76:b9:16:d2:
         b4:53:30:ca:61:fc:fb:f4:b2:33:29:ed:a5:38:38:b5:28:56:
         d9:16:1d:4f:8d:4e:b0:15:ed:f8:68:46:6e:f1:8a:0e:ac:78:
         a2:99:8a:69:a0:f4:9c:28:35:90:0d:32:bb:ad:9f:b5:f4:a7:
         75:23:e9:39:f5:8a:56:47:46:c1:c3:db:66:d1:6b:5d:6b:e9:
         44:f7:50:2d:54:95:ac:37:96:fc:8f:13:69:f6:12:81:52:17:
         d4:21:ee:e3:a0:87:23:6a:bd:b9:f5:38:53:b8:c9:e9:e2:2d:
         33:de:98:1c:1f:0b:a5:4b:f5:9d:88:2c:c6:d0:3c:02:dc:e7:
         12:d6:51:9f:90:2a:a1:8c:20:6d:26:f7:f8:f3:28:c9:87:0c:
         a6:65:a0:13:bd:cf:2d:c9:df:9a:76:1d:dd:ce:0d:74:2a:a2:
         94:18:4b:11:d4:5c:a2:11:c6:38:45:12:c2:26:58:8c:7c:c4:
         50:0d:4d:47:2d:5d:d7:7b:be:f8:d0:cf:b6:27:03:db:ac:9a:
         af:e6:f7:1e:f1:8a:6d:59:a8:dc:94:93:be:ed:48:f1:ad:01:
         49:a3:e2:12:ee:77:d4:fe:26:5a:e1:58:24:07:f3:4f:36:cb:
         45:d8:94:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:43:48 2026 by rpki-client