Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
File:                     61CC010AE4BA11EE8037FD6DC4F9AE02.roa (raw, json)
Hash identifier:          02sqYdbDRE0+Eg/3piDn9CDT+5Zx0sH2Kq685uMN8gM=
Subject key identifier:   61:0E:BA:CF:DF:3C:A9:BE:22:86:22:41:25:D3:6F:4F:CF:D5:AE:06
Certificate issuer:       /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
Certificate serial:       02F1
Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa
Signing time:             Tue 17 Mar 2026 01:34:42 +0000
ROA not before:           Tue 17 Mar 2026 01:34:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     140217
IP address blocks:        166.120.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:05:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352
        Validity
            Not Before: Mar 17 01:34:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b8afb2-bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:18:d3:5b:c3:78:5e:82:56:f0:57:c2:89:
                    bb:44:17:ae:1c:07:12:47:16:8b:55:75:e8:a0:56:
                    2a:8d:31:dc:b7:f6:b6:51:93:3f:12:77:85:91:9d:
                    ae:7f:94:24:54:ac:27:9f:3c:30:6e:93:3f:66:38:
                    28:27:43:d6:bf:61:10:c3:71:36:15:a0:72:ad:66:
                    c8:74:6f:02:e9:1f:77:ba:22:71:01:ba:a4:a9:32:
                    09:15:b8:7a:15:f7:76:ee:b8:8f:61:1a:bf:7b:11:
                    2b:4a:43:14:c8:8e:8c:1f:22:3e:07:0f:f1:df:57:
                    41:d8:fe:da:49:2d:46:dd:5b:b4:67:2e:ce:a6:dc:
                    7e:dd:61:13:6d:fd:07:5e:27:98:1e:24:5b:7e:ba:
                    63:a2:be:e7:0d:b6:ef:d4:9c:62:8a:fa:6f:5a:1f:
                    4a:b2:99:2d:56:02:22:14:07:51:0d:11:9c:69:d3:
                    89:77:a1:b6:51:a3:e1:89:d1:f1:94:5e:e8:26:f5:
                    aa:65:7e:d4:e8:54:eb:d5:b3:fa:b5:d9:41:7f:f2:
                    90:33:0c:c1:7d:55:f7:09:5a:0e:81:5d:0e:ed:b6:
                    95:a2:6f:da:c5:8d:2d:a9:69:52:0a:de:32:c2:63:
                    09:17:c4:ce:3e:2e:f7:b3:91:08:e6:aa:39:cd:8f:
                    9c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0E:BA:CF:DF:3C:A9:BE:22:86:22:41:25:D3:6F:4F:CF:D5:AE:06
            X509v3 Authority Key Identifier:
                keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/61CC010AE4BA11EE8037FD6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.120.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:90:a1:86:6d:d8:52:df:e3:0b:c3:91:4a:25:8e:0d:7a:64:
         63:64:0b:e7:48:00:42:31:2b:df:79:d6:44:0e:bd:33:19:79:
         76:bb:1e:ce:70:66:1d:de:f7:19:16:94:67:5f:d5:5f:39:17:
         02:53:0f:81:98:70:95:33:59:c5:26:08:3f:57:59:e9:e9:5b:
         18:82:a4:01:e8:2b:bb:8b:f9:a4:95:a7:75:e1:5d:1f:2d:95:
         fc:89:f2:11:90:ec:95:b7:b8:0d:21:8b:ac:8d:4c:32:27:bd:
         ea:e5:04:80:a1:b8:7a:5c:05:03:36:3e:bd:24:cf:c6:dc:75:
         25:3e:34:4c:6d:74:c2:ed:41:ea:18:d7:77:3b:51:36:f2:e5:
         96:80:2b:b3:77:c1:97:7f:f4:04:87:cd:82:1a:97:d9:bc:40:
         77:04:24:4b:97:8f:6d:f5:ac:5d:a1:66:bb:de:96:21:7b:5a:
         a3:96:9b:88:1b:49:5f:1b:73:65:16:33:c4:a1:d8:23:54:5d:
         6c:1e:2a:59:88:24:13:cf:3e:a0:1d:98:9c:06:e4:09:fd:bc:
         35:a3:6b:2e:dd:fa:78:fd:e2:62:23:28:e0:64:60:f5:50:4f:
         c7:99:6d:d9:b2:df:63:cd:5c:7a:dd:bd:00:79:45:80:b7:a9:
         5b:a7:44:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:59:16 2026 by rpki-client