Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/447A88023DDC11F0ACD9F475C4F9AE02.roa
File:                     447A88023DDC11F0ACD9F475C4F9AE02.roa (raw, json)
Hash identifier:          yApvKnBxIUvq7AlUwJW85McmrlejDSLKrMcrZmKRC/A=
Subject key identifier:   8D:96:DF:EF:78:79:5D:6D:9C:E9:F4:D0:00:FA:FF:F9:66:0A:13:6D
Certificate issuer:       /CN=A91F8177/serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
Certificate serial:       9A
Authority key identifier: 1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/447A88023DDC11F0ACD9F475C4F9AE02.roa
Signing time:             Wed 11 Mar 2026 06:48:34 +0000
ROA not before:           Wed 11 Mar 2026 06:48:34 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135345
IP address blocks:        163.61.94.0/24 maxlen: 24
                          163.61.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl
                          rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8177, serialNumber=1CD2D4F326A184A487BF22ACD78AD5C068F46661
        Validity
            Not Before: Mar 11 06:48:34 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b11042-4dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:92:1f:fc:b8:5b:6a:d9:b8:92:32:06:1e:
                    36:bd:fa:40:eb:8c:c8:7d:5e:18:73:fe:4e:64:30:
                    59:99:4d:ed:cb:4c:98:4e:55:6a:8d:f0:c0:68:49:
                    a2:25:03:ac:fd:f3:b1:59:ce:8a:b9:0e:1c:0d:a4:
                    2f:1b:27:bd:aa:6c:0a:ea:35:52:f6:67:8f:b1:fc:
                    83:d9:09:c8:5d:72:fd:de:fe:5a:3e:5a:77:01:3b:
                    99:9a:15:b4:ff:66:a4:39:4b:47:ba:c7:26:d0:7c:
                    09:7f:28:6d:ab:c4:ab:ec:d2:a2:7c:bc:b0:1d:9d:
                    d9:6b:04:fa:a3:45:4c:e4:67:fd:2f:6d:b2:ec:3b:
                    37:67:60:ba:18:b0:c1:b9:97:4e:16:27:35:ea:7e:
                    ad:40:3b:89:c2:d4:d0:1d:72:65:54:8f:4f:ba:06:
                    2e:d2:3c:a8:ac:8a:59:6e:92:f6:5b:53:57:56:94:
                    a4:a2:94:96:34:78:b8:35:30:26:e6:eb:d1:dd:56:
                    1f:63:62:3f:a9:ed:37:c7:43:4a:33:ca:ff:ad:e0:
                    a3:dc:60:ba:7e:09:aa:69:c6:a6:2a:cf:39:d3:35:
                    be:21:3d:01:81:ef:39:37:bb:0d:46:6b:4c:34:ae:
                    fc:7a:78:c1:a2:25:89:6f:68:11:7b:a9:b4:42:31:
                    6b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:96:DF:EF:78:79:5D:6D:9C:E9:F4:D0:00:FA:FF:F9:66:0A:13:6D
            X509v3 Authority Key Identifier:
                keyid:1C:D2:D4:F3:26:A1:84:A4:87:BF:22:AC:D7:8A:D5:C0:68:F4:66:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/HNLU8yahhKSHvyKs14rVwGj0ZmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HNLU8yahhKSHvyKs14rVwGj0ZmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8177/8BA3D8C43DDB11F0AC93D432C4F9AE02/447A88023DDC11F0ACD9F475C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:3c:f5:35:6f:82:d3:6d:e4:cd:36:63:46:05:30:92:81:10:
         67:59:bd:a6:f1:8f:75:00:ac:61:06:57:90:2b:81:e6:ab:c6:
         59:33:7c:c9:aa:66:b0:7f:ce:3f:44:21:55:f4:cc:af:00:c1:
         b0:7a:9e:21:0a:8b:82:9e:43:57:dc:1b:b3:ad:8e:05:33:b1:
         6f:c8:9b:40:86:95:cd:8b:31:89:3b:17:8a:bc:b8:e0:65:d4:
         1f:72:7c:12:38:4b:09:cd:5b:a8:45:b4:9f:fa:8f:f1:f2:02:
         39:91:3a:97:69:fc:ef:84:39:77:44:88:a4:f7:1e:30:10:80:
         8b:25:e5:e8:13:1b:7f:d9:b3:ed:e6:b7:52:a4:db:e8:8c:b4:
         15:76:5e:83:3b:d8:7d:30:cb:ff:89:df:76:b8:a6:ac:69:9f:
         63:a9:cf:31:df:ce:d9:08:3b:69:7c:6b:94:7b:0a:01:bc:be:
         77:9f:34:39:d6:bb:17:36:f1:0e:41:6a:8c:19:73:89:e8:b2:
         89:01:80:b4:de:57:f3:de:26:6b:bf:43:e1:5f:b4:c5:be:40:
         97:54:8b:8e:70:7a:6b:b5:9f:6b:54:fc:30:25:83:2b:dd:40:
         e0:8d:b1:86:5b:5a:ff:90:ba:13:dc:ae:14:61:ec:97:be:88:
         99:dd:51:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:57:52 2026 by rpki-client