Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
File:                     3CA27876F73F11EF95C5F011C4F9AE02.roa (raw, json)
Hash identifier:          nJgMh1pSR7RYvQfkOhJmgSgKanvuGtJRzxiXUhoXDR8=
Subject key identifier:   5E:AA:DA:52:CF:B3:8C:C9:4E:D6:EE:62:F6:31:D7:FD:70:4C:1C:E7
Certificate issuer:       /CN=A91F83B6/serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
Certificate serial:       E7
Authority key identifier: E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:41:24 +0000
ROA not before:           Wed 29 Apr 2026 07:41:24 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     141414
IP address blocks:        163.61.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl
                          rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:39:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F83B6, serialNumber=E46B9318585AC1E06CF384E2EECC21F4743389BB
        Validity
            Not Before: Apr 29 07:41:24 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f1b624-b38f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:e1:d4:42:7f:a9:c1:b8:3e:1f:06:18:54:
                    1a:f5:d5:62:5f:04:5f:23:a3:0b:e0:0a:c4:41:d5:
                    f0:64:97:fc:2e:73:f5:9e:cd:20:d1:56:c3:ff:46:
                    54:e2:83:6e:1f:68:dd:b1:2a:54:4a:1b:6a:00:ff:
                    98:f2:ce:54:dc:5f:e0:55:7b:2e:06:4b:b7:88:27:
                    c2:4e:aa:81:8b:01:86:75:18:e4:c8:6c:28:31:13:
                    49:af:4f:8c:10:da:e0:41:05:d0:c6:82:63:ea:a3:
                    a7:f8:e2:3c:f7:8d:2a:e6:61:6f:22:22:fc:3e:8f:
                    bd:4c:52:22:ae:e0:b5:39:7a:d6:56:71:3d:06:44:
                    ab:1b:30:96:1b:4a:60:11:dd:5d:f4:a8:bf:dd:98:
                    ac:49:38:da:fc:20:54:24:f4:08:c6:f8:60:4b:76:
                    28:84:2d:a8:04:d1:df:f7:27:17:03:68:2b:07:53:
                    85:62:92:47:c3:10:dd:d5:cf:95:f6:75:d4:f7:0a:
                    3b:17:8e:6b:18:b5:66:cf:cd:f9:b3:12:04:9b:4b:
                    0e:56:1c:20:a4:4d:9b:74:cb:d8:40:94:8a:9a:a1:
                    60:9c:d1:e5:a4:4d:67:97:80:af:47:8a:1a:bd:aa:
                    06:91:cf:a9:66:b5:1e:f7:dd:69:71:a8:8b:a7:82:
                    9a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AA:DA:52:CF:B3:8C:C9:4E:D6:EE:62:F6:31:D7:FD:70:4C:1C:E7
            X509v3 Authority Key Identifier:
                keyid:E4:6B:93:18:58:5A:C1:E0:6C:F3:84:E2:EE:CC:21:F4:74:33:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/5GuTGFhaweBs84Ti7swh9HQzibs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5GuTGFhaweBs84Ti7swh9HQzibs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83B6/E8F18B22F73E11EF9687370DC4F9AE02/3CA27876F73F11EF95C5F011C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:d3:e8:e0:c6:93:7b:09:c9:b7:df:3d:5d:54:22:4a:3c:78:
         d4:99:9f:6f:39:87:e2:09:52:1f:80:c4:18:62:08:46:94:92:
         29:62:55:c2:70:7a:2e:79:46:41:a1:1f:31:77:c4:73:03:9b:
         e0:51:ac:a2:68:81:e8:ab:f8:be:57:fe:76:13:49:27:b7:d2:
         5b:6f:62:8e:e6:e9:89:02:7c:e4:1e:ca:be:63:ae:ad:ad:df:
         6b:89:ca:e8:b3:0d:a3:44:6e:11:24:c3:a4:22:6c:de:0d:15:
         92:a1:d1:2e:88:9f:91:78:1f:f0:c8:d8:60:b5:ec:7b:2e:bf:
         38:54:15:6c:44:99:00:3b:09:d8:72:8f:95:c3:20:3d:d9:2c:
         21:5b:fb:8f:1d:d9:ba:88:42:9c:66:da:87:a6:67:31:28:c3:
         14:07:6b:23:9f:ba:06:a6:fa:78:60:77:12:b0:f0:59:90:14:
         bf:75:97:b5:66:18:c7:23:3a:61:b7:e9:50:4b:d3:94:8e:61:
         92:d5:53:12:f5:b0:f6:9c:6a:4d:be:f8:7b:c2:b2:e3:f6:3d:
         43:c4:f1:c2:b8:0b:49:95:bf:ca:b9:57:00:7d:5c:98:d4:63:
         4a:7a:78:70:1d:06:cd:ee:16:73:eb:d4:6d:7e:93:8b:b1:0d:
         9b:d9:46:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:48:58 2026 by rpki-client