Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
File:                     7BF6BA42E91A11EF804C4B57C4F9AE02.roa (raw, json)
Hash identifier:          X/F/VIP7MU7PxI/U+F3IMTIFv5orEEI5ux2V2I7dVFA=
Subject key identifier:   6D:40:FC:10:ED:51:2F:F8:24:18:A7:63:06:0A:48:88:BB:F9:36:62
Certificate issuer:       /CN=A9111FFD/serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
Certificate serial:       D3
Authority key identifier: 10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:57:58 +0000
ROA not before:           Thu 27 Mar 2025 05:37:50 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153557
IP address blocks:        163.61.14.0/24 maxlen: 24
                          163.61.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111FFD, serialNumber=104CF87063B5EABF34DE4E25FECE9AB5AF736C14
        Validity
            Not Before: Mar 27 05:37:50 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3e376-cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:9b:3d:0e:19:b8:d3:a2:3e:f7:9a:1b:e6:
                    dd:2f:b6:a9:93:79:54:21:99:cc:d8:7c:af:a6:4c:
                    08:c4:f6:33:89:2d:7f:6a:5d:59:86:1a:23:e8:fd:
                    c5:f7:21:9b:6b:c4:7e:9f:a3:b2:0f:5d:34:cf:51:
                    8d:18:16:77:91:38:b6:e2:22:d0:cd:6d:96:65:ac:
                    0c:4b:b9:d3:a9:0b:b1:35:ce:4b:a7:14:d5:60:fd:
                    36:2a:e9:3b:e6:59:11:52:0b:ff:ba:b9:32:42:d7:
                    e7:b7:cf:1c:93:9e:38:44:58:92:7b:37:18:0b:c1:
                    3e:bf:d4:db:85:1b:5c:83:bf:a8:89:6a:86:78:40:
                    d6:64:21:90:ec:ff:aa:f6:13:c7:a4:a7:d8:a5:e7:
                    67:f8:36:02:df:13:5c:3e:ee:af:bb:5e:06:f1:80:
                    d6:e8:8b:64:3d:34:72:14:ae:e4:78:7d:06:97:06:
                    42:2f:ca:b9:b9:c1:1e:00:80:52:df:dc:ec:89:83:
                    d2:58:1a:c5:dd:56:66:fa:4d:d1:14:80:b9:9d:8a:
                    de:b7:b2:8e:dd:d8:06:2e:d4:68:d2:55:cc:cc:3f:
                    b4:bc:cf:d8:23:7d:f5:9d:2b:09:29:0b:59:c0:8c:
                    8b:69:6e:4f:d1:26:8d:02:7d:e9:01:96:1a:5a:7f:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:40:FC:10:ED:51:2F:F8:24:18:A7:63:06:0A:48:88:BB:F9:36:62
            X509v3 Authority Key Identifier:
                keyid:10:4C:F8:70:63:B5:EA:BF:34:DE:4E:25:FE:CE:9A:B5:AF:73:6C:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/EEz4cGO16r803k4l_s6ata9zbBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EEz4cGO16r803k4l_s6ata9zbBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111FFD/42EB0534DD3811EF9C346745C4F9AE02/7BF6BA42E91A11EF804C4B57C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:09:92:df:d9:56:9d:55:2e:bb:04:82:6b:09:4d:09:e2:14:
         26:66:1b:72:88:4e:8c:39:0e:37:9c:6a:62:d2:57:84:83:77:
         5a:30:b4:c8:97:fd:fc:ec:71:19:02:aa:11:a9:15:ff:da:d6:
         42:b6:8f:ca:91:2b:99:31:18:e6:ca:6c:ab:0f:c4:61:04:74:
         95:93:a8:3b:e7:f5:fd:9e:47:7b:5d:ab:d6:dc:e7:fb:52:a8:
         7b:aa:0c:7b:35:44:b0:f6:47:32:7d:ca:de:33:01:c1:a2:80:
         93:6a:ff:d3:78:47:c9:02:9e:44:d0:f3:9b:60:61:74:57:74:
         f8:ca:bd:49:18:39:0a:17:d9:e7:d4:6d:4d:51:57:4e:d2:38:
         d9:63:a8:ca:4a:9e:c6:90:64:41:af:b4:bd:0f:ce:70:48:7e:
         fa:4e:c4:22:d7:8a:42:b4:6c:b7:69:0b:49:a7:d7:ea:44:00:
         1f:5c:a2:be:90:e0:b3:7a:6e:8d:a0:6c:c5:04:be:53:c1:6e:
         3d:b1:74:0e:3d:8e:8a:40:2d:8b:0d:3e:56:b0:ea:ac:8b:b0:
         55:1e:9c:83:a9:58:b2:84:6b:ce:49:25:c1:e2:2e:4e:2d:a2:
         23:02:bd:73:60:da:e5:e2:51:08:ba:41:96:ea:14:f0:ad:75:
         5f:ba:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:27:17 2026 by rpki-client