Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/140D52F2854B11EAACB2FE39C4F9AE02.roa
File:                     140D52F2854B11EAACB2FE39C4F9AE02.roa (raw, json)
Hash identifier:          NJ/7oIBGXC/PxDjKoZF+pd55TEkTum40/RwHEfCwL4Y=
Subject key identifier:   A4:70:FD:2F:6F:02:F8:D8:D1:2E:1A:67:1D:8E:8E:36:DA:02:0D:12
Certificate issuer:       /CN=A91274A4/serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
Certificate serial:       0C6F
Authority key identifier: 59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/140D52F2854B11EAACB2FE39C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:40:46 +0000
ROA not before:           Tue 23 Dec 2025 07:18:07 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139883
IP address blocks:        61.16.51.0/24 maxlen: 24
                          61.16.52.0/24 maxlen: 24
                          61.16.55.0/24 maxlen: 24
                          61.16.101.0/24 maxlen: 24
                          61.16.105.0/24 maxlen: 24
                          61.16.110.0/24 maxlen: 24
                          61.16.119.0/24 maxlen: 24
                          2407:9880:8101::/48 maxlen: 48
                          2407:9880:8111::/48 maxlen: 48
                          2407:9880:8112::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl
                          rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3183 (0xc6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91274A4, serialNumber=595665FF85E4E477371F7541F7209DC244E60CA5
        Validity
            Not Before: Dec 23 07:18:07 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47a1e-735b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:90:3e:0b:91:8e:6b:cb:fa:d8:94:64:b3:
                    e5:be:87:3c:f1:59:df:07:7d:fc:0f:54:c9:0f:72:
                    33:28:4c:db:d3:d2:41:31:76:e0:9c:dd:d3:51:9b:
                    0e:04:1f:d2:10:3a:78:a9:a3:eb:3a:8b:7b:5e:b3:
                    9c:8e:6f:f0:c8:c7:cc:be:fa:c2:1e:9f:b6:72:2b:
                    91:7d:fc:8d:4f:79:ae:40:a0:32:76:26:d3:a8:fc:
                    7d:8a:b3:a2:b2:bb:cb:1f:f9:9f:8b:40:b1:c2:ef:
                    f2:37:48:bf:4d:a7:43:dc:91:a7:ee:06:90:1c:ff:
                    67:06:83:37:39:a7:dd:be:e1:c6:2c:a6:d6:b0:8f:
                    3f:07:05:4d:a8:cd:61:4b:db:9d:c1:fb:08:4a:db:
                    68:de:e0:4c:71:a4:df:c2:ce:05:5f:72:3e:9e:40:
                    c1:f9:b6:80:ec:7e:e5:76:44:99:be:56:93:fc:45:
                    8f:45:32:5d:d7:17:bb:91:05:52:d9:59:29:4a:9e:
                    61:6b:b2:a7:66:12:c6:f9:a4:0b:e3:71:ed:99:30:
                    3e:cf:f5:8e:ce:8f:a9:6d:6d:0c:4a:c5:a8:e5:be:
                    34:24:9d:07:5e:27:5e:f6:cb:6a:3c:87:a2:f2:ac:
                    d6:37:24:cc:93:b2:c7:86:3f:a7:24:a4:a1:7c:42:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:70:FD:2F:6F:02:F8:D8:D1:2E:1A:67:1D:8E:8E:36:DA:02:0D:12
            X509v3 Authority Key Identifier:
                keyid:59:56:65:FF:85:E4:E4:77:37:1F:75:41:F7:20:9D:C2:44:E6:0C:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVZl_4Xk5Hc3H3VB9yCdwkTmDKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91274A4/DDBE420A30F011EA9859AE53C4F9AE02/140D52F2854B11EAACB2FE39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.16.51.0-61.16.52.255
                  61.16.55.0/24
                  61.16.101.0/24
                  61.16.105.0/24
                  61.16.110.0/24
                  61.16.119.0/24
                IPv6:
                  2407:9880:8101::/48
                  2407:9880:8111::-2407:9880:8112:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         90:7d:33:45:8f:a9:ea:90:61:14:52:01:b8:1d:12:2e:82:54:
         4c:89:ff:bf:64:05:df:6d:4b:13:16:d1:b6:64:46:91:ab:1c:
         c7:7b:fc:a8:62:09:15:4c:06:4e:99:7d:0b:d9:90:66:84:36:
         8d:1a:0e:20:ec:ee:87:2b:45:5f:29:6a:da:89:51:d2:fc:ce:
         ec:ee:80:ec:fb:7c:91:67:c3:4a:0f:ed:d2:3a:74:0e:a9:5b:
         d8:3f:71:96:dc:81:40:fa:0c:99:06:1a:e9:4a:0c:7f:71:d0:
         e2:3d:00:fd:64:8d:86:15:09:bc:25:79:74:b2:b9:6c:f6:c8:
         f4:6e:fa:c1:4e:e5:7a:b0:6f:39:ff:25:40:36:97:e7:c1:88:
         5a:1a:5e:81:4f:e0:94:3e:6d:0c:45:89:e7:c6:1e:db:0a:4b:
         66:ed:5a:37:f9:f1:74:f3:69:43:f7:78:0d:67:54:cc:d3:12:
         84:d0:30:46:4f:ed:fb:c3:60:e2:09:84:27:1b:3e:a8:b2:6c:
         39:78:94:80:89:d9:23:b4:12:86:4d:fe:a5:3d:eb:b5:4c:30:
         fc:87:ee:4e:4d:84:38:c3:78:39:c1:30:d6:75:f8:44:fa:80:
         6e:a4:2b:c8:7d:fb:c7:38:be:94:b2:98:80:d0:01:a3:67:5e:
         02:dd:76:02
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc0QTQxMTAvBgNVBAUTKDU5NTY2NUZGODVFNEU0NzczNzFGNzU0MUY3MjA5REMy
NDRFNjBDQTUwHhcNMjUxMjIzMDcxODA3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2ExZS03MzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx66QPguRjmvL+tiUZLPlvoc88VnfB338D1TJD3IzKEzb09JBMXbgnN3TUZsO
BB/SEDp4qaPrOot7XrOcjm/wyMfMvvrCHp+2ciuRffyNT3muQKAydibTqPx9irOi
srvLH/mfi0Cxwu/yN0i/TadD3JGn7gaQHP9nBoM3OafdvuHGLKbWsI8/BwVNqM1h
S9udwfsIStto3uBMcaTfws4FX3I+nkDB+baA7H7ldkSZvlaT/EWPRTJd1xe7kQVS
2VkpSp5ha7KnZhLG+aQL43HtmTA+z/WOzo+pbW0MSsWo5b40JJ0HXide9stqPIei
8qzWNyTMk7LHhj+nJKShfEKEoQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKRw/S9v
AvjY0S4aZx2OjjbaAg0SMB8GA1UdIwQYMBaAFFlWZf+F5OR3Nx91QfcgncJE5gyl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzRBNC9EREJFNDIwQTMw
RjAxMUVBOTg1OUFFNTNDNEY5QUUwMi9XVlpsXzRYazVIYzNIM1ZCOXlDZHdrVG1E
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dWWmxfNFhrNUhjM0gzVkI5eUNkd2tUbURLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc0QTQvRERCRTQyMEEzMEYwMTFFQTk4NTlBRTUzQzRGOUFFMDIvMTQwRDUyRjI4
NTRCMTFFQUFDQjJGRTM5QzRGOUFFMDIucm9hMGoGCCsGAQUFBwEHAQH/BFswWTAy
BAIAATAsMAwDBAA9EDMDBAA9EDQDBAA9EDcDBAA9EGUDBAA9EGkDBAA9EG4DBAA9
EHcwIwQCAAIwHQMHACQHmICBATASAwcAJAeYgIERAwcAJAeYgIESMA0GCSqGSIb3
DQEBCwUAA4IBAQCQfTNFj6nqkGEUUgG4HRIuglRMif+/ZAXfbUsTFtG2ZEaRqxzH
e/yoYgkVTAZOmX0L2ZBmhDaNGg4g7O6HK0VfKWraiVHS/M7s7oDs+3yRZ8NKD+3S
OnQOqVvYP3GW3IFA+gyZBhrpSgx/cdDiPQD9ZI2GFQm8JXl0srls9sj0bvrBTuV6
sG85/yVANpfnwYhaGl6BT+CUPm0MRYnnxh7bCktm7Vo3+fF082lD93gNZ1TM0xKE
0DBGT+37w2DiCYQnGz6osmw5eJSAidkjtBKGTf6lPeu1TDD8h+5OTYQ4w3g5wTDW
dfhE+oBupCvIffvHOL6UspiA0AGjZ14C3XYC
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:08 2026 by rpki-client