Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/61E919B60C8D11EFA97EC809C4F9AE02.roa
File:                     61E919B60C8D11EFA97EC809C4F9AE02.roa (raw, json)
Hash identifier:          tQ1ikNfK7Vim/bFi4z6bziWpHz3U2eKnhOynUohqpxs=
Subject key identifier:   7F:5D:8B:3C:2B:8C:10:1E:2A:C4:93:8E:83:EC:D1:F3:AF:20:A7:A2
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       13CF
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/61E919B60C8D11EFA97EC809C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:33:40 +0000
ROA not before:           Thu 14 Aug 2025 17:26:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     136169
IP address blocks:        203.117.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5071 (0x13cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug 14 17:26:42 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a48684-d4fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e5:bc:e1:70:b3:0b:ca:f4:0f:19:cf:33:d1:
                    02:b9:20:b7:64:cf:33:e8:3a:6d:ff:10:aa:16:b4:
                    cd:0a:29:ea:80:20:09:de:18:cd:1e:be:97:90:6f:
                    17:12:37:c6:47:e8:be:e2:0c:ce:63:55:6b:c9:cf:
                    92:a5:c3:d0:8b:27:39:d4:a1:7e:27:60:45:f2:dc:
                    ed:3e:6d:2f:54:c1:d4:a0:43:8b:44:7b:16:12:fb:
                    8d:97:99:27:aa:3b:0c:de:e6:68:70:1c:13:c6:21:
                    52:4c:08:72:5b:2b:6f:48:a7:4f:1e:d9:12:29:64:
                    7c:ae:ed:fd:e8:cf:17:ae:a1:d9:0b:da:e1:25:97:
                    b9:86:a1:d3:8e:11:b5:c9:fb:dd:fc:18:be:30:70:
                    fd:8f:5a:ad:eb:13:f2:cd:41:bb:d9:48:2b:07:d2:
                    9a:91:9d:b2:46:51:51:9b:f4:06:4f:f1:b8:4c:4a:
                    81:07:62:ef:3e:f9:fc:3b:00:53:82:59:33:7d:38:
                    e7:dc:f8:27:15:52:d8:9b:16:49:d3:e0:0b:01:47:
                    f6:93:ff:03:06:aa:78:7a:f3:93:00:5f:90:ff:ab:
                    b0:84:12:ed:62:aa:c2:70:ce:e0:60:64:5a:57:4e:
                    b3:e3:42:db:ef:75:ab:ff:be:cd:f5:7d:dc:1e:66:
                    61:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5D:8B:3C:2B:8C:10:1E:2A:C4:93:8E:83:EC:D1:F3:AF:20:A7:A2
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/61E919B60C8D11EFA97EC809C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.117.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:9b:83:9b:1c:67:2c:65:7d:47:72:99:68:8c:e1:b0:71:fe:
         c3:b6:d6:ae:ed:bc:ad:f7:27:56:8f:51:07:ca:e1:79:e4:d8:
         7e:81:ce:fd:f2:b0:75:56:8f:44:34:57:45:88:df:7c:5c:ac:
         8d:c3:6f:72:2a:32:cd:e1:3c:63:70:c7:ce:98:a6:46:01:20:
         58:43:cb:24:3e:e0:2c:4d:a5:84:06:11:01:5f:12:79:81:1f:
         a4:34:3d:42:74:49:9d:c6:81:1b:44:05:2c:e1:5c:56:5f:56:
         e2:8f:65:ac:ad:f2:3d:d9:36:f0:57:63:e8:c5:f7:18:c2:05:
         e8:4f:db:70:72:6d:f4:7b:52:46:61:d4:9f:fb:72:b7:b1:50:
         6b:64:78:85:c5:a3:61:78:df:20:1a:72:a7:af:c5:47:63:69:
         93:7f:d1:44:85:79:85:47:48:0d:10:aa:6b:3d:30:61:e8:2f:
         87:7e:e2:f6:b2:0c:ff:12:92:32:23:2c:d5:93:1d:db:32:d5:
         70:fb:8a:64:2e:ab:b1:98:63:f4:a5:e7:b8:c6:99:c8:b4:a1:
         01:90:3d:27:a8:f5:a2:1c:59:64:4c:7d:78:82:b2:c3:dc:54:
         fc:06:a9:9c:41:83:9e:e1:80:bf:a5:48:09:3a:0b:97:09:69:
         0f:48:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:15 2026 by rpki-client