Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/3057138E143F11F08A345E0AC4F9AE02.roa
File:                     3057138E143F11F08A345E0AC4F9AE02.roa (raw, json)
Hash identifier:          exj8FknQFAkiRsXzwBaEnUjnxS8Kl29r+fpW3fZBmMo=
Subject key identifier:   89:1A:26:01:10:8A:BB:11:CD:6A:4A:B6:21:45:78:D6:B4:3A:0B:6A
Certificate issuer:       /CN=A914410E/serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
Certificate serial:       AF
Authority key identifier: 48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/3057138E143F11F08A345E0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:02:24 +0000
ROA not before:           Tue 08 Apr 2025 06:04:48 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     137552
IP address blocks:        163.61.102.0/24 maxlen: 24
                          163.61.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl
                          rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 175 (0xaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914410E, serialNumber=489A6FCED7DC63B7AB3666E35BD509D9EA1575E0
        Validity
            Not Before: Apr  8 06:04:48 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a3e47f-6924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:92:8b:e1:60:90:32:77:ca:be:81:76:15:
                    69:c0:82:3c:7d:58:f2:22:94:3d:6a:45:84:6e:7e:
                    21:1e:5b:4b:07:b1:e7:31:bc:58:8e:35:4e:f2:5e:
                    f6:66:0e:6f:b9:a2:42:b6:4b:f5:e2:4d:84:40:33:
                    6c:5b:a3:4e:e3:79:43:1c:a9:2b:dc:8e:c8:b8:3a:
                    e1:95:68:e1:dc:04:94:61:06:b6:e2:d9:2c:14:02:
                    c8:06:e1:58:5f:06:b7:e6:81:cf:8d:e3:64:83:56:
                    a4:bf:7a:ef:68:1a:b5:db:5a:34:eb:d1:e7:7e:0f:
                    3f:5f:de:06:e8:ec:0d:24:14:46:fc:a8:24:4d:e3:
                    b6:cd:e0:3d:f2:78:8d:02:a5:b6:19:da:b2:1a:9e:
                    f2:aa:17:db:2d:17:f1:c8:bc:d0:f0:ee:1b:80:cf:
                    ce:db:9f:48:86:1c:74:0b:83:79:d3:56:40:77:97:
                    da:3b:22:0a:a7:76:48:a5:da:6b:5a:0f:8c:bf:3a:
                    7c:4a:af:bb:03:7f:4c:27:34:14:a9:1a:a2:a7:4c:
                    e0:75:1c:b3:6d:24:8b:55:2a:bd:7a:6c:bf:8e:1e:
                    af:b2:56:65:99:34:9a:b8:3b:ae:e6:69:d1:33:d1:
                    f0:57:89:3a:2f:cd:34:e4:c9:b6:86:19:50:85:97:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1A:26:01:10:8A:BB:11:CD:6A:4A:B6:21:45:78:D6:B4:3A:0B:6A
            X509v3 Authority Key Identifier:
                keyid:48:9A:6F:CE:D7:DC:63:B7:AB:36:66:E3:5B:D5:09:D9:EA:15:75:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/SJpvztfcY7erNmbjW9UJ2eoVdeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJpvztfcY7erNmbjW9UJ2eoVdeA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914410E/2F03298A108611F08AEA480CC4F9AE02/3057138E143F11F08A345E0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:7d:e2:0d:d4:73:63:5f:66:8a:f3:18:b8:db:97:d1:0e:1a:
         f4:af:c4:59:f4:1a:4f:cd:92:6c:1a:3d:f5:c7:e4:56:b9:1c:
         30:4e:57:31:c7:dd:fb:f5:82:74:4d:e6:83:10:e4:ef:a4:f4:
         15:2a:8b:c0:a9:28:f3:32:fd:16:97:12:3b:18:0c:e9:4b:0f:
         53:4c:3b:1c:35:6b:be:ef:01:1c:72:7f:23:61:a7:41:d0:a1:
         d3:67:12:7c:d6:8b:a9:00:78:92:e6:3d:88:b1:c3:fe:a6:a1:
         6a:4b:7c:54:b8:0f:fd:6d:76:00:6e:cd:40:29:70:eb:6f:99:
         34:b8:4c:e8:fc:fa:9a:5c:3b:76:22:54:d7:38:28:77:14:ae:
         2e:08:70:7c:13:14:0b:b3:a6:1a:c5:39:fa:7b:ac:a1:b1:f8:
         d2:87:18:29:8b:a0:f5:53:67:ee:43:da:9c:d5:07:fa:d8:69:
         10:df:5c:28:e8:83:e6:c3:c2:a4:aa:0b:fb:5c:16:12:8c:55:
         e8:b7:a5:98:fb:e9:bc:ee:fc:8a:5d:bd:81:02:4f:8c:96:f6:
         99:17:5d:26:1c:8c:43:b8:fb:6c:12:99:0f:3c:9b:58:7f:ab:
         bb:46:f2:c0:94:34:db:9f:4c:97:6e:59:fb:10:22:11:db:cd:
         d4:7a:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:42 2026 by rpki-client