Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/B6D40A18822F11EFA848053BC4F9AE02.roa
File:                     B6D40A18822F11EFA848053BC4F9AE02.roa (raw, json)
Hash identifier:          61jmvX7SVy0heIgUVySbE3QK03BOLhJJdJxjzMkB6M0=
Subject key identifier:   A1:E0:10:FB:20:C8:3B:4B:07:EB:69:3A:20:24:26:4F:55:77:2D:4A
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3C13
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/B6D40A18822F11EFA848053BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:26:22 +0000
ROA not before:           Fri 04 Jul 2025 14:50:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138199
IP address blocks:        61.251.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:43:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15379 (0x3c13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul  4 14:50:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a4aefe-bce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:60:33:2c:c1:75:42:20:a5:f7:02:68:08:
                    2f:4a:ed:2b:20:4c:eb:07:89:5d:20:f5:ab:0b:ce:
                    88:c5:b7:fa:dc:cb:15:15:b3:59:b4:c8:e0:c5:3a:
                    82:43:6a:ed:fc:7b:f8:74:7c:07:23:90:f1:29:f1:
                    52:34:44:ca:83:c0:f6:d6:65:6f:89:97:a2:2a:de:
                    15:a7:c4:06:df:9a:7f:4a:ee:95:f9:0c:45:86:22:
                    e1:36:89:54:17:e5:9d:c2:a9:f3:9a:40:e7:bf:83:
                    ad:95:21:c8:a4:82:cf:58:e5:0d:6b:98:34:72:d0:
                    85:59:21:c3:89:4b:5f:27:f6:0a:b8:45:76:b6:10:
                    7a:c6:ef:95:f5:ff:3c:d9:aa:ac:7b:26:bd:85:49:
                    a5:5f:0c:03:21:c1:4f:eb:25:4b:c9:18:a4:5c:c4:
                    69:be:f9:b9:fe:54:ac:64:5c:c9:da:82:1d:69:8b:
                    24:50:9f:99:10:96:bd:62:f5:8c:0d:34:5c:2f:88:
                    7c:69:a3:54:70:02:a5:c3:7a:11:8f:db:49:b2:43:
                    a2:2c:b5:74:e8:ae:9d:ad:61:af:91:69:6d:de:96:
                    72:41:29:3f:4c:ef:bc:03:6d:fd:2c:58:12:36:26:
                    42:75:d7:52:2a:8d:94:72:dd:02:95:69:9e:e6:d8:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E0:10:FB:20:C8:3B:4B:07:EB:69:3A:20:24:26:4F:55:77:2D:4A
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/B6D40A18822F11EFA848053BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.251.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:9e:e7:83:cd:39:db:f7:cd:d3:2d:d2:a8:50:2e:ae:47:
         b6:5f:a5:72:bb:4d:5e:90:33:75:c9:29:e0:fa:4f:12:4b:75:
         a9:58:c2:ed:ef:68:2d:96:c9:d0:e6:38:0e:38:d8:9c:53:b6:
         17:bb:d0:22:8c:98:ac:b4:fc:96:03:df:90:72:9f:26:04:89:
         b7:be:e2:9d:d4:03:a9:23:7d:38:42:77:d7:b2:44:e9:08:99:
         b5:c9:a6:e9:ac:95:c1:30:7d:75:80:2c:a2:ea:e2:47:b1:56:
         8e:59:99:01:16:cd:e9:43:17:4e:58:2e:22:f8:8a:b0:d9:73:
         9a:8f:ee:56:90:05:e8:81:94:77:f3:89:cd:e4:66:56:ed:46:
         70:1e:64:c3:cf:66:ed:98:cd:69:0d:c7:00:fb:50:77:d3:0d:
         0f:29:34:9d:98:9a:b2:69:db:0c:89:a1:25:35:9a:6d:30:bf:
         da:04:c4:6b:fc:f7:c1:f8:5e:8d:51:8b:df:fc:26:4f:aa:3b:
         d3:ee:b4:08:18:a2:96:84:a9:34:f8:a0:7d:5c:0a:6f:ae:94:
         6e:1a:27:88:a3:a4:1d:9d:90:ac:69:e7:91:c5:00:95:f0:d7:
         8c:27:7a:4d:c5:56:47:01:8d:9d:4e:19:58:ea:2e:4b:91:24:
         0f:5a:78:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:27 2026 by rpki-client