Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/3317EBC2B68611F0BC9B1221C4F9AE02.roa
File:                     3317EBC2B68611F0BC9B1221C4F9AE02.roa (raw, json)
Hash identifier:          E0x7gWSOqKxD/D60mOlZr5s+J7I7f+Wuxsw0ikRKxJk=
Subject key identifier:   95:02:B1:17:15:27:DB:79:92:40:3C:16:8B:5E:93:10:A7:D5:E7:10
Certificate issuer:       /CN=A914CFBF/serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
Certificate serial:       DF
Authority key identifier: 78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/3317EBC2B68611F0BC9B1221C4F9AE02.roa
Signing time:             Wed 25 Feb 2026 05:25:57 +0000
ROA not before:           Wed 25 Feb 2026 05:25:57 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     131471
IP address blocks:        163.61.128.0/24 maxlen: 24
                          163.61.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl
                          rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CFBF, serialNumber=78EC0F0E494F228EAA4383D6C60DEB1C362A5051
        Validity
            Not Before: Feb 25 05:25:57 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=699e87e5-c713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:e9:cf:59:b7:be:ec:3a:74:07:b6:4e:6c:
                    32:4c:04:f2:37:89:da:77:89:d6:a2:54:96:0b:c1:
                    8a:30:2e:18:e7:27:17:15:03:e3:81:60:99:e8:b5:
                    39:03:bc:00:29:cd:be:0a:45:04:38:79:9c:41:95:
                    49:c5:45:cf:87:60:14:b9:fe:c5:4c:99:ea:40:da:
                    32:78:91:e6:a9:70:f5:57:59:3f:1d:8a:a9:a6:94:
                    e4:36:96:f0:07:4d:02:60:1a:2c:09:28:9f:10:c4:
                    ad:9e:a5:6d:b0:07:80:b1:c0:d4:0c:c1:0f:d2:11:
                    50:7e:51:20:0e:26:fd:51:e7:8b:2e:c1:a0:76:0a:
                    72:e2:28:88:ff:74:8f:ed:65:b4:80:ce:a9:27:19:
                    77:e5:b8:80:45:94:1d:7c:c1:58:3a:ad:00:6b:f8:
                    c9:1d:cc:bf:7e:21:ec:65:9f:83:c5:83:9f:3b:9c:
                    3a:ba:fc:4e:42:84:6d:ac:f0:23:32:7f:ff:ca:0b:
                    4d:bf:67:2a:1d:05:59:74:d5:97:9f:cf:3c:65:4e:
                    55:2b:97:17:18:0d:df:2b:b7:d2:8d:b0:bd:17:4a:
                    c9:0f:80:00:25:70:35:b1:bc:ce:80:06:bc:a6:90:
                    14:45:af:c6:5b:18:7d:70:1f:92:83:72:5f:9c:6a:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:02:B1:17:15:27:DB:79:92:40:3C:16:8B:5E:93:10:A7:D5:E7:10
            X509v3 Authority Key Identifier:
                keyid:78:EC:0F:0E:49:4F:22:8E:AA:43:83:D6:C6:0D:EB:1C:36:2A:50:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/eOwPDklPIo6qQ4PWxg3rHDYqUFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOwPDklPIo6qQ4PWxg3rHDYqUFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CFBF/32761038ED1211EF9B2D495CC4F9AE02/3317EBC2B68611F0BC9B1221C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:8e:6f:b7:23:8c:e0:5f:6e:cc:bc:56:96:5b:c5:60:5c:fb:
         f1:64:f8:b8:6c:fa:87:d6:99:73:e0:99:da:1e:d4:1b:ac:01:
         ea:8b:4d:35:a9:47:29:63:7e:bc:16:91:f1:e8:a8:39:67:fd:
         8e:b9:8d:37:a3:6e:8e:14:92:8f:17:a0:0e:4a:6a:59:86:0d:
         66:43:f4:48:b2:54:b9:b6:56:fe:f3:40:59:92:fb:9c:9d:b8:
         81:da:a6:d5:b6:a1:b4:f7:1b:d7:8d:62:e3:eb:0b:e3:15:54:
         f2:8e:1e:98:46:58:f1:22:d6:f6:a0:85:54:45:0b:bd:13:c0:
         f2:95:0d:14:b5:37:12:c1:af:03:7d:ff:f8:e9:8a:d4:a4:27:
         a2:2c:4d:24:b0:70:2b:b2:b9:95:04:95:86:aa:3d:40:51:36:
         02:58:be:b8:79:69:fc:1b:e3:9c:f2:9f:54:54:c0:a1:7e:38:
         5b:53:41:5b:cb:75:b2:bf:0c:df:6a:4c:cb:9f:12:e5:b2:bd:
         f8:a5:78:30:15:fe:a3:42:3e:91:71:54:9f:f3:86:51:63:ca:
         4b:ae:52:d8:38:71:26:56:3a:94:65:8c:0d:e3:b5:20:47:dd:
         a5:d5:8a:40:ab:0a:60:b2:cc:4e:24:b9:96:d2:a6:72:1a:94:
         06:40:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:58 2026 by rpki-client