Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
File:                     2511401EF40311EFBB6EF777C4F9AE02.roa (raw, json)
Hash identifier:          dBX9FeuU3fdLO+f+D+iiGgS9l724XExPGMqnUxvYPlM=
Subject key identifier:   7F:49:BD:6F:41:B7:94:6C:D1:2D:96:9B:84:AB:CC:9A:EB:9B:01:D3
Certificate issuer:       /CN=A915FEAC/serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
Certificate serial:       C6
Authority key identifier: 06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:14:38 +0000
ROA not before:           Tue 17 Feb 2026 05:26:51 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153556
IP address blocks:        163.61.12.0/24 maxlen: 24
                          2001:df5:40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl
                          rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FEAC, serialNumber=06E75C88F3690331FE97F8621231B65D147A3B6D
        Validity
            Not Before: Feb 17 05:26:51 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a457de-3ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:44:a7:fb:90:1d:cb:37:c8:f1:20:08:70:
                    10:30:9d:e8:e1:4e:af:89:a9:79:80:12:b6:33:0d:
                    eb:c8:93:be:2d:48:14:58:45:48:2b:77:93:96:5f:
                    28:2b:2d:ae:8b:a6:f2:85:ff:8f:98:8c:42:64:b7:
                    c6:29:48:02:3a:a1:45:23:9f:f3:5b:98:e0:4e:2a:
                    5b:1c:c1:df:0a:0f:9a:d8:ae:00:60:34:ca:8a:4d:
                    23:7e:43:a6:a7:73:49:5e:fc:ee:51:83:19:5d:86:
                    85:c1:b1:57:1d:48:d8:18:f6:8c:66:9d:6e:4d:7c:
                    24:89:7b:44:8c:ad:5b:cf:76:d6:92:d1:3c:af:69:
                    59:4b:42:db:7b:8c:6b:66:e0:d2:ce:cb:50:e4:94:
                    70:4a:2f:95:bb:25:4c:89:6c:77:5a:92:e0:85:04:
                    20:85:6c:8c:e3:4a:67:55:0c:3e:46:83:33:f5:f5:
                    17:83:d1:09:e4:ae:f9:f2:59:fb:f8:f3:74:5f:bf:
                    95:05:d2:9e:1b:3e:24:29:58:f1:79:02:18:89:47:
                    9c:5c:c8:14:a8:3a:f6:6e:88:38:55:43:33:75:06:
                    04:37:1b:95:39:c9:59:af:ca:f3:72:8a:52:c7:2d:
                    6b:37:ec:8b:54:ac:46:de:d1:b7:01:ea:5a:42:ed:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:BD:6F:41:B7:94:6C:D1:2D:96:9B:84:AB:CC:9A:EB:9B:01:D3
            X509v3 Authority Key Identifier:
                keyid:06:E7:5C:88:F3:69:03:31:FE:97:F8:62:12:31:B6:5D:14:7A:3B:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/BudciPNpAzH-l_hiEjG2XRR6O20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BudciPNpAzH-l_hiEjG2XRR6O20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FEAC/793A9DF8F40211EFB1A06C59C4F9AE02/2511401EF40311EFBB6EF777C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.12.0/24
                IPv6:
                  2001:df5:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:ef:63:c1:01:45:90:19:f1:79:80:21:21:8a:f2:17:b3:70:
         5c:60:6d:e0:bf:23:09:1c:b2:82:a9:ed:53:fa:19:5f:0b:f9:
         38:58:da:14:f3:9c:e1:69:c3:63:3e:e2:10:09:ed:f3:68:f7:
         bd:7f:dd:a5:11:16:39:f7:7d:3c:44:ba:ca:dd:e0:6c:0b:72:
         9f:1a:e4:1c:13:5b:89:0c:1b:2e:67:15:47:90:f9:97:1f:3d:
         6c:c8:e1:0b:cd:a5:3d:03:f9:50:a9:35:46:d6:13:73:f2:ea:
         76:18:fa:51:28:02:25:64:74:a7:d5:d4:7b:a9:0e:cd:df:68:
         d4:91:f0:65:c9:cc:3f:cb:0c:de:b2:2b:2f:d2:f0:16:93:b5:
         8a:bc:93:10:0e:34:df:4e:c4:ef:ac:82:0a:c1:f2:9e:5d:cf:
         62:d9:d4:01:b0:14:5f:28:52:35:22:3c:f9:23:f3:39:0c:01:
         e1:0e:98:c0:6d:fa:cc:bb:4f:52:04:b2:68:2b:96:8f:16:de:
         21:37:d7:bf:d9:4e:6c:65:d3:b1:38:3b:e1:c1:96:f8:e3:04:
         cc:71:17:87:ea:25:37:39:e9:15:a1:67:2d:42:28:f9:6b:04:
         20:f9:da:b7:8f:bb:11:a2:6f:b7:cf:4f:03:ef:1b:b0:41:7b:
         26:37:cf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:01:23 2026 by rpki-client