Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/6031B83AE89211EFA8EA2645C4F9AE02.roa
File:                     6031B83AE89211EFA8EA2645C4F9AE02.roa (raw, json)
Hash identifier:          YSAtC4mM5C5YSv0R5qArB4QbvJChkBFXu1mmC23m0YM=
Subject key identifier:   2D:40:6F:A3:A4:89:6F:27:7E:DB:CF:06:97:1C:8A:35:10:98:D6:6B
Certificate issuer:       /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
Certificate serial:       CF
Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/6031B83AE89211EFA8EA2645C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:16:24 +0000
ROA not before:           Mon 09 Feb 2026 06:25:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137655
IP address blocks:        163.61.24.0/24 maxlen: 24
                          2001:df5:2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
        Validity
            Not Before: Feb  9 06:25:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a43c28-31e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:d2:e6:ba:d9:76:63:6c:0d:6d:58:62:64:
                    f4:d8:bb:8b:f8:7e:d4:48:e5:46:4a:57:f6:65:88:
                    ea:4e:d5:84:ae:a0:c0:33:de:7b:f5:0c:e3:81:20:
                    ae:a1:a4:2d:52:93:dd:d8:17:58:e3:e5:c0:70:73:
                    1a:a9:ff:16:8c:d0:1d:f0:4a:ba:0e:ff:c1:07:8f:
                    c8:ea:69:36:8c:96:38:c7:6c:cf:a7:e8:5d:98:05:
                    76:10:75:d7:e5:28:9e:68:fc:70:fc:15:2a:5d:75:
                    64:6e:7e:c8:4f:03:d7:db:c5:bf:61:07:a7:59:1b:
                    4a:64:20:e4:47:b2:f8:1c:c8:21:26:bb:2c:3c:58:
                    78:d8:9d:6e:76:8b:9e:0e:c7:63:2e:47:f4:31:19:
                    01:7f:80:1e:d4:29:59:5c:0a:28:d1:df:8f:ea:fb:
                    52:99:0c:ca:a0:93:26:d2:7b:7b:b4:09:b7:c5:a4:
                    3d:0e:88:68:e2:62:b8:ac:47:0a:b3:9a:41:31:78:
                    32:12:f9:5b:75:7d:77:17:30:f0:b9:bb:0a:17:34:
                    a5:48:71:1b:23:97:89:ee:4b:f3:21:be:92:c8:b6:
                    56:1e:4b:99:b3:d2:05:6d:d4:2d:2c:f1:ad:64:0d:
                    f0:27:43:b5:f3:9c:b4:72:82:f2:39:a9:cc:4a:4c:
                    79:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:40:6F:A3:A4:89:6F:27:7E:DB:CF:06:97:1C:8A:35:10:98:D6:6B
            X509v3 Authority Key Identifier:
                keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/6031B83AE89211EFA8EA2645C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.24.0/24
                IPv6:
                  2001:df5:2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:67:1c:c8:d6:b2:c4:0b:e3:99:86:e1:67:1f:34:f9:74:89:
         6a:a7:c7:62:31:ab:10:dc:77:c3:a9:7c:6d:e4:bd:1a:d4:90:
         e2:0f:5d:5c:71:b0:09:fd:28:42:65:15:5b:77:bf:91:61:b4:
         6d:c3:d4:32:01:e8:bf:05:a7:cb:ac:af:53:53:1b:87:20:68:
         f1:42:38:eb:7f:1f:eb:c7:83:97:35:77:5d:3f:39:50:67:a3:
         02:56:c1:03:77:4e:38:3a:85:63:bc:5b:f6:0a:5c:7c:7e:86:
         04:96:8d:8a:b1:57:36:43:c8:52:79:f1:1e:c6:42:18:fa:c5:
         8a:86:7b:9d:41:4c:4f:ca:80:9d:3b:8c:e0:39:d1:aa:93:e6:
         40:0f:34:09:f1:36:89:b3:9a:e0:0d:db:16:3d:55:3b:4a:48:
         1f:ff:2b:76:04:2d:f3:c6:06:08:ef:5b:f8:1e:ef:cc:7b:65:
         80:d3:46:99:1d:dd:6e:06:53:f3:e0:cd:a9:7a:ae:40:8e:29:
         b1:e0:22:25:5e:66:af:3d:04:de:7d:c8:72:86:77:a1:da:37:
         76:e2:2c:fa:b9:27:12:26:3f:8c:4e:62:b5:3b:55:7c:95:9b:
         40:27:1e:d2:54:b6:7c:a4:a0:13:d3:94:a9:e1:9a:cf:e7:e8:
         bb:de:00:f1
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M1MTIxMTAvBgNVBAUTKDhFNUVBRTRDMDNCQzNCMzQ1QkU3OEY4QzhFOUE0M0I3
Rjk4RTMzQTYwHhcNMjYwMjA5MDYyNTE0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2MyOC0zMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvH3S5rrZdmNsDW1YYmT02LuL+H7USOVGSlf2ZYjqTtWErqDAM9579QzjgSCu
oaQtUpPd2BdY4+XAcHMaqf8WjNAd8Eq6Dv/BB4/I6mk2jJY4x2zPp+hdmAV2EHXX
5SieaPxw/BUqXXVkbn7ITwPX28W/YQenWRtKZCDkR7L4HMghJrssPFh42J1udoue
DsdjLkf0MRkBf4Ae1ClZXAoo0d+P6vtSmQzKoJMm0nt7tAm3xaQ9Doho4mK4rEcK
s5pBMXgyEvlbdX13FzDwubsKFzSlSHEbI5eJ7kvzIb6SyLZWHkuZs9IFbdQtLPGt
ZA3wJ0O185y0coLyOanMSkx5YQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFC1Ab6Ok
iW8nftvPBpccijUQmNZrMB8GA1UdIwQYMBaAFI5erkwDvDs0W+ePjI6aQ7f5jjOm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzUxMi9BMThBQkYyOEUz
QTMxMUVGQjhFQjhDNTFDNEY5QUUwMi9qbDZ1VEFPOE96UmI1NC1NanBwRHRfbU9N
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2psNnVUQU84T3pSYjU0LU1qcHBEdF9tT002WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0M1MTIvQTE4QUJGMjhFM0EzMTFFRkI4RUI4QzUxQzRGOUFFMDIvNjAzMUI4M0FF
ODkyMTFFRkE4RUEyNjQ1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAoz0YMA8EAgACMAkDBwAgAQ31AsAwDQYJKoZIhvcNAQELBQADggEB
AA5nHMjWssQL45mG4WcfNPl0iWqnx2IxqxDcd8OpfG3kvRrUkOIPXVxxsAn9KEJl
FVt3v5FhtG3D1DIB6L8Fp8usr1NTG4cgaPFCOOt/H+vHg5c1d10/OVBnowJWwQN3
Tjg6hWO8W/YKXHx+hgSWjYqxVzZDyFJ58R7GQhj6xYqGe51BTE/KgJ07jOA50aqT
5kAPNAnxNomzmuAN2xY9VTtKSB//K3YELfPGBgjvW/ge78x7ZYDTRpkd3W4GU/Pg
zal6rkCOKbHgIiVeZq89BN59yHKGd6HaN3biLPq5JxImP4xOYrU7VXyVm0AnHtJU
tnykoBPTlKnhms/n6LveAPE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:50:55 2026 by rpki-client