Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/F68ED40E37FA11F083B5FC7DC4F9AE02.roa
File:                     F68ED40E37FA11F083B5FC7DC4F9AE02.roa (raw, json)
Hash identifier:          LGAnpxIq6v9ru8enX5aeLUAvERRx7j41eDi/HDqmBzU=
Subject key identifier:   F3:62:06:D2:31:38:06:07:D5:19:58:C8:FD:60:51:E8:53:8D:C8:F8
Certificate issuer:       /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
Certificate serial:       94
Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/F68ED40E37FA11F083B5FC7DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:08:47 +0000
ROA not before:           Fri 23 May 2025 17:25:47 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     31898
IP address blocks:        163.61.104.0/24 maxlen: 24
                          2001:df5:12c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl
                          rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:46:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882
        Validity
            Not Before: May 23 17:25:47 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3f40f-ab1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:2a:74:6b:17:5d:7c:e9:41:ba:97:ec:b2:
                    fe:4b:cd:2f:36:21:2c:fd:d9:43:3f:3c:b0:5e:c5:
                    fd:cd:73:15:16:0a:f8:b8:3b:99:08:a1:33:5a:29:
                    0f:4c:1d:d8:62:1b:c6:f5:e2:a7:f7:54:c2:b2:cc:
                    18:e1:8c:0d:69:fc:cd:29:36:a4:f0:a1:8e:a1:1f:
                    a8:88:97:4a:64:ce:a8:95:26:17:09:86:bf:2e:a4:
                    44:ea:5d:a1:a5:97:20:ed:c1:0d:6a:45:a6:cf:b0:
                    24:74:59:0b:7e:b8:99:b7:b4:7f:32:08:a5:fa:36:
                    f9:20:fc:8d:2b:31:51:9a:28:75:eb:de:a7:39:e6:
                    21:66:9f:b8:1e:56:0e:0c:56:cc:67:31:2d:3e:d2:
                    47:02:20:d2:99:88:1c:21:c8:4a:0b:cf:01:35:2c:
                    81:6d:f1:2e:61:3d:2d:40:a1:d9:dc:05:10:5b:aa:
                    b9:27:84:a9:31:7e:4f:64:88:45:ae:e0:71:07:14:
                    48:e9:9e:aa:ec:2a:9c:2e:87:4f:7a:6d:e6:02:7a:
                    6d:c8:7e:6c:92:93:e7:1f:2c:14:ff:a8:51:46:06:
                    ed:25:1b:69:be:b5:8b:0c:6b:b6:8d:57:1b:03:e4:
                    f6:dc:4f:4d:eb:f0:b6:a3:6f:23:14:00:58:24:52:
                    58:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:62:06:D2:31:38:06:07:D5:19:58:C8:FD:60:51:E8:53:8D:C8:F8
            X509v3 Authority Key Identifier:
                keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/F68ED40E37FA11F083B5FC7DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.104.0/24
                IPv6:
                  2001:df5:12c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:07:4e:70:ab:6d:d3:6a:b0:0c:36:8a:9a:fa:ca:4a:66:
         b7:da:23:8d:c7:5d:0a:cb:93:ed:3f:d5:12:b3:0a:48:ca:3a:
         84:2d:28:e7:93:43:6b:4c:fd:2f:6e:ee:6e:f9:61:ca:7c:4d:
         80:9e:6d:7b:56:08:c4:60:52:d7:3a:7b:16:e9:88:c3:ac:f1:
         72:52:ca:75:91:a1:3f:52:2f:55:1c:4f:88:e6:45:44:af:1c:
         aa:ae:b0:ec:a8:6a:8c:84:70:0e:05:c4:7a:79:3f:43:e9:c9:
         76:39:5e:84:55:45:2e:3b:55:50:67:bd:fd:58:6e:a6:75:ab:
         c6:19:7d:08:82:0a:99:2a:2b:27:68:dd:0c:0e:d9:5c:4b:6a:
         97:98:d1:61:a6:2a:91:9c:23:33:2d:1f:05:d6:99:0f:6d:66:
         57:72:50:1b:6d:f1:74:a8:a7:26:54:54:3b:3d:af:6c:6e:aa:
         1f:76:c9:5f:4e:91:8c:d3:99:11:fc:7a:b1:ea:03:ea:37:65:
         df:9a:9d:5a:16:ec:0a:72:20:45:aa:ce:f5:00:e7:fe:95:2a:
         c0:e0:30:0b:8c:9c:17:66:fb:21:26:c6:10:08:a6:38:52:cd:
         9c:ae:3b:cd:fa:8a:5e:70:53:69:21:3f:f8:1b:2b:80:a4:e3:
         b1:a0:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:57:28 2026 by rpki-client