Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
File:                     253C821A388611ECBE8F7725C4F9AE02.roa (raw, json)
Hash identifier:          W4I7YPOuWVvwmHp1ZJLPAJvoqNMOXVHgJ7mR8552CZw=
Subject key identifier:   3F:15:E9:39:B8:37:70:47:15:CD:98:C1:BF:85:AF:6B:08:4E:BA:F8
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       27DD
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:51:44 +0000
ROA not before:           Sat 10 May 2025 16:03:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     147055
IP address blocks:        124.109.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10205 (0x27dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: May 10 16:03:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ac0-793c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:f5:94:41:5e:dd:1c:b7:0a:f9:5c:cc:37:
                    8b:fd:8c:b7:ce:f2:8b:61:35:6c:d7:b1:ac:a8:8d:
                    51:90:17:4b:73:cb:8a:45:69:ae:0a:99:b0:aa:04:
                    c9:e1:a9:a8:a6:35:79:4e:85:a7:e4:c8:c2:a1:bb:
                    b8:58:d5:a3:f3:81:34:0a:6d:37:a0:07:3b:57:78:
                    5d:c1:c8:f0:fe:52:14:fd:52:81:9f:59:e9:d7:1b:
                    40:48:e2:01:b7:1b:b1:56:58:d5:38:3b:be:71:86:
                    da:10:0e:ee:da:0b:67:a2:d5:fd:80:95:8f:c3:ad:
                    02:96:41:f0:50:85:f4:36:dc:2c:0d:39:66:e2:a2:
                    97:da:fb:2c:8a:b6:0e:4c:70:ec:11:64:9b:21:44:
                    c9:ea:4d:1e:86:ed:91:52:c5:de:9d:2f:db:f5:29:
                    6f:fc:59:e0:bd:aa:e8:b9:7e:03:08:fb:02:c4:1b:
                    4f:f7:4f:ca:44:3c:ff:5b:ee:8a:6f:e5:1c:40:47:
                    f7:7b:f8:ae:56:a1:b2:61:ac:94:80:a1:66:99:9c:
                    57:53:89:c7:a0:3e:d1:23:e5:94:de:c9:fc:34:23:
                    6e:f6:f1:71:c5:f0:37:67:95:df:1e:72:2a:2e:a3:
                    d0:e8:34:a4:aa:d1:3b:d7:ea:c1:f5:20:a8:66:73:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:15:E9:39:B8:37:70:47:15:CD:98:C1:BF:85:AF:6B:08:4E:BA:F8
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:13:4e:ef:f2:bd:a0:da:b4:9a:f7:71:45:d2:29:b7:aa:b8:
         92:5a:20:3d:90:32:85:7e:5b:da:53:ae:85:3f:0b:c5:ac:d1:
         0e:af:a8:e9:e9:1e:e1:25:b4:19:83:0f:8b:d0:54:56:4b:d0:
         e1:fa:01:36:84:53:f0:bf:57:1e:83:b3:8c:63:f9:c6:41:8f:
         48:f2:9f:8b:06:e4:b8:db:3f:f6:41:74:58:22:cb:12:4d:81:
         73:96:c1:27:1f:96:e8:d5:2a:95:a5:e8:da:c8:c4:0f:5c:af:
         3a:d8:ed:ca:07:76:3a:3e:a8:3f:5e:16:ed:60:7b:a6:dc:48:
         be:a6:62:b7:f8:25:0e:9f:b4:57:7c:b1:40:49:bd:c0:a2:28:
         01:3e:1a:20:8c:fb:1d:8b:bf:9c:0d:f3:2e:d3:74:61:7d:09:
         3a:ef:c5:87:86:39:ff:45:35:3f:34:82:e0:4c:1e:48:14:d4:
         8f:ea:79:1e:94:be:58:74:42:bd:9f:b8:e0:aa:97:18:58:96:
         62:ce:4e:d1:62:cf:16:53:f7:2c:06:55:da:9c:ca:08:ee:d1:
         08:f3:3b:2d:0c:1b:fb:96:ee:ef:95:bd:95:cf:4d:09:1a:93:
         00:a3:c4:b9:41:db:84:b1:ba:ff:26:da:df:3c:33:91:b7:c4:
         c9:5b:8a:a0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICJ90wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjUwNTEwMTYwMzQ5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OGFjMC03OTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqBT1lEFe3Ry3CvlczDeL/Yy3zvKLYTVs17GsqI1RkBdLc8uKRWmuCpmwqgTJ
4amopjV5ToWn5MjCobu4WNWj84E0Cm03oAc7V3hdwcjw/lIU/VKBn1np1xtASOIB
txuxVljVODu+cYbaEA7u2gtnotX9gJWPw60ClkHwUIX0NtwsDTlm4qKX2vssirYO
THDsEWSbIUTJ6k0ehu2RUsXenS/b9Slv/FngvarouX4DCPsCxBtP90/KRDz/W+6K
b+UcQEf3e/iuVqGyYayUgKFmmZxXU4nHoD7RI+WU3sn8NCNu9vFxxfA3Z5XfHnIq
LqPQ6DSkqtE71+rB9SCoZnNE/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD8V6Tm4
N3BHFc2Ywb+Fr2sITrr4MB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYyMkYvNjk3NTQ4QzhEQUNDMTFFNEE4MUFCRTUwQzRGOUFFMDIvMjUzQzgyMUEz
ODg2MTFFQ0JFOEY3NzI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAfG0/MA0GCSqGSIb3DQEBCwUAA4IBAQAoE07v8r2g2rSa93FF0im3
qriSWiA9kDKFflvaU66FPwvFrNEOr6jp6R7hJbQZgw+L0FRWS9Dh+gE2hFPwv1ce
g7OMY/nGQY9I8p+LBuS42z/2QXRYIssSTYFzlsEnH5bo1SqVpejayMQPXK862O3K
B3Y6Pqg/XhbtYHum3Ei+pmK3+CUOn7RXfLFASb3AoigBPhogjPsdi7+cDfMu03Rh
fQk678WHhjn/RTU/NILgTB5IFNSP6nkelL5YdEK9n7jgqpcYWJZizk7RYs8WU/cs
BlXanMoI7tEI8zstDBv7lu7vlb2Vz00JGpMAo8S5QduEsbr/JtrfPDORt8TJW4qg
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:24:41 2026 by rpki-client