Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
File:                     BCAE5314F75C11EB95BE8C87C4F9AE02.roa (raw, json)
Hash identifier:          8d/EsyvXZ0sZ4UIJJOhDUVw09qD8ry/nM19Udtp/aCs=
Subject key identifier:   49:03:C1:BC:D6:41:12:8A:C9:03:91:F6:45:94:6D:DF:D8:74:B5:6D
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       27DE
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:51:45 +0000
ROA not before:           Sat 10 May 2025 16:03:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17557
IP address blocks:        124.109.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:08:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10206 (0x27de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: May 10 16:03:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48ac1-ea50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:aa:57:66:35:f5:7c:26:4c:11:5b:46:47:07:
                    01:84:8e:72:84:e7:0c:93:1b:24:52:3b:02:50:ba:
                    6b:70:c8:08:75:89:8f:10:20:52:88:27:7d:d7:59:
                    99:1f:79:c5:d8:3a:63:ec:a3:85:0c:58:5e:3d:03:
                    7f:0f:74:a2:de:02:49:0e:07:b7:3a:c9:6b:d3:dc:
                    31:6d:37:49:71:79:88:49:db:dc:93:06:11:a1:e9:
                    58:8b:bb:57:e2:ae:1a:dd:b2:7a:80:33:15:7a:00:
                    4a:88:e4:6c:ff:e3:e5:8a:92:25:33:a4:99:7e:92:
                    f5:88:ca:51:cf:d6:ef:1c:81:a3:14:ae:ad:53:84:
                    f1:f0:7d:db:f3:40:7f:eb:4b:68:b2:3d:ab:06:1e:
                    f9:d5:fb:52:0d:43:27:0b:c6:ab:ce:2d:04:60:6c:
                    a2:28:fa:8d:b2:c9:c3:7d:21:d9:2f:8d:83:7f:d9:
                    09:92:18:34:6b:97:4a:a6:14:65:e4:ef:33:29:04:
                    6d:27:8a:e6:7c:7a:c1:f6:7b:16:d6:e0:c1:b3:75:
                    29:04:e8:b6:d7:38:30:51:33:a1:04:2d:49:82:56:
                    1f:45:4b:d2:04:6e:5c:06:1d:5e:29:ca:e8:9d:8c:
                    37:c4:29:fa:0a:a4:ff:5a:2f:0d:b2:85:89:41:5a:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:03:C1:BC:D6:41:12:8A:C9:03:91:F6:45:94:6D:DF:D8:74:B5:6D
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/BCAE5314F75C11EB95BE8C87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:5b:5f:f8:b3:d9:84:d2:e8:d8:50:aa:0a:c0:46:35:1d:73:
         66:1b:d2:b5:28:c2:16:e1:fa:f0:6c:8f:dc:f3:ee:30:26:78:
         3f:d6:64:14:ae:7d:f2:67:4a:b4:f6:78:d1:5d:a4:87:e2:ee:
         8d:99:7d:ca:4b:41:cc:3f:03:2c:10:14:de:87:1e:35:f1:fa:
         49:c0:20:cd:07:10:e1:ff:a2:c9:9b:fe:10:e7:00:de:ff:48:
         fd:0d:04:36:53:18:be:95:62:cf:9c:df:e5:de:e2:f6:a2:3b:
         09:0f:96:83:be:ae:a1:5b:f6:72:d5:f3:f3:cb:c0:37:4b:e0:
         27:5e:7e:53:89:89:b6:ba:b8:61:81:f3:f9:bd:09:29:89:f5:
         94:10:dd:1d:6f:cd:74:ba:68:6b:48:c4:43:17:db:ac:e2:75:
         e0:fd:90:7c:f0:c3:a1:1e:44:ae:60:49:97:fd:60:39:28:66:
         fb:f3:11:08:eb:94:de:10:8d:61:f7:55:ce:fa:5f:35:69:32:
         81:dc:89:95:89:27:06:32:07:91:c7:a6:8b:6b:7d:7f:4f:71:
         76:70:c1:dd:2b:c1:c3:ce:61:fb:3f:f4:27:5b:a6:59:bf:16:
         1a:5e:0b:87:5b:19:05:9e:31:00:ad:20:2a:09:98:83:fe:7e:
         dc:20:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:07:57 2026 by rpki-client