Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/60C99716BE5811F1B65E895F6A11F970.roa
File:                     60C99716BE5811F1B65E895F6A11F970.roa (raw, json)
Hash identifier:          8BohF5BmLnooR913bYekp8py0UzdLhm40CmaiC5UsQk=
Subject key identifier:   43:F6:9D:C5:F6:C0:51:7B:BD:56:F8:B2:F6:25:04:12:E8:19:C2:9E
Certificate issuer:       /CN=A91D176D/serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
Certificate serial:       024D
Authority key identifier: AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/60C99716BE5811F1B65E895F6A11F970.roa
Signing time:             Fri 02 Oct 2026 11:57:02 +0000
ROA not before:           Fri 02 Oct 2026 11:57:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     3491
IP address blocks:        61.13.144.0/20 maxlen: 24
                          61.16.36.0/22 maxlen: 24
                          202.52.108.0/22 maxlen: 24
                          203.149.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl
                          rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 03:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 589 (0x24d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D176D, serialNumber=AA0178EA78511A15B1470EBFC0C5721A70E2769F
        Validity
            Not Before: Oct  2 11:57:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6abf9c0d-5023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:6c:74:a6:45:02:07:c9:46:93:af:f1:a0:
                    ed:a4:d1:8f:94:46:1a:8a:3d:79:05:a5:14:73:7e:
                    d5:a0:0a:ba:be:07:87:09:72:2f:aa:66:09:e9:c0:
                    bd:c1:3a:1f:45:79:11:ae:a9:e0:86:e4:7d:5f:9f:
                    8e:aa:e1:a9:2e:0f:1b:72:01:f5:97:03:ae:48:e4:
                    40:67:cc:59:f2:e0:7b:9c:b7:f5:23:9d:c6:78:bb:
                    35:0d:49:a8:01:96:42:64:71:76:28:90:da:db:a0:
                    ee:68:96:c5:8c:4d:89:13:5c:a7:e7:b5:1f:3c:a2:
                    1c:2c:f6:28:fa:85:69:04:cc:19:f8:67:20:a0:a5:
                    9b:25:0b:35:f4:d4:28:13:d3:e9:29:4f:99:7e:d4:
                    28:ea:13:3b:c4:4b:39:d1:c6:7b:65:89:82:f9:8b:
                    8e:3a:ea:81:f0:ef:49:8c:53:d4:55:46:87:d1:11:
                    1b:df:5f:1d:86:44:6e:8b:40:49:0d:91:2b:32:67:
                    45:8c:83:ad:e1:f7:06:37:dd:47:56:80:f0:3a:10:
                    57:ec:af:11:0e:ff:37:99:33:16:55:b0:c0:af:70:
                    88:7b:1b:61:a9:6b:7b:de:8b:f3:5d:53:42:cf:be:
                    1c:2e:09:9f:bc:18:4f:53:14:1d:ff:16:14:3c:00:
                    8c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F6:9D:C5:F6:C0:51:7B:BD:56:F8:B2:F6:25:04:12:E8:19:C2:9E
            X509v3 Authority Key Identifier:
                keyid:AA:01:78:EA:78:51:1A:15:B1:47:0E:BF:C0:C5:72:1A:70:E2:76:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/qgF46nhRGhWxRw6_wMVyGnDidp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgF46nhRGhWxRw6_wMVyGnDidp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D176D/F02A35E8A91411EEB2712D3FC4F9AE02/60C99716BE5811F1B65E895F6A11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.13.144.0/20
                  61.16.36.0/22
                  202.52.108.0/22
                  203.149.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:a9:22:d1:38:03:14:00:c4:0e:5f:22:f6:11:e5:b0:a9:0e:
         de:3a:1f:9c:d7:10:78:c7:02:5a:77:82:cc:1c:e6:52:4e:a0:
         9b:44:b9:5f:47:70:29:eb:22:6a:0e:9e:f9:40:7b:aa:36:2a:
         fc:45:2c:2f:49:a5:20:15:2a:b9:57:9b:9f:0b:f2:18:0c:6d:
         ea:41:dd:e3:dd:64:55:f1:85:6f:70:50:75:cb:71:24:6b:1e:
         20:ba:3b:ce:64:71:14:c3:f3:81:aa:c7:52:7a:83:a2:4e:33:
         dc:b8:ab:df:e6:9e:8a:18:86:6e:5c:87:48:4d:c5:6d:38:a5:
         24:a1:25:a8:63:b6:ff:14:c0:b6:85:c2:a2:be:80:08:d7:a0:
         57:02:ba:7c:73:38:df:ce:26:18:86:ef:88:0f:7b:4d:ea:85:
         cb:b7:e3:3c:1b:91:d1:0f:19:25:5f:3f:cc:14:be:2b:9e:b7:
         46:3d:c3:0d:cf:29:77:20:2c:d8:f3:bd:49:f7:e1:e4:4d:f2:
         eb:76:f7:d9:ab:e7:08:38:5e:1e:a9:e5:2d:5c:60:bb:79:5c:
         c3:eb:12:c8:3b:26:b2:c3:e9:f8:b7:c4:0c:c6:e9:76:27:fc:
         fa:ad:29:40:44:f5:ca:f5:3b:c6:ba:cb:24:2d:e5:36:16:45:
         d6:05:5b:04
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICAk0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE3NkQxMTAvBgNVBAUTKEFBMDE3OEVBNzg1MTFBMTVCMTQ3MEVCRkMwQzU3MjFB
NzBFMjc2OUYwHhcNMjYxMDAyMTE1NzAyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmOWMwZC01MDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2jBsdKZFAgfJRpOv8aDtpNGPlEYaij15BaUUc37VoAq6vgeHCXIvqmYJ6cC9
wTofRXkRrqnghuR9X5+OquGpLg8bcgH1lwOuSORAZ8xZ8uB7nLf1I53GeLs1DUmo
AZZCZHF2KJDa26DuaJbFjE2JE1yn57UfPKIcLPYo+oVpBMwZ+GcgoKWbJQs19NQo
E9PpKU+ZftQo6hM7xEs50cZ7ZYmC+YuOOuqB8O9JjFPUVUaH0REb318dhkRui0BJ
DZErMmdFjIOt4fcGN91HVoDwOhBX7K8RDv83mTMWVbDAr3CIexthqWt73ovzXVNC
z74cLgmfvBhPUxQd/xYUPACMoQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFEP2ncX2
wFF7vVb4svYlBBLoGcKeMB8GA1UdIwQYMBaAFKoBeOp4URoVsUcOv8DFchpw4naf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTc2RC9GMDJBMzVFOEE5
MTQxMUVFQjI3MTJEM0ZDNEY5QUUwMi9xZ0Y0Nm5oUkdoV3hSdzZfd01WeUduRGlk
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FnRjQ2bmhSR2hXeFJ3Nl93TVZ5R25EaWRwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDE3NkQvRjAyQTM1RThBOTE0MTFFRUIyNzEyRDNGQzRGOUFFMDIvNjBDOTk3MTZC
RTU4MTFGMUI2NUU4OTVGNkExMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQEPQ2QAwQCPRAkAwQCyjRsAwQEy5XwMA0GCSqGSIb3DQEBCwUAA4IB
AQCIqSLROAMUAMQOXyL2EeWwqQ7eOh+c1xB4xwJad4LMHOZSTqCbRLlfR3Ap6yJq
Dp75QHuqNir8RSwvSaUgFSq5V5ufC/IYDG3qQd3j3WRV8YVvcFB1y3Ekax4gujvO
ZHEUw/OBqsdSeoOiTjPcuKvf5p6KGIZuXIdITcVtOKUkoSWoY7b/FMC2hcKivoAI
16BXArp8czjfziYYhu+ID3tN6oXLt+M8G5HRDxklXz/MFL4rnrdGPcMNzyl3ICzY
871J9+HkTfLrdvfZq+cIOF4eqeUtXGC7eVzD6xLIOyayw+n4t8QMxul2J/z6rSlA
RPXK9TvGusskLeU2FkXWBVsE
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:50:52 2026 by rpki-client