Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
File:                     318FB51A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          cR3YLJTaJB1UEeMod2G2IzGpTxjgWQxKqLHSOOJJ9ow=
Subject key identifier:   2F:81:82:0C:7F:D9:6D:82:3F:86:50:B6:F6:E3:DA:1C:BE:FB:D9:89
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       373E
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
Signing time:             Fri 27 Feb 2026 05:54:11 +0000
ROA not before:           Tue 30 Dec 2025 15:10:06 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135534
IP address blocks:        61.45.249.0/24 maxlen: 24
                          2401:4601:249::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 14:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14142 (0x373e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:06 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a13183-3753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:7f:9a:96:0f:11:cc:54:86:79:ab:a3:c6:9e:
                    de:43:aa:8c:08:93:34:3e:18:39:82:45:1f:a3:3c:
                    df:37:73:95:55:e4:4a:93:1d:32:3e:46:2e:63:db:
                    66:a2:7a:ef:87:ac:f9:18:cf:d1:02:8c:96:e7:c4:
                    00:18:ce:2e:ba:c1:40:01:24:b4:2d:e2:d7:7a:2b:
                    19:49:ce:f7:c2:93:3b:22:25:ef:f5:32:b9:ce:fd:
                    8d:5e:1f:16:e8:77:e1:a3:43:b1:a8:c7:6b:45:69:
                    29:f7:93:9b:cd:24:d9:3d:ad:e1:01:3d:90:58:06:
                    88:0a:0d:6c:ee:63:0c:7e:1e:a2:6c:d7:f9:e9:e9:
                    4d:91:d9:99:e6:f9:87:da:63:32:e6:7c:43:98:81:
                    83:72:0e:a4:c5:29:cb:1d:49:56:84:9e:1e:fb:fe:
                    e7:3e:01:15:5b:60:5e:b4:23:2c:c2:d0:36:cd:51:
                    17:ca:ab:32:34:ed:a7:e4:0e:77:d0:b5:cc:d4:01:
                    2e:e9:20:ba:49:02:0b:c2:8b:2b:24:6d:51:4a:ed:
                    61:d6:f6:c1:14:38:dc:c4:b5:51:e7:4b:6f:5c:59:
                    10:04:b8:f3:1b:a1:72:b2:f4:d2:9a:b5:b2:44:46:
                    49:dd:b3:d9:d8:f6:33:3a:69:81:1f:1c:b2:73:0d:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:81:82:0C:7F:D9:6D:82:3F:86:50:B6:F6:E3:DA:1C:BE:FB:D9:89
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.249.0/24
                IPv6:
                  2401:4601:249::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:bc:03:00:16:d2:09:2f:6c:1a:fb:44:6e:c4:c2:c3:0f:29:
         d8:74:f0:47:4b:89:b3:e4:f3:54:12:b4:89:ac:c8:7c:af:62:
         03:b1:a4:a8:ea:4c:c4:d6:25:77:22:a6:7f:0c:1e:8f:1b:c1:
         f7:95:be:10:77:e6:8e:82:db:7a:2f:ef:7d:a1:9f:e4:ad:a8:
         33:bd:5e:89:4d:3c:e9:5b:7c:df:06:04:e2:96:9a:71:04:43:
         64:ac:ea:3a:29:07:7f:32:1d:7c:12:4a:12:2d:d6:9d:92:49:
         5d:30:e0:02:22:27:cb:a5:0a:a3:db:aa:f2:44:b0:7f:2c:8f:
         65:d2:cc:5c:80:5b:c2:dc:2e:2b:5d:e2:13:84:e9:84:3d:86:
         eb:b8:1f:fd:ec:ac:68:a8:19:d0:28:8a:67:87:42:3f:4b:8d:
         8f:95:29:9e:44:8c:31:cd:49:be:4d:66:74:86:50:97:73:2f:
         b1:2e:1e:4b:9a:ab:21:5f:0e:4f:56:df:e1:7b:53:3f:ba:8f:
         c4:23:b5:2e:37:46:e2:c1:80:d9:bc:67:96:a8:83:24:bc:33:
         03:4e:4d:87:6b:27:c7:5b:d2:b0:d7:66:6e:a5:cb:f8:20:5c:
         dc:d6:9d:a5:e4:2a:6e:4b:27:ee:71:1f:67:2d:66:1b:e5:7d:
         aa:96:ad:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:09 2026 by rpki-client