Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/6031B83AE89211EFA8EA2645C4F9AE02.roa
File:                     6031B83AE89211EFA8EA2645C4F9AE02.roa (raw, json)
Hash identifier:          0bbqE0Ywtm6F4pBcNrl8Gt4k3gAlL0JBT20eG8UN6+Q=
Subject key identifier:   45:3B:97:B0:0C:9D:00:1E:A6:E2:89:A0:7E:20:38:22:59:A8:5D:AD
Certificate issuer:       /CN=A917C512/serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
Certificate serial:       C0
Authority key identifier: 8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/6031B83AE89211EFA8EA2645C4F9AE02.roa
Signing time:             Mon 09 Feb 2026 06:25:14 +0000
ROA not before:           Mon 09 Feb 2026 06:25:14 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     137655
IP address blocks:        163.61.24.0/24 maxlen: 24
                          2001:df5:2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl
                          rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C512, serialNumber=8E5EAE4C03BC3B345BE78F8C8E9A43B7F98E33A6
        Validity
            Not Before: Feb  9 06:25:14 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69897dca-6151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:13:49:f4:34:e5:a6:48:e6:2e:d1:54:ad:8c:
                    26:0f:6a:2c:1c:99:bf:d6:a2:53:51:4b:2a:69:85:
                    37:9d:ca:7b:50:af:9a:34:ae:82:79:ad:00:00:0a:
                    c7:7b:28:60:51:37:bd:47:64:e8:0d:8e:62:f9:39:
                    a2:ca:61:98:b8:cf:c6:46:41:d5:6e:61:42:44:4b:
                    1b:30:cd:fc:da:5e:23:1d:cd:b3:74:32:b3:df:95:
                    14:fa:c2:5f:4d:69:58:27:9e:f2:91:27:63:aa:46:
                    d9:a4:61:87:b1:a0:88:fd:ad:c5:1d:a1:45:3c:55:
                    7d:49:67:18:fa:a8:95:0c:a8:30:ab:c4:9f:1c:ae:
                    4b:f9:8c:fe:e9:c8:39:ad:19:ce:9b:89:f8:10:21:
                    9e:e9:90:30:02:e5:55:2d:89:ca:37:82:15:91:dd:
                    b7:db:85:ca:e7:85:76:f9:dd:1d:2c:03:1b:ee:eb:
                    e8:1c:de:66:29:43:60:4e:a4:6b:20:d3:c8:55:4c:
                    6f:e4:5e:bb:db:79:78:3c:f0:c0:34:82:12:6d:d8:
                    85:e4:f8:69:6b:63:66:e0:c2:88:e0:0f:a2:58:6b:
                    4a:2d:14:47:fd:3b:79:74:18:82:60:03:68:5c:21:
                    92:5e:45:ad:36:64:e0:3b:28:c6:52:8e:7c:bc:25:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3B:97:B0:0C:9D:00:1E:A6:E2:89:A0:7E:20:38:22:59:A8:5D:AD
            X509v3 Authority Key Identifier:
                keyid:8E:5E:AE:4C:03:BC:3B:34:5B:E7:8F:8C:8E:9A:43:B7:F9:8E:33:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/jl6uTAO8OzRb54-MjppDt_mOM6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jl6uTAO8OzRb54-MjppDt_mOM6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C512/A18ABF28E3A311EFB8EB8C51C4F9AE02/6031B83AE89211EFA8EA2645C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.24.0/24
                IPv6:
                  2001:df5:2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:fa:5c:16:0f:ef:45:bd:eb:a1:8b:6f:e4:a7:08:50:1b:b2:
         71:c5:9e:aa:6f:99:16:97:41:47:c4:f7:c9:b5:ec:1f:5f:38:
         21:e9:af:5b:fc:a5:8b:99:15:0b:3f:ac:84:47:c6:06:e1:9f:
         ca:72:da:a9:d4:19:c5:d1:d2:8c:37:c8:ee:6d:96:4e:85:42:
         4a:92:3f:ac:8b:95:5d:e8:8a:97:fb:06:4f:14:89:95:a0:1f:
         24:a5:83:32:ba:71:20:69:cd:5a:4a:e1:c3:90:7e:fc:71:9e:
         ad:bd:e7:44:e1:a7:3c:66:a3:11:fe:a9:4f:7e:86:df:9d:fa:
         c8:e9:4a:a0:a3:79:35:38:3b:01:7b:6b:85:48:f8:1c:9e:a4:
         c2:53:a4:df:57:f3:ea:9d:a8:46:52:1d:b1:bb:45:da:17:1d:
         e2:8c:3b:32:6f:ff:c2:eb:d3:42:01:45:4c:4d:84:63:67:5a:
         3c:29:51:6a:d6:c6:a2:d4:c7:29:21:48:1e:58:1b:73:8e:12:
         d5:71:a8:cb:7f:85:fc:71:b0:5e:09:26:4a:83:ea:e5:f8:60:
         b5:6b:4a:1b:57:6f:62:f1:69:85:d0:9b:e9:05:fe:b7:9e:1e:
         5f:1c:a0:be:9f:2d:61:e4:98:7f:02:9c:1a:09:5b:ea:69:33:
         b4:8e:9a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:22:35 2026 by rpki-client