Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/2BC5B6DAC69611F194B8834B7111F970.roa
File:                     2BC5B6DAC69611F194B8834B7111F970.roa (raw, json)
Hash identifier:          l6E+NO7rV+S1inJ+Ff2+NFGP9pfO2g3rTHbJ1giXQOY=
Subject key identifier:   88:A7:75:60:87:2D:19:7B:06:FB:F6:3D:02:49:E5:3C:2C:00:47:31
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0F0C
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/2BC5B6DAC69611F194B8834B7111F970.roa
Signing time:             Mon 12 Oct 2026 23:39:31 +0000
ROA not before:           Mon 12 Oct 2026 23:39:31 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     56683
IP address blocks:        61.15.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 06:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3852 (0xf0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Oct 12 23:39:31 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6acd6fb3-5b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:8f:ba:4e:47:9f:19:10:92:a9:62:61:c6:
                    d4:7f:53:97:6d:95:d5:82:02:ed:04:c1:a9:7b:cd:
                    bd:d9:fa:7e:2d:5f:1d:82:21:2b:b5:df:b3:03:e0:
                    7b:79:ae:74:cd:b2:11:20:af:f6:59:92:42:60:e4:
                    fe:74:54:60:d8:e9:11:5b:22:9d:49:ef:27:34:f6:
                    e3:27:2d:57:f6:62:8b:37:63:01:e0:35:eb:f3:e6:
                    38:73:7d:2a:2b:d8:34:b2:aa:64:d5:86:1e:9e:fd:
                    f0:d6:3f:04:ff:94:5e:e2:02:07:50:22:11:69:90:
                    11:f9:30:ad:3d:23:a2:b4:96:99:91:85:30:3b:8f:
                    9a:a0:0c:fc:d3:1a:0e:63:54:90:42:99:58:8c:00:
                    72:86:29:10:b5:3c:3b:51:37:b1:11:df:b8:d9:9b:
                    59:89:ec:81:1c:a6:fb:44:d9:bf:c2:c8:05:2e:57:
                    3b:a1:e5:4e:56:d5:2c:0b:3d:44:2a:3b:f5:78:12:
                    f0:48:d6:e7:39:68:85:78:1f:91:b5:21:39:ec:e5:
                    3f:35:c4:ca:15:12:d8:57:30:af:65:01:44:4c:7d:
                    92:48:b8:61:dd:f6:47:2d:f4:d8:9b:a4:7e:53:83:
                    4a:66:e2:33:95:d5:3d:ea:dc:f6:7e:ed:bb:74:cc:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:75:60:87:2D:19:7B:06:FB:F6:3D:02:49:E5:3C:2C:00:47:31
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/2BC5B6DAC69611F194B8834B7111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.15.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:9a:ba:c9:49:a7:83:c7:21:e5:a2:c1:e6:9f:ab:52:68:16:
         7b:41:12:c2:39:65:31:fb:b8:e9:60:bf:d5:df:af:e4:f6:54:
         12:df:be:47:41:a3:13:7d:85:bd:80:76:5b:9a:cc:ea:f7:34:
         03:ca:f2:b9:b0:3f:d3:82:56:0a:4a:a8:87:b7:23:99:cb:fa:
         b6:9e:97:42:96:c6:9a:36:3e:75:4b:bc:6a:e5:4a:87:52:da:
         bb:01:d5:d0:86:03:d2:4a:8d:ee:be:f5:73:2d:55:bb:d9:26:
         a2:b9:d9:15:97:3c:0e:a7:63:9a:c8:81:eb:1e:bd:03:97:23:
         b2:2c:98:fd:6b:9d:8e:a2:c0:63:48:55:4e:2b:ff:b6:b0:6b:
         95:13:26:17:fb:08:c5:fe:20:fa:b6:73:48:b3:42:59:3d:08:
         90:90:3c:3f:c4:49:0e:79:34:01:da:0f:53:6b:95:76:7b:35:
         49:62:ed:4e:fc:ab:a2:8b:95:0a:00:21:2d:d3:7e:0c:41:23:
         2e:75:22:f7:13:c4:01:10:64:de:80:4a:50:e8:26:73:af:ed:
         88:9c:4f:2d:21:8e:fa:27:6f:c7:90:a0:c2:55:a3:ca:04:29:
         3c:37:c2:ca:02:19:01:55:3b:f7:51:c2:8a:9c:11:da:b8:52:
         0f:e4:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:25 2026 by rpki-client