Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/F25DC9C8288411F19363B461A9833773.roa
File:                     F25DC9C8288411F19363B461A9833773.roa (raw, json)
Hash identifier:          f8nTmJngREHF+Tyal/8UmF8eD+wG+XF24t9/tA3xKk4=
Subject key identifier:   6E:71:FB:F3:16:47:E7:3D:A3:E2:BD:06:7E:34:6B:3D:69:7B:22:D0
Certificate issuer:       /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial:       DE
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/F25DC9C8288411F19363B461A9833773.roa
Signing time:             Fri 03 Apr 2026 06:41:43 +0000
ROA not before:           Fri 03 Apr 2026 06:41:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        163.61.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
        Validity
            Not Before: Apr  3 06:41:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf6127-e713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:cb:d3:76:31:2b:25:c5:ce:27:6a:67:40:
                    1e:4e:45:8e:92:9e:e2:90:55:68:4d:b6:e9:b3:6a:
                    47:75:29:3b:a8:eb:7e:d0:29:11:fe:1a:8b:bc:b4:
                    18:0e:6b:e7:19:22:0c:f0:88:1b:6c:a3:c2:1a:8f:
                    5c:83:c6:d0:25:c3:03:bd:8a:7d:fb:26:80:f8:ef:
                    3c:a8:38:19:bd:d8:54:c0:8f:a0:3e:ba:16:50:27:
                    a6:ff:bd:69:9e:dc:b1:26:8f:19:e2:2a:8a:9e:23:
                    82:b1:8d:c9:b7:13:93:89:5d:6b:8a:33:94:2e:64:
                    33:14:9d:37:9b:29:e0:95:c5:1a:e1:bf:7b:95:6e:
                    c9:83:81:a6:7e:a5:8c:c5:b0:fa:1d:52:4b:9f:7b:
                    9d:a7:a7:4b:6d:b3:be:fc:4f:ad:e4:ea:9d:7c:38:
                    8c:42:2c:12:41:88:de:28:b7:fe:3f:c0:d5:e2:e2:
                    6a:65:b3:03:c0:56:9b:0b:c1:25:dc:96:db:21:d7:
                    a9:32:7e:44:0e:46:a4:af:76:16:97:95:4d:ce:c8:
                    1e:f5:51:f3:ae:73:64:84:a8:8a:c4:ff:01:d5:63:
                    da:4d:b6:cc:7c:19:f7:c1:33:2a:80:0c:57:62:23:
                    f1:eb:14:de:78:cb:c8:96:06:ef:e6:d7:53:ab:0b:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:71:FB:F3:16:47:E7:3D:A3:E2:BD:06:7E:34:6B:3D:69:7B:22:D0
            X509v3 Authority Key Identifier:
                keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/F25DC9C8288411F19363B461A9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:96:7b:3e:f0:07:ef:0c:e2:60:bf:9b:1c:1c:99:ac:79:
         9c:38:e1:93:68:5d:a0:4d:bd:56:b3:75:8c:ba:ff:a9:6e:89:
         7b:f6:43:c2:79:19:a8:86:e0:65:00:3e:39:0f:90:4f:67:0a:
         e6:b0:46:a6:fc:cc:2b:dc:d6:a7:c3:eb:56:66:f1:5f:04:43:
         4d:59:7c:5c:87:33:02:b4:9a:97:7f:19:23:db:05:6b:50:c2:
         47:e9:8a:8f:69:6d:09:02:c4:fa:75:16:28:35:f8:1d:e6:97:
         a4:50:7a:92:e4:2b:fb:21:f9:da:ab:e4:46:47:4d:5e:e8:23:
         7f:03:3d:b8:24:4d:89:a2:5c:4a:b7:3b:1a:29:93:9a:82:1f:
         55:34:fc:01:c7:15:28:e5:4a:12:db:98:2a:39:58:d6:8d:35:
         0f:d9:a7:4d:23:ec:bd:fa:1c:a0:da:0b:69:c7:e2:bf:41:0e:
         99:f8:a6:06:93:dd:d3:26:58:94:d6:65:fe:86:55:cb:82:72:
         20:9b:67:5a:07:18:e9:46:47:de:f7:a6:49:f9:8d:b5:2b:93:
         4e:c5:3f:7e:a0:af:a7:e3:93:5b:f9:72:57:e2:43:45:95:68:
         74:f6:e5:43:b5:1b:ab:d4:e1:8b:89:5f:c7:31:b8:eb:49:e1:
         1a:6a:b3:b0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJBNzUxMTAvBgNVBAUTKEJDNzBGMzc0QjcyOEM3QjcxMUMyNEE2ODI3Rjc0NzdB
NDJCMjJBNEQwHhcNMjYwNDAzMDY0MTQzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWNmNjEyNy1lNzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtizL03YxKyXFzidqZ0AeTkWOkp7ikFVoTbbps2pHdSk7qOt+0CkR/hqLvLQY
DmvnGSIM8IgbbKPCGo9cg8bQJcMDvYp9+yaA+O88qDgZvdhUwI+gProWUCem/71p
ntyxJo8Z4iqKniOCsY3JtxOTiV1rijOULmQzFJ03mynglcUa4b97lW7Jg4GmfqWM
xbD6HVJLn3udp6dLbbO+/E+t5OqdfDiMQiwSQYjeKLf+P8DV4uJqZbMDwFabC8El
3JbbIdepMn5EDkakr3YWl5VNzsge9VHzrnNkhKiKxP8B1WPaTbbMfBn3wTMqgAxX
YiPx6xTeeMvIlgbv5tdTqwsBIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG5x+/MW
R+c9o+K9Bn40az1peyLQMB8GA1UdIwQYMBaAFLxw83S3KMe3EcJKaCf3R3pCsipN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkE3NS9FRjVDRDZEQUY1
MzkxMUVGQjA5RkM4M0RDNEY5QUUwMi92SER6ZExjb3g3Y1J3a3BvSl9kSGVrS3lL
azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZIRHpkTGNveDdjUndrcG9KX2RIZWtLeUtrMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDJBNzUvRUY1Q0Q2REFGNTM5MTFFRkIwOUZDODNEQzRGOUFFMDIvRjI1REM5Qzgy
ODg0MTFGMTkzNjNCNDYxQTk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoz29MA0GCSqGSIb3DQEBCwUAA4IBAQCSLZZ7PvAH7wziYL+bHByZ
rHmcOOGTaF2gTb1Ws3WMuv+pbol79kPCeRmohuBlAD45D5BPZwrmsEam/Mwr3Nan
w+tWZvFfBENNWXxchzMCtJqXfxkj2wVrUMJH6YqPaW0JAsT6dRYoNfgd5pekUHqS
5Cv7Ifnaq+RGR01e6CN/Az24JE2JolxKtzsaKZOagh9VNPwBxxUo5UoS25gqOVjW
jTUP2adNI+y9+hyg2gtpx+K/QQ6Z+KYGk93TJliU1mX+hlXLgnIgm2daBxjpRkfe
96ZJ+Y21K5NOxT9+oK+n45Nb+XJX4kNFlWh09uVDtRur1OGLiV/HMbjrSeEaarOw
-----END CERTIFICATE-----
Generated at Mon Apr 6 12:22:18 2026 by rpki-client