Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/BC6277B8700211F19DFE431193A30FBC.roa
File:                     BC6277B8700211F19DFE431193A30FBC.roa (raw, json)
Hash identifier:          GSeqy5s5t10nUG8tqKIEN6PcxnTZQTa977Nxb8Hr8hw=
Subject key identifier:   CA:FF:EB:ED:11:F3:4F:32:0E:E3:1F:70:D7:57:F1:B6:E3:B2:71:CD
Certificate issuer:       /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial:       0147
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/BC6277B8700211F19DFE431193A30FBC.roa
Signing time:             Wed 24 Jun 2026 19:27:28 +0000
ROA not before:           Wed 24 Jun 2026 19:27:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     134886
IP address blocks:        163.61.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
        Validity
            Not Before: Jun 24 19:27:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a3c2fa0-398b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:79:33:77:3f:1d:dd:2d:09:60:a9:7a:81:5c:
                    d6:65:ca:bb:01:d0:c4:5b:f1:1c:fc:74:51:18:67:
                    fa:16:75:b5:96:00:2e:b5:5f:ef:ca:34:69:9e:3a:
                    72:b7:f9:7c:8f:13:75:b5:88:3a:c5:05:c1:af:72:
                    d5:85:bc:fe:fa:75:bd:28:a2:3e:67:1c:ff:dd:d1:
                    c7:b4:2e:49:cd:04:f1:22:4c:01:63:b1:0c:85:91:
                    7f:a6:08:db:f6:d3:a1:7d:1c:9d:fa:d8:e3:9b:12:
                    64:d0:4a:3d:4d:c1:ca:97:75:8c:d4:e9:3e:a7:84:
                    e1:de:e2:39:b9:ac:80:62:93:89:e4:be:52:59:eb:
                    9c:9d:7a:0e:4e:7b:2e:05:58:b2:e3:4f:f0:07:39:
                    68:79:d0:07:f2:f5:87:f7:cd:08:73:4c:cf:22:2e:
                    c2:a2:7b:99:1c:d7:18:60:ba:d6:0e:9d:b6:cd:30:
                    28:4f:ed:28:93:9b:84:a3:a2:92:7c:18:7c:02:77:
                    d8:03:28:e2:95:af:71:86:34:60:84:bc:0d:82:11:
                    f8:af:e4:27:61:bc:84:c2:2b:10:65:88:cc:15:34:
                    b7:7a:7d:2f:57:47:b2:99:20:65:63:8d:23:91:2c:
                    6a:07:1e:1b:63:9a:4d:8d:49:b3:4b:79:1d:39:d8:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FF:EB:ED:11:F3:4F:32:0E:E3:1F:70:D7:57:F1:B6:E3:B2:71:CD
            X509v3 Authority Key Identifier:
                keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/BC6277B8700211F19DFE431193A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:ac:e5:d3:8c:8f:72:71:da:87:72:5d:9a:c8:59:7a:e1:
         44:80:45:d6:97:c5:f1:ca:df:b4:05:57:e4:3e:90:a5:46:dc:
         1e:6b:c3:2a:2b:39:b3:a4:c6:ce:20:54:6a:15:5c:fd:73:49:
         14:8f:bd:c4:5e:34:8a:5e:70:2d:08:c9:65:98:d7:ec:cf:a9:
         16:2e:cb:ce:3a:53:6e:5d:4d:a5:96:40:56:06:31:f2:78:48:
         77:7b:53:aa:19:c1:3e:25:c4:e0:e1:b8:52:43:30:95:d0:8c:
         7c:09:4f:37:39:35:02:ca:f9:db:b3:0f:18:9d:8d:8f:3c:6a:
         e6:1e:32:ee:3d:02:5e:ae:0f:2d:67:62:41:bf:52:1b:fb:0b:
         ef:06:11:ab:f6:16:c0:e2:dc:35:1b:f9:ea:14:8b:81:3e:96:
         f3:ec:55:06:db:f6:0a:aa:6d:9b:3d:f0:49:a6:e3:7b:d4:c1:
         0a:ba:5e:6e:11:12:b5:38:ab:85:8b:8a:7b:e7:ca:5c:a5:43:
         4d:49:15:43:27:f2:28:58:b7:a3:2c:dd:a7:d1:b9:8f:06:8c:
         42:fe:fc:c6:b9:c7:40:a7:81:81:75:83:26:23:c4:60:04:7b:
         de:b6:ac:1c:24:16:6f:36:71:d4:4c:e4:53:0a:f8:85:fb:33:
         2d:fe:bf:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:20 2026 by rpki-client