Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/1B3991C85CE811F1AFE8153695833773.roa
File:                     1B3991C85CE811F1AFE8153695833773.roa (raw, json)
Hash identifier:          wrfhOSN4WU5oePSb8Utqu8wSGrzcVc221aulnyrzHQQ=
Subject key identifier:   0E:2F:3E:40:1D:C1:50:50:ED:0C:9A:96:69:3F:E1:DD:3B:AC:C5:9A
Certificate issuer:       /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
Certificate serial:       012B
Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/1B3991C85CE811F1AFE8153695833773.roa
Signing time:             Sun 31 May 2026 11:58:58 +0000
ROA not before:           Sun 31 May 2026 11:58:58 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153606
IP address blocks:        163.61.144.0/24 maxlen: 24
                          2001:df5:17c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl
                          rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 08:36:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F
        Validity
            Not Before: May 31 11:58:58 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a1c2282-3691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:39:6e:0b:b6:3c:e2:6d:78:06:61:7d:c3:85:
                    3c:28:79:f4:62:05:84:cc:a9:6d:40:6e:92:d2:97:
                    12:1e:4b:ae:8a:40:66:78:c7:78:eb:50:c9:c6:79:
                    4b:64:69:01:d1:78:6d:cd:a4:59:51:a6:06:d1:a0:
                    df:3f:d8:c2:fa:f8:75:6f:41:da:73:00:f4:d7:df:
                    9d:d6:74:64:5b:26:75:c3:19:b0:60:fa:d7:55:f9:
                    86:9a:a0:9e:0c:0a:69:3e:41:dd:f0:c6:5e:83:4a:
                    48:90:01:c9:64:9e:0c:eb:8f:ee:70:07:c4:e0:c5:
                    98:2e:48:0a:3a:3b:c8:5e:42:0a:e4:f3:d3:e7:31:
                    7e:3c:00:c0:2d:16:59:64:85:a0:7e:7e:63:e8:7b:
                    47:a2:6e:7d:c1:59:d7:35:50:7a:2f:17:16:68:6d:
                    77:a6:85:77:f3:c8:89:18:96:74:c6:43:1d:38:1a:
                    ec:f9:ff:03:4a:66:67:da:48:85:62:e0:a3:e6:93:
                    e8:e0:6c:7b:07:c4:10:99:16:ba:62:93:70:59:13:
                    80:10:f8:25:ee:be:7b:2f:72:7b:74:5d:0c:ee:b1:
                    09:50:16:e4:13:a0:eb:f1:26:f2:36:3a:9c:15:a2:
                    42:62:fe:5e:fb:73:ea:fb:0c:1f:7a:ff:12:75:13:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:2F:3E:40:1D:C1:50:50:ED:0C:9A:96:69:3F:E1:DD:3B:AC:C5:9A
            X509v3 Authority Key Identifier:
                keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/1B3991C85CE811F1AFE8153695833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.144.0/24
                IPv6:
                  2001:df5:17c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:a5:69:c4:b3:c7:e6:ab:24:dc:bd:d8:96:a0:54:26:68:b8:
         06:03:2a:88:48:75:b4:d0:bf:6e:90:3e:9b:e4:c8:c4:a2:e1:
         a4:a0:fc:9d:4f:d5:28:5f:63:1d:73:0c:23:ed:8f:1b:15:19:
         48:3b:2e:a1:e0:53:f6:06:a6:ad:03:7f:25:d6:a4:b9:c6:e8:
         a9:cf:37:42:44:b4:86:a3:86:70:a7:87:73:66:ab:a0:9d:66:
         3c:82:7e:e4:2d:cd:65:4a:bd:de:a4:9d:df:0a:a8:2d:2e:15:
         18:ee:ee:1d:ee:57:4c:7d:7d:96:e6:b5:05:9d:26:0b:cd:44:
         7f:cd:dc:8b:15:12:93:a0:2f:ac:8e:32:71:d7:c4:2c:33:ae:
         8a:d1:79:34:29:06:0d:af:e5:5e:a6:d7:95:f5:2e:0c:c4:74:
         e9:c6:6f:f5:0f:3e:bc:07:a7:8c:68:77:8d:46:a9:c6:b9:49:
         80:0e:32:d0:b7:24:f9:75:33:7c:6f:1c:ad:8e:9b:b5:69:37:
         3a:ae:c7:d9:ae:85:60:58:6c:5f:fb:26:1e:6f:5d:f0:d5:24:
         db:bd:89:02:fd:4c:e8:a3:c8:a0:fa:66:cc:4e:82:ba:00:ca:
         86:84:e5:2f:d1:bf:06:d2:d2:3e:df:6f:8c:44:49:71:3a:1e:
         3e:39:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:08:19 2026 by rpki-client