Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
File:                     318FB51A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          oj2Kxdn6Bq3a+F+RORHkucT1LvSOhks0RntqHfeINjA=
Subject key identifier:   CB:13:40:FD:6F:4D:DC:45:B5:C3:78:C5:C4:4E:47:EE:CE:37:1C:06
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       37E4
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:20:51 +0000
ROA not before:           Tue 30 Dec 2025 15:10:06 +0000
ROA not after:            Thu 30 Apr 2026 00:00:00 +0000
asID:                     135534
IP address blocks:        61.45.249.0/24 maxlen: 24
                          2401:4601:249::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 14:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14308 (0x37e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Dec 30 15:10:06 2025 GMT
            Not After : Apr 30 00:00:00 2026 GMT
        Subject: CN=69a49193-9b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:73:30:10:1c:9d:8a:84:14:29:63:f4:96:
                    3e:f5:d3:6f:f2:6d:7a:41:af:00:38:dc:82:16:54:
                    09:6c:ef:41:47:e4:31:39:45:de:16:62:bc:bc:d6:
                    69:75:fb:30:9a:ac:5f:94:2c:74:f8:89:01:b2:db:
                    f9:ee:69:dd:a1:89:16:3f:34:a7:82:f4:c7:52:9b:
                    e4:58:be:bf:57:cc:87:c8:db:c4:3f:c6:33:6e:49:
                    43:c3:6d:d0:76:40:4c:f5:eb:12:50:ba:be:eb:49:
                    02:ac:6a:93:b0:95:83:2a:90:88:a3:e3:77:ed:be:
                    b1:7d:e6:20:de:a0:84:29:a7:48:7f:53:84:ad:19:
                    ff:e2:0b:6a:0c:1b:78:82:eb:40:74:30:e3:0d:18:
                    cf:fe:21:0e:ec:ba:bf:c9:4d:97:e9:62:e6:0c:2a:
                    fa:71:46:f5:5f:45:82:b5:82:11:35:6a:95:41:cc:
                    ab:10:c7:64:d5:4f:97:63:f8:ec:f0:ca:a4:89:ac:
                    be:dc:9b:75:f0:64:1a:b2:de:a4:d7:20:3d:1e:b8:
                    e6:97:22:ee:80:45:fb:3b:0c:9d:2b:51:47:51:22:
                    7f:be:90:00:8b:17:18:7a:e4:7d:0c:1e:9d:59:95:
                    6e:06:64:40:9d:25:d4:ed:7d:35:8d:ca:22:30:83:
                    94:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:13:40:FD:6F:4D:DC:45:B5:C3:78:C5:C4:4E:47:EE:CE:37:1C:06
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.249.0/24
                IPv6:
                  2401:4601:249::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:18:b1:0b:2d:f9:b9:7c:f3:bb:3f:b1:dd:0c:f6:64:79:59:
         bf:eb:8f:c5:60:15:40:b8:75:79:26:7b:59:88:1d:ec:cf:45:
         32:f8:d5:97:ff:8f:35:7c:da:1c:df:30:f6:c3:35:f4:d1:5d:
         f4:ea:91:ba:04:b9:24:10:d2:d3:7f:b3:67:79:a2:86:11:16:
         75:79:80:52:a9:d5:b0:5a:ad:da:a6:aa:37:b2:4c:c8:85:00:
         df:ca:7b:ef:98:46:cf:a2:bb:f2:c4:84:8c:46:5d:75:60:19:
         75:4b:36:d3:a0:76:47:75:40:9a:c8:55:94:12:43:bc:88:66:
         3e:f2:10:e4:4b:08:57:dd:73:b0:ef:c9:95:65:c1:f1:7d:39:
         63:16:cc:d3:a6:80:58:e8:49:b0:a0:27:41:f2:a4:61:b9:7a:
         b5:ed:a8:3a:b2:6f:93:43:f3:75:ea:43:f0:e9:7d:46:bf:84:
         38:30:ba:7c:d3:4b:53:9d:a5:24:c1:f2:d8:80:4f:06:97:a2:
         37:f9:02:c5:cd:52:92:74:41:77:e9:dd:41:4d:0d:58:57:31:
         5b:50:f6:35:b0:fd:f2:5f:51:ae:6e:e8:32:30:fc:de:d3:18:
         72:5a:3d:91:32:83:23:4b:f9:28:7e:62:9c:ea:cc:8a:bd:0e:
         2f:a8:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 17:24:49 2026 by rpki-client