Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/F5568448F11C11F0AC52AD484D6F56BC.roa
File:                     F5568448F11C11F0AC52AD484D6F56BC.roa (raw, json)
Hash identifier:          FSRnxAS3d/oxWCt/mXgTvn1rm5+e0wMamnNqPiiIkGI=
Subject key identifier:   98:0C:61:AB:42:E0:8F:86:A8:62:B4:55:64:E6:9D:2E:5E:65:7B:17
Certificate issuer:       /CN=A9116B0C/serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
Certificate serial:       25
Authority key identifier: D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/F5568448F11C11F0AC52AD484D6F56BC.roa
Signing time:             Tue 03 Mar 2026 08:45:44 +0000
ROA not before:           Tue 03 Mar 2026 08:45:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     150178
IP address blocks:        163.61.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl
                          rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:57:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116B0C, serialNumber=D5B16768914A80C93124629610CC40502AAED0E9
        Validity
            Not Before: Mar  3 08:45:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a69fb7-8a05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:3f:fe:bf:8f:67:36:2c:73:51:ae:47:09:
                    b8:70:3e:99:e1:68:f3:7d:57:7a:b6:a9:77:ff:5f:
                    58:b5:63:e4:be:fe:de:27:8c:a0:66:aa:ac:52:78:
                    a8:c5:97:59:ff:d9:3b:89:b4:10:e8:21:ee:0d:0b:
                    c4:85:ca:bb:1d:08:72:f6:ce:93:f4:6e:30:81:cc:
                    43:00:7e:3c:ac:dd:60:c6:86:cf:9d:d4:1a:36:e0:
                    39:de:0a:93:d1:25:92:30:1a:66:60:41:1f:a6:5e:
                    b6:22:65:26:01:52:0d:d0:18:68:fa:7a:af:ba:eb:
                    c7:65:11:04:7f:98:30:03:4a:40:7d:6c:5c:8a:1c:
                    68:ac:0c:0d:92:0f:32:d8:85:10:3c:3e:50:47:7c:
                    bc:41:f2:f5:f4:af:1f:d2:84:f1:07:b1:2a:cf:08:
                    3a:e6:3d:5d:be:6f:ac:f9:f9:9f:ec:12:51:7a:07:
                    51:ed:86:ff:3f:02:17:a5:ad:44:3e:49:67:29:ae:
                    8b:68:19:1d:a9:05:be:ed:fc:91:31:8b:4b:02:f3:
                    dd:50:ff:69:34:c9:e3:be:bf:b9:d6:4e:9f:b0:a4:
                    10:02:b5:a2:ab:b4:d3:52:40:10:4f:fb:98:43:05:
                    89:26:9e:61:84:02:58:c1:15:a4:2e:0b:16:42:b8:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:0C:61:AB:42:E0:8F:86:A8:62:B4:55:64:E6:9D:2E:5E:65:7B:17
            X509v3 Authority Key Identifier:
                keyid:D5:B1:67:68:91:4A:80:C9:31:24:62:96:10:CC:40:50:2A:AE:D0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bFnaJFKgMkxJGKWEMxAUCqu0Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116B0C/B61386E6F11C11F0A38F28474D6F56BC/F5568448F11C11F0AC52AD484D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:bf:a4:0b:05:4d:dc:16:a4:ee:90:3a:47:1c:35:b5:ac:23:
         e6:03:7e:69:61:57:9e:6b:4b:d1:64:67:e5:58:89:bd:eb:78:
         45:9a:13:3e:90:12:15:79:7a:30:9d:2c:fa:21:13:ec:3e:e4:
         b0:38:bc:e9:eb:b1:43:99:c7:33:0b:7e:49:9f:b0:60:b4:a7:
         a4:e9:bb:a5:e0:ef:68:2e:01:1f:86:a1:5d:5f:1e:fb:2b:5e:
         88:44:e7:f9:25:7c:55:2d:be:44:e4:33:b3:4f:18:12:53:d8:
         e4:53:b9:01:20:a0:d4:0e:65:4c:d0:22:55:1e:33:31:7d:67:
         34:93:a7:56:bc:e5:4d:d2:a8:b0:ad:05:25:2d:57:0c:af:b2:
         07:77:70:62:7f:29:c1:07:fb:96:1a:a0:64:cb:89:0a:6c:a8:
         29:ac:28:63:b6:31:c3:01:3c:f6:32:be:1a:fd:bc:2c:24:4c:
         b1:6c:b6:06:26:51:06:30:20:68:7b:53:6b:5b:2e:ac:a1:9e:
         0a:99:2c:b7:91:7d:18:be:87:22:4f:c6:0b:63:17:2f:13:d1:
         33:f8:9c:a0:8c:29:ab:31:b9:87:7a:49:40:fd:f4:c4:b9:37:
         de:36:ec:ae:da:92:c2:b8:44:87:48:a7:01:b4:23:0c:8d:c5:
         ec:c5:83:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:32:55 2026 by rpki-client