Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/552A9766DFCD11F19844AB94F965CEF9.roa
File:                     552A9766DFCD11F19844AB94F965CEF9.roa (raw, json)
Hash identifier:          XiJ0Y60XQuH4CYLc8zBvO1K6wbAONR2Y1w/4CvdqjlM=
Subject key identifier:   8F:CE:FF:E0:82:DF:A6:35:E4:F7:36:A3:00:18:69:9B:85:E1:38:84
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0FA2
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/552A9766DFCD11F19844AB94F965CEF9.roa
Signing time:             Sat 14 Nov 2026 01:47:22 +0000
ROA not before:           Sat 14 Nov 2026 01:47:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     218911
IP address blocks:        61.15.206.0/24 maxlen: 24
                          61.15.211.0/24 maxlen: 24
                          61.15.218.0/24 maxlen: 24
                          61.15.220.0/24 maxlen: 24
                          61.15.221.0/24 maxlen: 24
                          61.15.222.0/24 maxlen: 24
                          61.18.132.0/24 maxlen: 24
                          61.18.145.0/24 maxlen: 24
                          61.18.166.0/24 maxlen: 24
                          61.18.167.0/24 maxlen: 24
                          61.18.168.0/24 maxlen: 24
                          61.18.176.0/24 maxlen: 24
                          61.18.192.0/24 maxlen: 24
                          61.18.194.0/24 maxlen: 24
                          61.18.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 19:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4002 (0xfa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Nov 14 01:47:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6af7bda9-1ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:14:dd:79:c5:fc:65:e4:a2:e0:1b:b4:81:
                    42:ca:8a:d2:5c:5e:de:91:44:7f:d0:30:a3:be:de:
                    ff:06:d4:ba:99:21:72:c5:03:a9:45:fe:f4:8d:16:
                    17:8f:bb:cb:7f:87:ec:07:69:64:58:12:34:c7:11:
                    0d:12:00:a6:70:1a:f2:6e:62:b2:95:69:9f:0c:ed:
                    71:de:74:55:17:7e:cf:48:d5:a8:9d:70:c0:b9:e0:
                    79:d3:17:d5:ad:bb:78:18:03:59:bb:fb:60:e7:4c:
                    00:f5:10:2e:f7:ea:2d:3b:5d:79:07:3b:2d:6d:d8:
                    62:68:7a:39:6e:1c:dd:61:07:80:ff:76:a9:a0:e3:
                    14:bb:99:79:df:14:8a:2d:b4:ec:64:ac:20:a7:da:
                    53:b3:01:09:dd:6d:09:a6:92:68:a8:61:5d:33:f5:
                    b9:08:91:3f:dc:19:db:5d:0f:d0:30:be:4b:92:59:
                    ba:2d:f1:14:8b:90:0d:a4:31:1e:e7:ad:c3:f3:55:
                    f8:1b:72:82:0c:c5:ed:3f:7b:4a:59:5e:da:4e:fa:
                    1e:47:c3:b4:fd:94:a8:94:73:6f:c8:c9:1a:80:57:
                    33:4a:6a:ae:3b:63:8d:7f:2b:68:57:14:24:ae:51:
                    8a:11:12:84:8d:7b:a7:41:ab:a4:07:ca:c4:db:17:
                    74:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:CE:FF:E0:82:DF:A6:35:E4:F7:36:A3:00:18:69:9B:85:E1:38:84
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/552A9766DFCD11F19844AB94F965CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.15.206.0/24
                  61.15.211.0/24
                  61.15.218.0/24
                  61.15.220.0-61.15.222.255
                  61.18.132.0/24
                  61.18.145.0/24
                  61.18.166.0-61.18.168.255
                  61.18.176.0/24
                  61.18.192.0/24
                  61.18.194.0/24
                  61.18.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:33:e2:fb:18:d2:44:16:63:3d:2c:57:0f:e4:ef:0e:4d:5a:
         55:89:76:a7:79:95:b0:63:06:4c:2f:5e:fd:98:b8:0b:4b:18:
         1b:c2:05:95:8a:11:fa:84:56:a8:dc:a8:18:30:51:96:c0:c8:
         9a:06:ef:c4:a2:49:15:c6:27:59:58:34:95:7a:68:a6:3e:fa:
         ee:fd:92:28:84:e6:4f:40:84:ee:e8:bb:64:ad:73:6b:c6:31:
         90:8b:27:51:dd:1d:44:f5:d4:44:1c:d0:fd:67:d4:07:80:e1:
         cd:3a:ae:2f:df:11:00:28:08:54:3d:6a:2c:23:60:51:1f:b7:
         ba:d6:3a:96:ff:e4:9a:f0:8c:31:1e:ef:bc:02:d5:e7:e6:00:
         97:f5:7e:20:37:28:1a:20:93:1a:e7:11:5e:49:04:36:e8:0b:
         e0:5a:bf:37:fd:cf:79:13:32:29:5a:b7:f4:28:26:85:4a:9e:
         d4:86:df:c4:45:34:ef:69:f6:82:36:3a:c0:5d:8f:9d:69:a1:
         1e:56:48:5e:0c:87:f2:1c:de:07:07:85:50:9b:0b:48:99:98:
         5c:ed:43:eb:f7:10:be:fa:b2:ab:00:40:42:01:ce:68:5e:d8:
         bb:ee:eb:c6:ad:da:6c:c7:e7:e7:6d:2b:b5:85:bf:c8:54:ab:
         c1:fc:1c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:33 2026 by rpki-client