Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
File:                     61F1288A76B311ECABA1A612C4F9AE02.roa (raw, json)
Hash identifier:          z7KyT6HnbJ6UMz7BQC748vvaSmuWe8c14BvsShCGtbY=
Subject key identifier:   31:E6:A1:A6:9A:97:D3:BA:02:8A:D5:AA:FE:B9:DD:16:CD:BC:5F:17
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       048F
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:21:25 +0000
ROA not before:           Tue 18 Nov 2025 23:15:26 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147298
IP address blocks:        103.174.138.0/23 maxlen: 24
                          2400:12a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
                          rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:39:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1167 (0x48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: Nov 18 23:15:26 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a44b65-74ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b4:1e:34:e0:a7:77:da:3c:75:5a:be:8d:d9:
                    84:35:1b:fd:6a:fa:a2:00:82:99:ae:42:16:2a:b8:
                    82:58:2e:6f:36:cf:ee:d8:10:e2:b8:cd:b4:80:7b:
                    9e:08:8f:76:e2:69:ad:98:3b:ff:2a:34:75:3b:2b:
                    ea:3e:78:a4:75:e9:70:f8:b3:63:ac:44:16:ec:ad:
                    3e:f1:4a:aa:0d:8b:c8:36:2d:53:30:fb:c6:d1:f9:
                    cf:1b:43:65:ad:d1:94:74:e6:25:4e:10:27:21:e9:
                    bf:a4:f3:36:17:46:57:ba:a0:b1:35:c6:7d:49:62:
                    5b:1b:12:9e:7c:78:8a:e7:cd:ed:84:d5:5f:4f:4a:
                    65:96:6a:cc:a6:6c:d9:a1:5e:27:ba:fc:dd:15:a5:
                    c5:d3:e7:85:48:fe:f5:3d:5d:4d:89:b3:6b:75:cf:
                    4c:37:6f:fc:f4:c2:01:da:1d:f3:6e:e6:89:0d:d0:
                    a0:f4:b7:44:f6:77:1f:ba:6a:c2:10:b5:cc:c1:dc:
                    09:e3:c6:9e:ea:25:d6:0a:1e:fd:d9:3a:2a:3f:09:
                    78:8a:fe:95:4e:fd:9c:be:28:af:e6:29:e5:b6:17:
                    23:7b:e6:9e:e7:15:f6:de:93:7f:25:a0:bc:06:16:
                    2d:f4:b1:85:2b:3c:91:c9:f9:5d:ed:fe:c5:b7:cb:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E6:A1:A6:9A:97:D3:BA:02:8A:D5:AA:FE:B9:DD:16:CD:BC:5F:17
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/61F1288A76B311ECABA1A612C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.138.0/23
                IPv6:
                  2400:12a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:08:15:f4:ea:a9:ce:b1:74:03:b1:3e:1c:0e:d4:c9:20:8c:
         84:ed:af:96:c0:7d:e8:b5:64:ff:bb:e9:8a:8b:86:4e:6e:b8:
         99:2f:80:52:2f:bc:61:f1:64:61:7a:4c:73:76:99:d9:5e:91:
         7d:5a:4f:3d:34:6d:b9:ee:1e:ab:c7:ce:bb:cc:db:ce:d7:19:
         24:60:37:ab:54:39:d2:e1:ff:3c:59:6d:ac:65:21:ba:86:ec:
         02:6c:a8:11:7b:9c:b4:c3:5f:7e:6d:58:9c:7c:37:70:83:bc:
         c4:40:88:30:40:42:78:3c:8c:00:fc:22:bd:6c:28:07:c2:28:
         b7:43:4a:16:61:3f:a9:1e:5b:a7:2f:f6:ce:d8:73:99:12:bd:
         1e:92:73:fb:72:ae:0a:8a:ee:ad:08:d1:ad:28:aa:35:44:ed:
         be:4d:09:d1:cc:0e:70:ba:3b:08:93:f4:46:9e:56:c9:e8:4a:
         37:ba:17:1f:14:25:8a:f9:21:5a:bc:af:88:1c:54:b4:da:db:
         2b:24:9f:5c:98:39:00:99:e7:4c:d8:54:48:fd:ed:f9:93:14:
         82:1b:b6:48:74:a8:42:51:99:f8:dd:6a:f1:95:f1:12:d7:3a:
         31:99:5d:15:1c:d4:4d:c2:11:47:38:29:f5:70:76:76:71:60:
         38:d9:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:20:09 2026 by rpki-client