Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
File:                     5FCE01D8EDFA11EF8193933AC4F9AE02.roa (raw, json)
Hash identifier:          VVrV7jvsQ36nCZSxe/dX4uftVXST3hoj5p0k5ak5K3s=
Subject key identifier:   EB:6E:90:6A:54:AF:4E:F0:0C:27:A8:23:46:C7:5D:39:64:77:B4:00
Certificate issuer:       /CN=A9140562/serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
Certificate serial:       C9
Authority key identifier: B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:09:38 +0000
ROA not before:           Fri 13 Feb 2026 05:25:17 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153587
IP address blocks:        163.61.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl
                          rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140562, serialNumber=B9FADC41E7E1F9756C7BC9B3DE3972CBF6CF60B5
        Validity
            Not Before: Feb 13 05:25:17 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a59a22-47c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:de:6d:0e:2c:39:89:8e:eb:3f:e0:00:28:
                    b1:09:5e:d0:ed:43:48:d2:d2:d8:31:b4:17:74:6d:
                    d6:76:13:4c:fb:1e:3c:27:b9:2f:80:fb:5d:23:b0:
                    04:14:0c:04:45:fd:de:4e:30:7d:cb:cf:52:28:5d:
                    b4:ca:e5:b4:a7:fa:ba:5f:96:0f:3e:28:c8:25:30:
                    6c:38:08:8f:aa:2b:5c:bc:b5:26:d8:84:b2:1c:12:
                    50:cb:c8:eb:bb:fe:52:1c:ef:67:2a:6c:de:87:55:
                    37:57:73:a6:db:a2:6a:be:4f:52:98:71:54:45:8a:
                    6e:d8:00:29:b5:d3:ab:98:eb:07:ac:6c:3d:1b:6c:
                    1d:85:97:3b:d6:cc:0a:ce:c6:45:7b:1c:0b:03:4a:
                    44:08:fa:6e:de:0e:c3:eb:29:d6:30:48:f7:74:b3:
                    d8:2e:c0:1f:69:02:13:ab:fa:a7:01:c8:f6:8f:2e:
                    ad:01:a0:0b:8c:f3:54:53:8a:95:b0:cb:99:ad:48:
                    4b:44:f4:d8:4f:21:52:28:9d:31:57:30:6c:8a:39:
                    05:dd:6b:40:97:4f:80:34:54:45:8c:a8:58:8e:25:
                    0f:71:2c:91:a6:dc:04:c8:78:05:04:14:31:e0:be:
                    6d:41:c0:5a:c8:e8:4d:e3:de:59:47:91:f5:76:0a:
                    16:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6E:90:6A:54:AF:4E:F0:0C:27:A8:23:46:C7:5D:39:64:77:B4:00
            X509v3 Authority Key Identifier:
                keyid:B9:FA:DC:41:E7:E1:F9:75:6C:7B:C9:B3:DE:39:72:CB:F6:CF:60:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/ufrcQefh-XVse8mz3jlyy_bPYLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ufrcQefh-XVse8mz3jlyy_bPYLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140562/66C3C97EEDF911EFA9CDA838C4F9AE02/5FCE01D8EDFA11EF8193933AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:68:4c:e2:3f:f0:25:53:4d:7f:fd:b3:0b:ea:c8:7b:44:31:
         47:ba:56:2e:b3:5b:25:32:e2:3b:53:b3:c0:73:41:04:83:7d:
         cc:f3:c2:2f:bb:05:e5:09:ba:0c:2d:c8:d1:f5:2b:cc:b9:d9:
         9b:fe:7b:19:e2:8c:5e:69:9f:d6:e3:0d:72:8e:1d:7c:c7:b9:
         f3:ab:c4:aa:c0:0c:bd:43:a3:ee:f0:9b:a6:15:2e:6d:6a:cb:
         a3:6a:97:b4:4e:a3:2c:9f:cb:84:72:81:af:e8:23:44:0d:98:
         dd:53:d0:c4:91:90:11:2d:fb:d2:31:57:b9:e1:e2:73:e6:af:
         db:bf:51:f1:b0:21:12:37:4b:6c:9a:2a:91:4c:a1:6b:34:e1:
         8b:b1:04:5d:b8:37:db:3f:4b:00:ee:6a:a9:10:b0:de:6b:57:
         d3:74:21:fa:71:7f:c5:bb:ae:33:e8:46:7a:2d:11:27:7d:b7:
         9d:cf:18:74:8d:27:23:ba:af:a4:64:50:c9:1a:aa:48:ca:6a:
         76:53:2a:05:a8:fc:51:27:b3:c4:37:8a:63:13:b2:97:48:f7:
         ab:44:42:a8:c8:69:10:e8:92:7a:7f:1e:96:cd:73:49:f1:55:
         94:67:94:07:6b:21:8d:47:8a:1f:f9:39:e7:1c:f4:21:31:26:
         b1:c8:ad:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:16:11 2026 by rpki-client