Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa
File:                     1501E24625F511EF8F342F3EC4F9AE02.roa (raw, json)
Hash identifier:          cToJq782Wf6wX2fDAC0v0G/IJhWX3VFDQW8/8JM0qWc=
Subject key identifier:   07:8F:6D:DA:ED:15:1B:F9:66:9D:23:33:E5:AA:7D:D5:EC:93:74:84
Certificate issuer:       /CN=A9188F77/serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
Certificate serial:       0160
Authority key identifier: 16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:30:38 +0000
ROA not before:           Tue 01 Jul 2025 06:44:21 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136433
IP address blocks:        163.223.76.0/24 maxlen: 24
                          202.61.110.0/24 maxlen: 24
                          2001:df4:4a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl
                          rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F77, serialNumber=16315A68A745080BDDB6C8F0156D043068931B57
        Validity
            Not Before: Jul  1 06:44:21 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a590fe-33c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:7d:df:49:b8:1c:5b:8c:7e:7a:ef:b1:95:
                    16:e8:44:2c:a3:5c:56:53:53:60:65:4e:d3:20:9f:
                    c8:1b:64:e4:a4:58:06:03:05:d2:89:53:c0:be:3e:
                    55:44:8b:0c:ec:d1:6f:d8:c4:97:4d:94:e4:0e:96:
                    6a:cd:b7:59:79:76:fb:cb:01:03:87:ac:c0:8b:e6:
                    92:fd:25:92:18:f7:78:93:a3:33:8a:b1:36:00:14:
                    68:3f:a8:36:54:6d:bd:24:94:90:b9:dc:2c:f4:db:
                    3a:03:3c:54:74:a9:30:0b:f0:c1:59:c1:3a:0a:47:
                    95:79:f3:10:10:4a:48:72:3b:b1:f4:fa:1b:95:4d:
                    2e:d3:3c:ef:67:5f:61:37:27:d6:18:10:ef:3e:5b:
                    f6:dc:58:5a:e6:60:bb:2d:f0:4f:b9:4f:77:c7:a8:
                    70:fa:fd:1d:f1:cd:0d:29:b0:59:c7:00:0f:76:ff:
                    45:02:30:f3:62:29:10:48:f3:0f:3b:00:84:7a:d3:
                    97:0c:e7:55:b6:7e:7d:70:50:2f:1b:f9:1d:31:3c:
                    c4:30:e8:d5:ba:47:7e:da:03:26:50:ec:b5:96:8c:
                    8a:ec:15:26:3d:37:52:f0:91:9b:24:84:ac:05:90:
                    6f:26:94:94:5d:01:c6:c0:bc:39:44:0c:f6:ca:1e:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8F:6D:DA:ED:15:1B:F9:66:9D:23:33:E5:AA:7D:D5:EC:93:74:84
            X509v3 Authority Key Identifier:
                keyid:16:31:5A:68:A7:45:08:0B:DD:B6:C8:F0:15:6D:04:30:68:93:1B:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/FjFaaKdFCAvdtsjwFW0EMGiTG1c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FjFaaKdFCAvdtsjwFW0EMGiTG1c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F77/CD28738225C111EF90097F5AC4F9AE02/1501E24625F511EF8F342F3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.76.0/24
                  202.61.110.0/24
                IPv6:
                  2001:df4:4a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:4e:c3:cd:1e:77:0a:60:4d:f3:4c:7a:6e:5b:9d:62:35:e6:
         e5:2a:00:e5:3e:bc:f5:56:ce:9a:1c:5f:c0:4f:db:11:02:f2:
         00:49:e7:04:93:da:60:06:9e:f0:26:30:1f:47:b5:f6:26:56:
         5e:0d:e0:37:e1:1b:ca:2c:0b:74:4e:f0:5f:ca:9c:fe:99:7f:
         7c:e7:8c:e8:a2:df:56:57:82:40:fa:c6:53:a5:c1:0e:69:9e:
         bf:7c:47:c1:7c:0b:9f:c0:c2:d9:14:25:d3:80:54:8c:22:d5:
         36:84:f6:29:86:3b:d8:39:eb:8b:c3:f8:d4:7b:a8:00:9c:77:
         61:79:19:0e:ff:16:f4:03:83:89:66:f1:d8:dd:1e:e9:6d:44:
         81:25:b8:72:30:f9:c3:3c:10:43:4e:0c:32:5a:38:ee:d1:57:
         c7:76:bf:a4:8c:a8:e3:97:d6:4f:1f:e5:c5:9d:81:22:7e:29:
         d6:29:cd:e5:2f:90:dc:4f:a9:d1:99:1e:df:12:bc:b3:31:59:
         56:da:53:8a:10:81:37:18:c0:8c:97:17:1c:14:ee:25:a1:3e:
         0c:53:10:f4:0a:73:fd:ed:4b:99:ea:78:c2:99:d4:65:7a:35:
         51:f7:ed:c3:8c:23:dd:ef:99:cd:08:c7:fb:ec:6e:22:18:49:
         f0:9e:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:54 2026 by rpki-client