Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
File:                     253C821A388611ECBE8F7725C4F9AE02.roa (raw, json)
Hash identifier:          msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=
Subject key identifier:   9C:42:A6:1E:49:4E:03:84:59:3D:F0:77:C8:AA:02:36:A7:80:3B:46
Certificate issuer:       /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial:       2808
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 16:19:38 +0000
ROA not before:           Tue 28 Apr 2026 16:19:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147055
IP address blocks:        124.109.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
                          rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10248 (0x2808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
        Validity
            Not Before: Apr 28 16:19:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f0de1a-f52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b7:74:f1:9a:38:54:23:83:e4:57:6c:26:2f:
                    ec:f2:63:e6:7d:d5:22:ea:ab:83:39:1b:ca:5e:20:
                    9f:24:bd:b2:78:b4:b3:33:d5:b3:21:97:fe:dc:d0:
                    43:13:fd:21:12:ad:0e:af:98:60:73:69:50:e5:66:
                    b1:c6:c9:d0:84:92:16:10:cd:8f:95:8e:64:db:0b:
                    c3:ba:f3:a8:96:e7:1b:9e:fd:93:59:03:82:6a:75:
                    0e:b2:fe:bd:1f:da:b2:6c:47:ab:fe:7a:7a:03:52:
                    5d:a4:dd:92:31:16:c2:21:7d:48:ac:d2:22:04:3b:
                    84:49:6b:86:88:08:70:36:a3:ae:ad:5c:b3:d6:61:
                    d9:e3:ad:cb:2a:d9:06:db:6b:34:7e:67:a6:cb:22:
                    e2:ec:39:d9:fa:15:a3:06:ad:ad:6b:e2:a4:47:9c:
                    df:e4:e4:e1:54:22:f1:e6:05:c0:a9:a5:18:7c:94:
                    bc:a5:8b:ca:9c:e7:8f:6f:bd:ad:e4:eb:e9:61:f5:
                    fc:4c:f6:e7:05:7f:c5:d4:56:33:6a:d5:b2:df:57:
                    2c:48:6c:76:9a:22:51:83:a1:7a:66:2a:58:72:26:
                    57:1e:ac:67:7a:ea:9f:da:c6:ab:a1:bb:28:8a:75:
                    9a:b5:cc:d5:fe:41:61:c2:79:16:9a:14:1b:0d:75:
                    06:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:42:A6:1E:49:4E:03:84:59:3D:F0:77:C8:AA:02:36:A7:80:3B:46
            X509v3 Authority Key Identifier:
                keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/253C821A388611ECBE8F7725C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:bd:ab:68:95:89:3e:a4:b1:c1:85:d4:92:98:da:b2:54:f4:
         93:83:ec:b3:e6:8d:ed:34:65:dc:ed:33:4e:a8:1a:ba:ab:c4:
         ca:5b:11:95:76:b4:6e:2a:05:79:62:f8:01:d9:a5:e7:e0:f4:
         ef:e5:15:7f:0f:28:d6:ff:13:b8:3d:ba:3f:43:0b:ea:2c:08:
         84:d0:90:12:07:87:8e:b8:6d:90:2d:af:f6:4d:4b:78:20:3f:
         95:2c:2f:5c:63:26:ba:25:4c:03:d8:d2:56:95:96:6b:04:1d:
         d1:15:4a:01:71:a2:c9:de:f1:8f:eb:42:a0:75:96:c6:35:c8:
         60:cc:5a:a8:f8:f1:62:23:48:e9:45:85:57:80:0c:d9:1e:28:
         9d:aa:64:9f:00:f7:9e:f1:22:91:b5:c7:d5:be:ea:38:7d:4b:
         87:d3:1d:b9:80:de:de:30:bf:1b:90:b7:c4:9d:de:75:5d:14:
         2c:f4:6d:d7:9e:99:e9:9b:ef:0d:02:32:d2:1e:28:f1:0b:39:
         a1:a4:0a:5c:63:5d:b7:c5:3a:8d:c5:e7:97:35:2a:81:d7:cd:
         24:fe:a3:fa:aa:fe:25:06:a0:ce:b6:dd:b0:42:01:c8:81:19:
         db:e7:f3:4c:d4:ef:3b:86:d9:c0:fc:be:7b:44:08:68:97:8c:
         eb:60:fc:12
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICKAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMkYxMTAvBgNVBAUTKEUwOEFDNTUwMEUxRkYxOEZENUQ1MkI3OTdDNTA5N0RE
MEFCOTRCRTUwHhcNMjYwNDI4MTYxOTM4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYwZGUxYS1mNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgbd08Zo4VCOD5FdsJi/s8mPmfdUi6quDORvKXiCfJL2yeLSzM9WzIZf+3NBD
E/0hEq0Or5hgc2lQ5WaxxsnQhJIWEM2PlY5k2wvDuvOolucbnv2TWQOCanUOsv69
H9qybEer/np6A1JdpN2SMRbCIX1IrNIiBDuESWuGiAhwNqOurVyz1mHZ463LKtkG
22s0fmemyyLi7DnZ+hWjBq2ta+KkR5zf5OThVCLx5gXAqaUYfJS8pYvKnOePb72t
5OvpYfX8TPbnBX/F1FYzatWy31csSGx2miJRg6F6ZipYciZXHqxneuqf2sarobso
inWatczV/kFhwnkWmhQbDXUG0QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJxCph5J
TgOEWT3wd8iqAjangDtGMB8GA1UdIwQYMBaAFOCKxVAOH/GP1dUreXxQl90KuUvl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIyRi82OTc1NDhDOERB
Q0MxMUU0QTgxQUJFNTBDNEY5QUUwMi80SXJGVUE0ZjhZX1YxU3Q1ZkZDWDNRcTVT
LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJckZVQTRmOFlfVjFTdDVmRkNYM1FxNVMtVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTYyMkYvNjk3NTQ4QzhEQUNDMTFFNEE4MUFCRTUwQzRGOUFFMDIvMjUzQzgyMUEz
ODg2MTFFQ0JFOEY3NzI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAfG0/MA0GCSqGSIb3DQEBCwUAA4IBAQBPvatolYk+pLHBhdSSmNqy
VPSTg+yz5o3tNGXc7TNOqBq6q8TKWxGVdrRuKgV5YvgB2aXn4PTv5RV/DyjW/xO4
Pbo/QwvqLAiE0JASB4eOuG2QLa/2TUt4ID+VLC9cYya6JUwD2NJWlZZrBB3RFUoB
caLJ3vGP60KgdZbGNchgzFqo+PFiI0jpRYVXgAzZHiidqmSfAPee8SKRtcfVvuo4
fUuH0x25gN7eML8bkLfEnd51XRQs9G3Xnpnpm+8NAjLSHijxCzmhpApcY123xTqN
xeeXNSqB180k/qP6qv4lBqDOtt2wQgHIgRnb5/NM1O87htnA/L57RAhol4zrYPwS
-----END CERTIFICATE-----
Generated at Wed May 13 05:15:52 2026 by rpki-client