Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
File:                     318FB51A383611E6B2282B5DC4F9AE02.roa (raw, json)
Hash identifier:          I6jxZTqpjwiUfJAwpZoNi2Gm52AIuuh+evMbf0QauW8=
Subject key identifier:   97:75:04:2E:19:B0:28:9A:E1:10:0C:9D:9E:24:58:C5:97:98:62:CB
Certificate issuer:       /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
Certificate serial:       365F
Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
Signing time:             Tue 30 Sep 2025 14:40:10 +0000
ROA not before:           Tue 30 Sep 2025 14:40:10 +0000
ROA not after:            Fri 30 Jan 2026 00:00:00 +0000
asID:                     135534
IP address blocks:        61.45.249.0/24 maxlen: 24
                          2401:4601:249::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl
                          rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:18:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13919 (0x365f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268
        Validity
            Not Before: Sep 30 14:40:10 2025 GMT
            Not After : Jan 30 00:00:00 2026 GMT
        Subject: CN=68dbebca-47e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:04:a7:ab:8b:5f:dc:23:50:21:36:54:a0:
                    84:60:7b:c6:35:5f:22:08:a2:a9:41:94:b0:30:98:
                    eb:12:38:03:e0:02:b8:d0:87:77:a5:af:39:6b:25:
                    0d:a7:ae:6b:2f:18:30:07:f0:39:02:94:e5:07:c6:
                    fe:f3:66:e4:fe:ee:9e:57:9f:bc:64:00:c6:f0:1c:
                    8d:61:8c:5f:93:57:6e:ec:07:05:4d:ae:04:2f:45:
                    2b:b9:4a:5e:0f:e4:e5:ad:43:7e:00:95:64:a9:f9:
                    40:0b:3e:95:93:82:23:1e:1b:2d:ca:9d:5b:35:82:
                    91:ed:72:1b:4b:a9:b5:46:c8:a2:f0:3c:b3:12:45:
                    21:0d:d3:54:0f:06:34:94:30:6a:c5:14:64:b0:32:
                    61:84:65:3b:83:96:1e:a7:b0:fd:19:be:8b:2c:e6:
                    30:f2:19:b3:c9:d3:86:48:a2:55:78:18:3f:24:f7:
                    87:9a:2c:ed:18:37:9c:cf:dd:4f:4c:3f:44:54:40:
                    c5:2d:1a:4e:60:ed:78:ef:db:20:3b:37:b8:b3:14:
                    f6:ce:38:23:1b:f1:95:72:28:26:ea:7a:ed:b8:5c:
                    be:c1:d5:b2:da:1a:9c:64:a2:12:31:05:4f:0a:40:
                    05:50:f4:74:5e:aa:f2:58:59:e9:08:0e:ab:78:a1:
                    d8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:75:04:2E:19:B0:28:9A:E1:10:0C:9D:9E:24:58:C5:97:98:62:CB
            X509v3 Authority Key Identifier:
                keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/318FB51A383611E6B2282B5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.45.249.0/24
                IPv6:
                  2401:4601:249::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:92:e4:d4:cb:6f:46:dc:c2:e6:72:96:8d:7c:96:17:6c:23:
         60:c1:aa:3b:01:5a:8f:d5:16:89:d0:17:71:db:65:3f:2d:a2:
         e7:47:00:2a:e6:cf:c9:b1:0e:fc:b3:c8:6d:08:a4:96:08:7a:
         4a:e4:10:06:f2:f8:30:9d:f0:b6:ed:e9:93:c8:f7:1b:48:28:
         c1:7a:62:95:d3:cb:13:c7:79:54:09:18:05:55:f6:89:0c:07:
         2d:29:60:0e:0d:24:8d:35:30:98:a8:3e:d5:e1:ad:bd:08:cd:
         fb:d4:bb:97:8d:e6:90:f5:d6:7b:10:73:cf:14:31:af:66:0a:
         e9:78:aa:77:fe:bc:3e:28:b4:d2:a3:dc:bb:6f:b9:cd:07:fd:
         49:0a:56:dc:f7:33:f8:78:fc:08:0a:1d:f5:eb:03:29:00:d5:
         10:d0:c2:c7:bc:41:10:4e:d6:38:16:8b:84:78:ae:9d:42:c7:
         41:ca:b2:b4:05:2d:1d:b6:4f:43:e9:7c:93:21:9f:88:e0:97:
         fb:4a:c8:65:c2:b5:c6:4a:83:c7:af:c5:97:4b:99:b0:c6:27:
         4b:81:45:37:20:4b:09:73:70:09:f2:8c:f5:5b:8f:97:1e:9b:
         cc:e2:55:76:57:5b:04:ae:59:16:b7:38:2a:22:7c:72:81:e4:
         a7:5a:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:06 2025 by rpki-client