Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
File:                     BD71164A59A211F09EC86C38C4F9AE02.roa (raw, json)
Hash identifier:          tlq/2xG0yhdoKwT6Az/0eNkst0Iretd6YucgKMDqYag=
Subject key identifier:   74:65:7D:60:93:3A:39:C4:88:75:A0:EA:24:14:2C:3A:72:22:A5:27
Certificate issuer:       /CN=A9116372/serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
Certificate serial:       94
Authority key identifier: 5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa
Signing time:             Thu 19 Mar 2026 06:44:47 +0000
ROA not before:           Thu 19 Mar 2026 06:44:47 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153739
IP address blocks:        163.223.200.0/24 maxlen: 24
                          2001:df5:49c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:48:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=5E60B84DB91B6C0865020CE0F206C5349E4B8348
        Validity
            Not Before: Mar 19 06:44:47 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69bb9b5f-e2f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:07:e8:ba:ac:1e:69:2f:e0:ff:cf:ca:07:ce:
                    d6:74:be:35:1e:3a:23:3e:87:ca:00:f1:e9:91:1b:
                    63:5e:1f:00:9c:b2:55:2b:b2:46:56:1b:e7:84:ad:
                    69:95:1d:ea:7f:94:7b:63:29:5e:8f:0c:78:93:90:
                    92:3c:6e:b6:68:2b:18:ab:ba:43:6b:34:77:ee:f1:
                    f4:3f:a1:4b:d4:10:5d:52:c6:67:a8:ec:4c:51:0b:
                    1f:ba:40:db:a4:ef:3f:66:9e:f1:98:b0:7b:fe:da:
                    43:ca:aa:6e:1f:1f:da:55:b3:ea:d0:3f:cb:12:f1:
                    b3:a6:c8:bb:03:55:e1:8d:0a:f5:98:35:18:ad:e1:
                    82:b8:05:cb:79:b6:88:14:5a:8c:cb:8f:00:46:38:
                    53:36:5d:23:ba:a8:d3:93:a9:f1:5c:b0:fc:43:d8:
                    80:9a:bd:eb:ab:d5:42:1b:bf:5b:16:62:63:87:39:
                    c7:40:27:1e:21:f6:a1:7b:a0:b8:19:9d:e6:01:ac:
                    9d:92:03:1a:fa:87:94:9f:8a:27:0f:1f:d1:d2:9c:
                    b0:00:2e:01:0f:c7:68:47:55:ea:6e:5a:01:59:85:
                    49:b1:97:89:06:1c:e6:75:a0:e6:75:19:45:98:b7:
                    03:f5:cb:6c:c3:ef:95:9d:1d:59:28:5e:c3:19:db:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:65:7D:60:93:3A:39:C4:88:75:A0:EA:24:14:2C:3A:72:22:A5:27
            X509v3 Authority Key Identifier:
                keyid:5E:60:B8:4D:B9:1B:6C:08:65:02:0C:E0:F2:06:C5:34:9E:4B:83:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XmC4TbkbbAhlAgzg8gbFNJ5Lg0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E6D9526059A011F08286D332C4F9AE02/BD71164A59A211F09EC86C38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.200.0/24
                IPv6:
                  2001:df5:49c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:6e:c9:68:f1:c7:10:e0:0b:ce:bd:e9:90:7b:4a:27:24:
         d3:82:bf:d4:41:75:e9:39:4a:4f:b0:93:d2:9c:ef:c4:70:22:
         ec:c1:4c:4b:44:e9:bc:72:af:c4:2c:46:e7:01:c8:96:2c:a7:
         34:7b:c8:20:01:9d:91:38:ca:3f:46:c4:a2:d9:eb:9a:b1:da:
         03:ef:c9:3b:68:5e:eb:6c:c4:f8:a6:a9:8e:1d:08:15:7b:1d:
         bd:cf:39:0c:f0:19:e9:71:15:01:0a:d4:0e:4f:69:ff:ee:8f:
         1c:be:29:a8:4d:9b:62:59:96:24:d3:25:99:cf:6c:b9:ce:9f:
         02:11:3c:2e:85:86:92:82:81:72:2f:dd:98:bd:62:f8:86:9f:
         04:e0:28:51:32:a0:ca:40:4f:01:79:23:22:8d:cc:bd:60:4d:
         57:3c:95:89:c5:40:e5:f9:e8:1e:88:79:1f:33:03:d7:81:a9:
         d0:4e:86:0a:43:2f:9a:0f:72:76:21:d9:fa:e8:53:1e:10:6d:
         5c:f2:82:b8:2c:92:98:44:e3:99:8f:27:05:f9:6c:4f:01:a4:
         6b:c7:2e:25:d6:4b:b9:f2:1b:b8:15:4e:d0:31:e1:b1:b8:95:
         3c:14:e7:e5:e8:e3:35:e7:b1:0a:e0:e7:b3:f9:b7:3d:38:04:
         1e:4e:33:0e
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYzNzIxMTAvBgNVBAUTKDVFNjBCODREQjkxQjZDMDg2NTAyMENFMEYyMDZDNTM0
OUU0QjgzNDgwHhcNMjYwMzE5MDY0NDQ3WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWJiOWI1Zi1lMmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmQfouqweaS/g/8/KB87WdL41HjojPofKAPHpkRtjXh8AnLJVK7JGVhvnhK1p
lR3qf5R7Yylejwx4k5CSPG62aCsYq7pDazR37vH0P6FL1BBdUsZnqOxMUQsfukDb
pO8/Zp7xmLB7/tpDyqpuHx/aVbPq0D/LEvGzpsi7A1XhjQr1mDUYreGCuAXLebaI
FFqMy48ARjhTNl0juqjTk6nxXLD8Q9iAmr3rq9VCG79bFmJjhznHQCceIfahe6C4
GZ3mAaydkgMa+oeUn4onDx/R0pywAC4BD8doR1XqbloBWYVJsZeJBhzmdaDmdRlF
mLcD9ctsw++VnR1ZKF7DGdsOvQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHRlfWCT
OjnEiHWg6iQULDpyIqUnMB8GA1UdIwQYMBaAFF5guE25G2wIZQIM4PIGxTSeS4NI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjM3Mi9FNkQ5NTI2MDU5
QTAxMUYwODI4NkQzMzJDNEY5QUUwMi9YbUM0VGJrYmJBaGxBZ3pnOGdiRk5KNUxn
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1htQzRUYmtiYkFobEFnemc4Z2JGTko1TGcwZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MTYzNzIvRTZEOTUyNjA1OUEwMTFGMDgyODZEMzMyQzRGOUFFMDIvQkQ3MTE2NEE1
OUEyMTFGMDlFQzg2QzM4QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAo9/IMA8EAgACMAkDBwAgAQ31ScAwDQYJKoZIhvcNAQELBQADggEB
AGldbslo8ccQ4AvOvemQe0onJNOCv9RBdek5Sk+wk9Kc78RwIuzBTEtE6bxyr8Qs
RucByJYspzR7yCABnZE4yj9GxKLZ65qx2gPvyTtoXutsxPimqY4dCBV7Hb3POQzw
GelxFQEK1A5Paf/ujxy+KahNm2JZliTTJZnPbLnOnwIRPC6FhpKCgXIv3Zi9YviG
nwTgKFEyoMpATwF5IyKNzL1gTVc8lYnFQOX56B6IeR8zA9eBqdBOhgpDL5oPcnYh
2froUx4QbVzygrgskphE45mPJwX5bE8BpGvHLiXWS7nyG7gVTtAx4bG4lTwU5+Xo
4zXnsQrg57P5tz04BB5OMw4=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:11 2026 by rpki-client