Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
File:                     874D690486F911F0AEE9D81BC4F9AE02.roa (raw, json)
Hash identifier:          DdoM2x5jbfPJk1eiebVGHbTNeWujBUjX+WOpcvXZOBc=
Subject key identifier:   79:42:6B:6F:DB:D5:0B:C5:DD:C2:20:87:F0:AA:93:66:18:CA:08:79
Certificate issuer:       /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial:       C5
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 08:41:46 +0000
ROA not before:           Wed 29 Apr 2026 08:41:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
                          rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:59:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
        Validity
            Not Before: Apr 29 08:41:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1c449-a8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:ab:f6:03:54:ff:55:75:01:13:fe:38:0a:
                    5b:80:a7:37:36:c3:b3:f2:8d:48:eb:14:da:02:06:
                    ea:bd:31:db:1c:78:ad:5f:a5:2d:10:2c:20:bf:50:
                    7b:bf:33:e4:4f:8c:05:ec:75:4a:71:15:e8:99:ed:
                    9c:82:b5:af:4c:e7:48:c1:f2:eb:e5:1e:de:d4:cc:
                    c5:34:b1:6c:ae:c4:bd:65:46:fa:9d:ad:93:46:28:
                    59:d3:3d:39:de:56:3b:dd:f0:27:2a:ff:8e:cf:1a:
                    94:5f:f9:f4:54:89:a4:eb:a7:5b:fa:43:86:08:ea:
                    12:2b:6f:96:ec:4e:75:51:29:b5:a6:20:78:c6:b2:
                    0d:97:94:fb:28:9b:43:8e:d6:d8:04:d3:0f:24:28:
                    9b:70:26:56:14:3e:4b:59:5e:c1:21:9e:e0:e0:55:
                    21:77:23:28:00:11:22:ae:14:77:db:33:be:8e:e3:
                    7d:bd:47:11:93:4b:25:7b:c7:00:cd:70:00:f2:f6:
                    b8:ba:28:5b:a5:1a:d9:8d:b0:df:ba:6b:8e:80:48:
                    c5:26:5e:f8:fc:c0:7d:4c:d4:7c:49:22:ef:88:75:
                    30:73:42:c3:5b:69:98:54:2e:b6:c6:31:33:9c:e3:
                    ac:f9:57:0c:19:5a:87:7e:91:25:90:d0:d7:40:be:
                    f5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:42:6B:6F:DB:D5:0B:C5:DD:C2:20:87:F0:AA:93:66:18:CA:08:79
            X509v3 Authority Key Identifier:
                keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/874D690486F911F0AEE9D81BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:c7:dd:67:b9:37:55:1c:ce:c4:c6:96:d0:88:3c:0d:47:2c:
         75:35:75:cd:eb:fc:6d:29:a8:df:e5:42:2c:57:4c:e5:ed:7e:
         db:ac:12:34:ab:57:d9:60:66:f5:be:c4:f6:5c:33:c2:7f:39:
         37:a5:dc:c8:77:a2:3e:0e:e1:98:48:dc:fe:07:f7:c9:a2:40:
         55:b0:53:d4:e1:02:13:4d:e0:7b:e4:5d:c2:d4:89:cd:b0:2d:
         4a:3b:66:46:28:5f:c3:16:18:e8:9e:cf:9d:44:db:d3:f9:17:
         26:50:a1:68:59:96:38:a0:72:eb:3c:39:0b:ba:c8:7f:30:24:
         ac:c6:87:b8:8e:aa:de:cb:f8:41:6f:98:5c:8e:c7:7a:85:8f:
         00:e8:87:b8:3a:52:f9:9c:ef:9d:93:2e:4e:a9:da:73:2d:6e:
         f8:50:f5:39:06:99:00:06:3f:59:1b:44:96:24:a6:59:14:31:
         44:99:73:c2:e6:55:f0:00:e0:33:2f:0f:6f:88:d3:8a:76:de:
         cf:f2:3a:2a:06:84:a9:ac:88:02:4c:d5:96:e9:ee:bd:85:1d:
         49:7e:57:19:5f:ef:58:29:1b:fb:48:d4:a9:6e:a7:8a:64:d4:
         df:f5:65:77:fd:c4:92:5a:00:d2:34:cc:3f:b1:50:af:7f:f5:
         ab:f6:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:46 2026 by rpki-client