Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
File:                     D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (raw, json)
Hash identifier:          axY0t/wfGcS0SqKBr/2f2eZYye9v2/DiDSRsHzKpfyQ=
Subject key identifier:   C2:19:A1:B9:E7:29:B8:EA:7B:55:26:5A:09:FD:4B:7A:90:78:2A:59
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       96
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 09:36:02 +0000
ROA not before:           Thu 09 Jul 2026 09:36:02 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153850
IP address blocks:        163.227.218.0/24 maxlen: 24
                          2001:df5:7bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Jul  9 09:36:02 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4f6b82-4361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:02:93:81:8e:c3:12:d4:af:39:85:d9:52:cd:
                    c5:7e:73:c6:f5:40:ac:0b:63:43:82:7d:75:3e:1a:
                    5f:ce:fa:57:78:b3:0c:b0:09:ad:06:42:c9:53:2d:
                    56:f7:75:1a:77:d0:8b:cd:d9:f8:87:5f:e3:59:ca:
                    7b:62:66:fd:10:13:15:6c:ac:e3:48:3a:c5:03:8d:
                    ec:ab:a4:2e:50:72:db:65:a2:51:36:47:6a:4b:4f:
                    3f:f4:ef:ec:59:55:6e:4b:90:fd:58:4f:b1:fb:eb:
                    dc:e7:81:12:4b:a1:b1:be:09:e9:42:7a:06:15:3e:
                    6c:87:39:98:79:40:3d:1c:34:19:e8:fe:f2:48:48:
                    7a:53:bb:c9:78:33:2e:5a:b5:18:3b:ca:c5:e2:91:
                    d5:af:eb:a6:2e:70:f2:49:d0:35:c3:d8:fb:df:ae:
                    be:a2:28:42:31:d9:84:65:90:ae:9f:f4:44:bd:d4:
                    01:ba:b9:6d:28:63:fa:17:cf:94:10:ae:7a:47:e5:
                    d9:ee:ca:e5:27:c7:92:b3:8a:a4:67:5f:f8:3b:bf:
                    35:9c:7e:5b:50:c4:11:1f:1a:d9:36:67:74:b8:e6:
                    99:0d:96:ca:4d:4b:71:2e:fb:53:b7:a2:41:4c:37:
                    a3:48:21:11:8a:c6:4f:13:94:e2:ed:f2:e9:69:a1:
                    47:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:19:A1:B9:E7:29:B8:EA:7B:55:26:5A:09:FD:4B:7A:90:78:2A:59
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.218.0/24
                IPv6:
                  2001:df5:7bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:b9:13:23:6e:66:7c:0c:d7:c9:26:f7:e5:c4:46:8d:fa:
         a5:3f:5b:18:97:87:ed:fd:38:71:29:52:f4:a2:5f:74:44:a7:
         2c:98:16:f8:88:4e:9a:76:fe:cc:ee:72:6c:5d:92:2b:4b:b6:
         6d:fd:de:70:25:58:38:cc:c7:e0:f5:8b:8f:f8:d7:73:83:a2:
         0c:b2:8f:d9:2f:44:91:56:3c:28:f6:d2:6e:a4:95:d2:cd:08:
         68:b5:73:fa:02:cf:6c:20:27:dc:ba:db:d5:06:52:6d:14:10:
         ba:dc:f1:b0:3d:35:a5:6a:e6:3b:20:73:00:77:0e:75:2a:da:
         fa:3c:7b:b4:9c:5b:38:85:4d:8d:ce:dd:32:a5:df:3a:38:82:
         35:06:e3:8f:15:a1:97:c7:ab:4e:49:2e:ab:fd:07:63:06:a7:
         c6:14:4a:0e:5c:17:ef:e8:e2:e3:4c:4a:a0:76:a1:4d:f4:f3:
         94:19:e2:31:f7:5e:59:28:a3:95:12:03:61:7f:2d:47:80:00:
         c4:1e:9f:04:f5:16:d3:71:98:13:8e:2b:83:d5:e6:46:67:77:
         d6:c8:59:b4:74:7e:ba:2a:6d:1e:a9:72:4b:4f:b7:b4:a9:2d:
         3b:5c:9f:6c:a0:3a:c6:7e:20:2e:ee:e4:52:df:9a:ec:51:76:
         35:cb:71:80
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUY1ODQxMTAvBgNVBAUTKDgwMDcxNzY1RTk4QjM5NjEyNTg4RDM3ODU3MjE0MzJD
MzI2MDdGRUUwHhcNMjYwNzA5MDkzNjAyWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNmI4Mi00MzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7gKTgY7DEtSvOYXZUs3FfnPG9UCsC2NDgn11PhpfzvpXeLMMsAmtBkLJUy1W
93Uad9CLzdn4h1/jWcp7Ymb9EBMVbKzjSDrFA43sq6QuUHLbZaJRNkdqS08/9O/s
WVVuS5D9WE+x++vc54ESS6GxvgnpQnoGFT5shzmYeUA9HDQZ6P7ySEh6U7vJeDMu
WrUYO8rF4pHVr+umLnDySdA1w9j7366+oihCMdmEZZCun/REvdQBurltKGP6F8+U
EK56R+XZ7srlJ8eSs4qkZ1/4O781nH5bUMQRHxrZNmd0uOaZDZbKTUtxLvtTt6JB
TDejSCERisZPE5Ti7fLpaaFHgwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMIZobnn
Kbjqe1UmWgn9S3qQeCpZMB8GA1UdIwQYMBaAFIAHF2XpizlhJYjTeFchQywyYH/u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjU4NC9GRkY4MDIxODlE
QTgxMUYwQUVEQTNGM0FDNEY5QUUwMi9nQWNYWmVtTE9XRWxpTk40VnlGRExESmdm
LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dBY1haZW1MT1dFbGlOTjRWeUZETERKZ2YtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUY1ODQvRkZGODAyMTg5REE4MTFGMEFFREEzRjNBQzRGOUFFMDIvRDdFOUE4QzQ5
REFBMTFGMEEyNEU0OTYzQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAo+PaMA8EAgACMAkDBwAgAQ31e8AwDQYJKoZIhvcNAQELBQADggEB
ACKOuRMjbmZ8DNfJJvflxEaN+qU/WxiXh+39OHEpUvSiX3REpyyYFviITpp2/szu
cmxdkitLtm393nAlWDjMx+D1i4/413ODogyyj9kvRJFWPCj20m6kldLNCGi1c/oC
z2wgJ9y629UGUm0UELrc8bA9NaVq5jsgcwB3DnUq2vo8e7ScWziFTY3O3TKl3zo4
gjUG448VoZfHq05JLqv9B2MGp8YUSg5cF+/o4uNMSqB2oU3085QZ4jH3Xlkoo5US
A2F/LUeAAMQenwT1FtNxmBOOK4PV5kZnd9bIWbR0froqbR6pcktPt7SpLTtcn2yg
OsZ+IC7u5FLfmuxRdjXLcYA=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:09 2026 by rpki-client