Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/72AD814686F911F0A97FA80EC4F9AE02.roa
File:                     72AD814686F911F0A97FA80EC4F9AE02.roa (raw, json)
Hash identifier:          z9lBCM2YReTvWnOO7UOQ4Z/V5QvjzGlZ8HP+HdhlsEo=
Subject key identifier:   60:8C:7A:80:E4:A4:AF:BE:57:8E:0E:0E:99:2D:43:42:EF:AB:8D:BF
Certificate issuer:       /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial:       C5
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/72AD814686F911F0A97FA80EC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:43:27 +0000
ROA not before:           Wed 29 Apr 2026 07:43:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
                          rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
        Validity
            Not Before: Apr 29 07:43:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b69e-1470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ed:fb:29:cc:1f:41:23:dd:44:62:59:95:a3:
                    63:d7:26:16:31:ad:d5:9f:0e:5d:a0:28:34:60:9e:
                    4c:30:f3:54:92:83:1f:65:a3:75:e6:7a:19:85:92:
                    93:ff:c1:7d:e5:49:fb:8f:45:fc:57:42:3c:c4:9b:
                    6e:50:4b:5b:c1:b9:fd:1d:39:c8:42:59:6e:70:02:
                    38:e6:35:d4:92:b8:64:d5:72:77:cc:24:00:f9:3d:
                    ae:ed:5d:c6:83:3f:98:37:2d:03:e3:07:e1:bf:83:
                    70:3d:10:ed:7f:a2:af:fa:71:2f:1e:b9:94:91:95:
                    02:52:72:24:01:b9:7f:8a:61:35:83:46:17:a2:da:
                    e1:68:20:2f:b9:bc:27:75:fb:d9:b4:3e:da:dc:39:
                    c2:6d:45:9f:55:d6:e4:52:e4:aa:e8:76:66:c2:df:
                    68:a6:42:d7:68:7e:1c:77:9a:80:ab:4f:fb:81:0a:
                    ed:50:c9:45:ff:0b:e9:c7:9e:36:be:21:2b:ee:34:
                    82:ed:6b:2e:50:2a:5f:db:0f:5a:15:eb:cd:c3:3a:
                    10:e8:ae:fd:61:b7:82:19:2f:c8:e3:50:83:f1:34:
                    26:dd:2e:a2:54:b2:5e:3b:3a:45:7c:0d:54:6e:17:
                    e7:8a:63:f2:fc:f8:35:34:0e:f3:62:b5:d2:1f:0c:
                    a2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8C:7A:80:E4:A4:AF:BE:57:8E:0E:0E:99:2D:43:42:EF:AB:8D:BF
            X509v3 Authority Key Identifier:
                keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/72AD814686F911F0A97FA80EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:05:f0:7c:0d:fe:d8:54:15:8c:e8:cb:05:fb:79:2f:77:1d:
         29:d8:86:9e:e9:15:7c:70:c9:24:93:c4:8b:cf:ea:ae:d9:30:
         e6:19:d1:6c:05:a8:f0:1e:74:08:b3:5c:17:8d:fe:44:16:7a:
         87:ed:f0:02:fd:c4:49:28:d9:68:be:31:54:9f:f0:b9:50:41:
         f0:83:c4:13:61:92:c8:79:fd:54:9e:7d:0b:7e:63:b3:0d:a0:
         3e:a1:96:2f:c4:97:c0:8a:c1:04:6d:8e:41:be:de:a3:8f:38:
         a8:41:a7:19:32:97:ca:5f:17:49:ce:29:64:dc:fe:52:45:a1:
         e5:a5:36:87:d4:35:b8:71:e5:08:97:51:e2:3d:87:26:24:fe:
         20:e0:a6:2b:80:c0:df:1e:b6:18:35:03:a6:ae:79:01:76:bc:
         a7:3f:58:71:7e:ca:67:d8:7b:e7:27:94:e7:70:f7:94:27:76:
         93:6d:98:76:b7:1a:f1:ff:f3:4a:a2:a6:e3:37:9d:1e:45:c7:
         f4:cf:d3:51:66:9b:81:6a:12:ef:f2:92:4b:86:04:05:0e:17:
         01:b4:b6:4e:49:f3:82:b9:d9:be:ee:c6:31:7c:21:c2:37:35:
         cb:08:7d:3c:ce:35:5b:89:86:d9:77:70:19:4c:9e:62:90:b4:
         85:d6:7f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:51 2026 by rpki-client