Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/E7930D061E6111F098E32F79C4F9AE02.roa
File:                     E7930D061E6111F098E32F79C4F9AE02.roa (raw, json)
Hash identifier:          tRzWam95vSpEscniZPqXRHQpti8KQpPkufP+tHJBdpA=
Subject key identifier:   38:F5:25:F4:D1:66:24:6F:01:7B:67:49:FE:94:E4:18:3D:F8:CE:CE
Certificate issuer:       /CN=A9123F2F/serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
Certificate serial:       A3
Authority key identifier: 2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/E7930D061E6111F098E32F79C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:56:54 +0000
ROA not before:           Mon 21 Apr 2025 03:37:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl
                          rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F2F, serialNumber=2EFEF89D6D5830EAFDA65A1DF1946E47A144A419
        Validity
            Not Before: Apr 21 03:37:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5a536-2f1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:95:8a:42:3d:cd:03:7c:e5:01:73:76:37:
                    e5:44:1b:f7:c4:cd:b9:c2:20:23:55:0b:b1:16:0f:
                    62:d7:7c:6d:2a:89:11:1b:f8:9d:43:6c:65:7a:50:
                    64:cd:05:cf:f2:9e:30:79:78:80:0a:55:f6:c7:d9:
                    53:27:14:39:63:86:bc:8c:66:0c:8e:bf:8a:e4:dd:
                    0c:97:4e:96:94:24:f8:9d:f9:cb:e4:32:c8:28:18:
                    1a:14:a4:47:76:64:5d:6d:1f:04:af:b2:e4:2f:66:
                    e6:54:d9:d3:f2:02:ad:6a:07:d4:2d:aa:ad:ab:be:
                    4e:35:c4:cd:92:0f:00:b8:97:fb:54:bf:8e:1e:55:
                    bb:ef:8e:6c:f5:ec:1d:95:00:51:4c:93:ff:4f:58:
                    9d:53:92:54:21:81:b4:79:a0:65:e6:c3:30:5c:84:
                    8b:b0:f1:e9:ba:a4:f8:f8:17:e3:75:bc:82:bd:54:
                    73:18:b3:04:96:45:3a:7f:c9:f3:d7:3c:8e:2d:40:
                    35:16:bd:a7:fa:ce:e2:db:29:d7:d9:5b:f3:d8:05:
                    72:c8:ca:08:51:c5:e0:09:f0:76:4f:83:3d:55:2a:
                    c9:51:77:94:f2:0e:e8:fa:26:f6:41:a3:59:1c:e8:
                    a3:3c:dc:90:7f:1e:ca:43:8e:89:cf:61:a2:5e:ed:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F5:25:F4:D1:66:24:6F:01:7B:67:49:FE:94:E4:18:3D:F8:CE:CE
            X509v3 Authority Key Identifier:
                keyid:2E:FE:F8:9D:6D:58:30:EA:FD:A6:5A:1D:F1:94:6E:47:A1:44:A4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/Lv74nW1YMOr9plod8ZRuR6FEpBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lv74nW1YMOr9plod8ZRuR6FEpBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F2F/EE0A6F2C1E6011F08066BA55C4F9AE02/E7930D061E6111F098E32F79C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:28:b5:4e:85:47:e5:a3:53:c3:63:52:55:1a:67:4f:f6:9a:
         c3:c2:11:a5:31:eb:a8:99:b3:58:fe:59:d1:13:40:9b:98:9e:
         28:02:7b:40:74:9f:16:62:b0:13:13:a4:2a:0a:a8:1e:ce:3e:
         d9:06:ec:39:20:cf:2d:7c:71:0c:3a:86:e3:68:e8:31:6e:53:
         ec:00:c5:69:9b:9f:11:35:3e:6c:63:9e:8c:07:08:86:90:28:
         cc:92:f9:05:91:d9:e4:67:a5:af:e7:fc:ff:36:4f:7b:ed:4f:
         c6:c5:af:f8:56:f4:80:c1:e2:83:1f:72:1c:ea:83:3b:c0:21:
         e9:ea:1d:6d:c4:f9:96:7d:c7:1f:c5:95:af:ff:b3:97:be:a6:
         19:f3:6e:1d:c4:bc:27:48:bc:5c:d5:07:7a:84:de:d9:ff:06:
         64:a7:2a:66:86:fa:48:8e:4d:ac:84:a8:d8:6f:cf:5f:b9:43:
         37:aa:07:27:52:35:b0:a5:3d:7e:ec:92:53:f9:39:e4:fa:29:
         20:37:4e:93:81:5f:b4:f5:15:10:21:46:9b:b6:34:8e:8e:a2:
         e4:9f:00:73:1d:1b:6b:0a:48:19:fb:6c:08:e9:fe:30:b9:7b:
         f3:f9:7b:56:fc:8b:b7:f9:1b:cd:ee:2f:e3:bb:b7:63:7b:3a:
         47:db:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:30 2026 by rpki-client