Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
File:                     CB08B0C019C811F0958CB24EC4F9AE02.roa (raw, json)
Hash identifier:          cdFmXpsalY1+z5oVudHnce3yQ0iPra8q2kzd8g6PXiM=
Subject key identifier:   18:C9:2F:E8:5C:8D:EB:F4:1F:F9:51:38:B9:7B:BA:82:13:8D:38:DE
Certificate issuer:       /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial:       EC
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
Signing time:             Wed 01 Jul 2026 08:33:52 +0000
ROA not before:           Wed 01 Jul 2026 08:33:52 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     153775
IP address blocks:        163.227.62.0/23 maxlen: 23
                          163.227.62.0/24 maxlen: 24
                          163.227.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
                          rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
        Validity
            Not Before: Jul  1 08:33:52 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44d0f0-e68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:a0:ce:b2:c9:2a:a2:8a:77:10:3a:4a:74:
                    ed:87:35:43:9e:e5:19:4a:05:56:fc:60:35:41:49:
                    e9:25:97:01:f3:e2:e8:8f:c4:2a:14:07:21:44:e2:
                    b5:5b:2c:a3:4d:c1:e3:8a:dd:a5:16:4b:70:73:3c:
                    c9:f0:ff:52:e5:5e:7b:90:f2:2c:9f:fb:62:85:f2:
                    33:94:51:05:f3:db:f6:7e:05:76:20:f5:af:96:8c:
                    0c:ca:82:5e:26:a0:c4:31:e7:dd:95:28:7b:57:bb:
                    9a:bb:7b:77:e4:b8:b9:72:c6:54:6c:36:1d:8e:75:
                    ed:b2:89:06:45:ed:8c:86:3b:6e:3c:a7:3c:25:5f:
                    3e:ce:35:b9:d4:5b:cf:89:40:66:db:b4:88:3c:8b:
                    13:a1:69:62:dd:61:f8:bd:e1:8e:be:d8:c7:c1:36:
                    f4:7c:0e:4a:fb:30:80:9f:9f:2a:fc:24:43:f4:7a:
                    7e:63:8a:38:56:67:b9:10:bd:cc:5c:10:47:64:50:
                    04:92:ef:5e:b5:d3:90:bd:7b:24:4d:4f:e6:ce:61:
                    9d:28:01:de:ba:6e:fe:0a:f1:07:0e:16:ec:dc:7a:
                    79:c6:a2:09:85:31:32:26:da:b5:d9:05:9c:d1:7f:
                    e7:b0:22:81:50:f8:cd:49:38:2e:0f:39:8e:04:a7:
                    61:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C9:2F:E8:5C:8D:EB:F4:1F:F9:51:38:B9:7B:BA:82:13:8D:38:DE
            X509v3 Authority Key Identifier:
                keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:16:55:80:dd:11:80:6a:53:b2:d8:8e:52:31:19:3f:ab:15:
         45:69:d1:c1:7b:1c:07:20:43:a7:e8:de:03:3f:30:35:ea:6e:
         2e:43:11:59:22:5e:ed:37:96:82:30:d4:71:00:ff:9e:10:ea:
         42:e0:b8:47:c7:69:56:31:5f:3c:14:53:65:a5:53:02:77:b0:
         4a:80:a9:b1:0f:03:cc:e4:b6:c1:8f:3b:cb:1a:08:ba:d3:4a:
         18:99:43:65:d1:b1:cd:13:f3:c3:51:4c:16:48:c4:8e:a5:17:
         f4:c3:03:08:e3:5f:a5:d5:65:75:99:df:19:78:31:11:b9:a4:
         d5:fa:ec:b0:15:d2:07:79:91:1c:05:a2:fd:d8:39:e8:9e:0f:
         5e:01:aa:e0:3a:65:23:01:0c:b2:72:d6:c5:aa:e4:cb:cf:ea:
         f4:55:9d:2d:51:47:18:4c:d4:2d:c1:84:9b:10:12:79:9d:19:
         20:6d:cf:58:3c:d4:e6:23:03:a9:ae:e3:41:50:32:93:c6:0d:
         1a:11:66:55:7d:37:5b:ab:ec:aa:6d:fa:37:f0:99:5c:c5:e2:
         fd:ef:b6:1c:64:22:93:66:b1:91:38:c2:5a:f6:81:57:ba:f8:
         8f:70:6f:d5:a1:81:79:ab:88:2e:cf:57:4a:0c:1f:be:27:db:
         35:63:ed:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:57 2026 by rpki-client