Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/0E4F46F2532E11F0B87D127CC4F9AE02.roa
File:                     0E4F46F2532E11F0B87D127CC4F9AE02.roa (raw, json)
Hash identifier:          N+2dubiMuqB/4gWD0ppVA6QZJO1Q/1zqaBt+voV0zVg=
Subject key identifier:   9B:AB:EC:8E:A9:19:AC:58:32:E3:91:7A:CB:DC:4E:64:39:62:45:27
Certificate issuer:       /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial:       C7
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/0E4F46F2532E11F0B87D127CC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:43:00 +0000
ROA not before:           Wed 29 Apr 2026 07:43:00 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
                          rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
        Validity
            Not Before: Apr 29 07:43:00 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b684-6990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:66:b5:b2:d6:85:34:a7:9d:a9:e1:cd:86:1e:
                    7f:9e:a6:0d:18:3c:ff:4c:31:ad:27:ea:97:bd:c5:
                    90:5c:f8:af:c2:4d:fb:65:95:dc:c9:f5:9e:a1:12:
                    fa:68:3f:3f:e1:49:e6:c8:28:eb:b1:30:24:1f:19:
                    0f:41:39:09:de:6f:34:e5:27:2c:99:bd:00:12:86:
                    d4:7f:ff:b2:81:f5:54:58:5a:68:b5:fc:ee:4e:28:
                    cb:6f:f5:30:23:38:1d:e8:40:44:52:63:04:f0:59:
                    be:d1:24:91:af:7d:c7:96:d8:79:05:ac:e7:ad:bb:
                    3f:ec:88:18:42:03:45:65:5a:3d:94:7d:9a:31:27:
                    fe:14:7b:af:d5:67:db:0e:f0:43:31:06:87:c6:23:
                    fc:5e:14:b0:dc:4d:3c:8e:18:7f:bd:fa:f1:06:5f:
                    37:34:c4:f0:82:c8:a6:65:7a:18:3f:d8:05:a0:8d:
                    92:f7:80:c0:86:6a:ba:87:8b:2e:58:40:eb:9f:83:
                    ac:ae:9b:48:13:fd:cc:16:fe:68:13:90:d0:43:50:
                    a9:d9:86:dd:b2:86:64:db:56:d2:97:73:6f:06:2e:
                    04:de:21:cb:c7:83:2a:c3:f4:10:5e:79:03:21:9c:
                    09:52:26:0a:27:7a:58:5e:ef:1c:e1:36:98:a0:fb:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AB:EC:8E:A9:19:AC:58:32:E3:91:7A:CB:DC:4E:64:39:62:45:27
            X509v3 Authority Key Identifier:
                keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/0E4F46F2532E11F0B87D127CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:bb:28:3a:82:e5:65:1f:6b:be:54:ed:79:6d:36:b0:5f:e3:
         77:8b:ae:ac:7e:4a:19:b1:cc:65:ed:d1:3e:c0:45:22:e9:0d:
         4a:48:60:49:d5:66:9b:7f:78:e6:0b:59:52:18:d8:7e:f8:16:
         6f:ac:36:d5:99:a4:ee:e1:45:75:7e:0c:8c:61:2f:a1:67:56:
         f5:68:cd:d7:39:e0:c9:cd:db:b4:46:ac:ff:36:6d:06:74:ce:
         cb:01:89:d9:ca:a1:a2:c9:b1:aa:b5:4e:54:23:67:f6:34:c7:
         b2:be:32:e8:03:39:64:11:77:7d:c1:22:cf:c8:06:c5:e8:30:
         2e:64:f2:09:36:28:1b:b7:5f:04:7e:cb:6e:d1:87:91:f3:26:
         cd:52:ec:4c:83:d1:d6:6a:a5:dd:0c:25:26:35:05:5a:4f:51:
         52:70:d6:30:8f:19:dc:9c:fd:8c:49:13:e6:d0:a6:4b:6f:9a:
         68:ac:56:d7:bf:60:16:ed:fa:32:eb:33:d3:58:50:75:ea:49:
         a1:25:d0:23:24:ea:b9:06:72:81:a0:f1:76:f3:03:c4:18:94:
         9f:5a:58:21:46:58:66:71:ee:b2:16:ec:67:a2:8b:32:c5:b0:
         8b:87:cb:aa:ee:5d:37:33:ed:fe:c7:86:2b:2f:ac:e7:e3:83:
         8d:c8:17:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:01 2026 by rpki-client