Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/15039C1E202F11F0AFD72717C4F9AE02.roa
File:                     15039C1E202F11F0AFD72717C4F9AE02.roa (raw, json)
Hash identifier:          N7637sJ4ur4GTyF+Kgrvo5G1u42FtOcjBttkvkfEsuY=
Subject key identifier:   32:5C:DE:79:EC:A7:C8:E7:77:AF:BA:95:72:F2:12:F9:FE:E6:94:14
Certificate issuer:       /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial:       D6
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/15039C1E202F11F0AFD72717C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:42:43 +0000
ROA not before:           Wed 29 Apr 2026 07:42:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
                          rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
        Validity
            Not Before: Apr 29 07:42:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b673-b20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:df:ba:a7:ae:b4:cb:bc:e2:52:ff:b1:cc:41:
                    18:9b:ea:18:7d:7a:f5:e3:1b:49:b3:6e:af:66:44:
                    a0:3f:75:0e:6a:75:ef:ec:74:17:91:c8:fa:e9:71:
                    e5:0b:4c:e9:0f:30:1c:96:0c:31:b7:21:66:69:63:
                    56:49:0b:9f:24:69:3a:12:1e:2d:9a:b2:d5:3f:b4:
                    b1:9e:d5:7d:5c:9f:83:53:10:7d:a3:5a:e6:9c:33:
                    8b:10:75:2b:2c:f6:0d:36:07:fa:cc:00:45:16:f7:
                    89:26:f6:3b:e0:81:8d:c1:04:11:89:87:07:44:5f:
                    b6:88:f8:3f:ea:73:65:d3:54:5a:70:e4:34:8a:f4:
                    44:8b:08:da:e2:3f:b7:30:52:20:93:1c:d1:d5:c1:
                    ad:ae:eb:f8:f5:7b:8c:6e:b9:e0:3d:c8:da:ca:36:
                    cd:d3:52:62:33:b1:3b:e4:a8:c5:e0:db:94:fd:33:
                    24:9a:08:03:9d:d0:f3:58:8a:b7:df:48:b5:8a:09:
                    18:6e:d3:56:d9:e3:5d:3f:62:08:6b:b6:a7:ae:ed:
                    0f:e8:e2:c1:b7:73:5f:b2:cc:21:46:ce:fa:80:5d:
                    98:11:ff:b7:f9:7c:90:7b:99:97:1f:58:31:3d:ab:
                    e8:4f:48:4d:a0:42:8a:87:3c:17:3d:b1:07:f0:36:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:5C:DE:79:EC:A7:C8:E7:77:AF:BA:95:72:F2:12:F9:FE:E6:94:14
            X509v3 Authority Key Identifier:
                keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/15039C1E202F11F0AFD72717C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:0f:fb:54:b2:26:f6:86:dd:ca:4e:f8:e0:e0:7f:ab:64:
         29:10:87:fc:1a:69:cb:e4:ad:2a:d9:d4:bc:c5:67:c0:53:06:
         90:81:7e:3f:09:68:cd:7c:5b:6a:94:88:f4:5f:57:f7:42:c3:
         f8:47:86:68:67:f9:c8:87:d4:8c:2a:b2:bc:18:c9:22:ee:5c:
         b8:b4:c0:c4:3a:60:29:71:97:12:7c:3f:ee:52:2b:55:95:e8:
         f9:fe:f3:67:1d:3f:08:60:f1:7e:6c:d5:fc:9a:a8:16:86:6d:
         3a:08:ea:d2:d5:44:61:15:b7:a0:4b:aa:a7:e9:80:c3:1f:58:
         3d:db:02:18:6b:c9:3b:b7:1f:de:d5:09:b0:4f:7c:c7:28:9c:
         99:0e:b1:bb:8a:9e:e6:fa:78:d6:cc:90:74:fa:08:2a:06:9c:
         5f:c8:c6:90:4a:a5:32:62:c2:0d:c0:fa:9b:d6:72:d0:6c:49:
         b6:84:46:58:20:1a:e3:9d:0f:35:92:a9:1c:35:4f:9b:d5:41:
         23:2a:84:ba:2a:4b:1b:b4:09:42:41:70:8b:f5:67:6e:9f:be:
         46:5c:3c:53:02:65:33:da:14:32:7a:8b:2e:9e:24:c5:cf:74:
         d3:d3:5c:db:eb:00:b8:e5:df:76:0c:d4:08:ff:2c:01:e5:a0:
         6d:5d:31:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:53 2026 by rpki-client