Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/2A2F9262201811F09DB3CC16C4F9AE02.roa
File:                     2A2F9262201811F09DB3CC16C4F9AE02.roa (raw, json)
Hash identifier:          SPeu1aYoWIkZ55wzSsA2uT5JSXB8/d3J/ThweSnmrRw=
Subject key identifier:   2D:F5:78:D6:A6:6C:04:23:A5:C6:7E:8F:D7:22:B7:1C:28:C9:B7:C4
Certificate issuer:       /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial:       D5
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/2A2F9262201811F09DB3CC16C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:42:41 +0000
ROA not before:           Wed 29 Apr 2026 07:42:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
                          rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:58:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
        Validity
            Not Before: Apr 29 07:42:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b671-56a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3f:8e:43:fa:1b:99:68:43:dd:91:49:8f:3e:
                    9d:ec:6b:f4:21:e5:7a:5d:9b:70:9e:d7:c4:35:17:
                    5c:4f:7a:40:70:6d:f2:7c:d7:18:78:d1:be:7e:64:
                    32:0c:c5:e4:8f:5f:5a:1e:c0:66:53:e8:e4:34:78:
                    87:bb:f0:17:88:0c:06:9a:3d:d8:1e:4b:11:73:66:
                    6a:6f:82:a1:c6:1c:7d:54:5b:70:33:98:00:76:61:
                    13:e2:77:49:4f:61:08:3d:37:27:a6:dc:6e:38:ef:
                    47:71:74:6d:94:51:39:12:ca:64:5f:2f:8d:52:05:
                    66:d4:a8:ce:fc:56:db:c6:93:0d:4c:48:f4:73:d0:
                    75:eb:cf:56:3c:7b:d1:87:e1:b2:18:63:16:ae:fa:
                    b6:33:87:57:e2:bb:10:70:33:ba:ab:a8:ca:e5:f2:
                    b1:ea:09:48:ab:d6:4a:71:b9:9b:53:93:22:cb:3a:
                    15:9d:a6:d6:97:f9:db:ff:30:a1:6f:8c:d0:ad:a2:
                    8d:8e:d4:59:e7:ab:44:66:15:b8:83:9b:20:50:fe:
                    5a:a3:76:25:ed:17:1a:50:44:0b:4e:d9:fc:46:f8:
                    66:02:5e:bf:2b:ec:4c:10:14:bc:94:c4:ec:0a:ab:
                    b8:93:b9:82:9a:01:92:e0:8b:7d:2a:6b:fc:35:71:
                    86:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F5:78:D6:A6:6C:04:23:A5:C6:7E:8F:D7:22:B7:1C:28:C9:B7:C4
            X509v3 Authority Key Identifier:
                keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/2A2F9262201811F09DB3CC16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:29:b3:c8:ce:e9:4c:e6:a4:77:c4:9e:55:55:5c:21:32:
         60:79:e8:31:d1:a2:13:79:ae:b8:72:cc:88:35:2f:c0:a3:61:
         96:fe:4a:3e:75:dc:f3:cb:e5:db:37:6b:86:ae:5a:df:9c:a9:
         3b:17:ca:af:33:81:45:85:3a:da:33:02:f5:5e:02:c1:c7:1b:
         00:3b:31:ff:de:94:88:03:8a:5f:2a:b7:8c:65:72:c8:13:25:
         00:cd:ee:9d:eb:44:b0:a7:e1:92:ac:e1:5b:e5:bb:48:33:50:
         1d:be:da:45:13:a8:69:9f:c0:66:ca:32:8f:9f:a4:08:2b:30:
         60:e1:07:20:f6:c5:a5:b0:2e:cf:39:36:47:2e:16:92:25:67:
         c0:11:94:8a:aa:eb:b5:20:3d:21:2f:a8:c1:f1:e5:16:9d:06:
         ac:06:3d:f3:f0:19:b8:86:61:1e:d3:76:ef:2f:cf:5b:95:0f:
         b1:43:0c:a6:62:32:62:55:73:3e:c4:b1:a7:b0:c1:ae:28:a4:
         79:b2:9e:5d:c5:b4:d0:96:8b:e8:94:63:ce:a0:47:43:77:79:
         92:af:da:f2:32:86:c3:2f:dc:80:a1:3c:b0:21:58:82:65:41:
         26:f4:ff:4e:cd:9c:70:c3:6b:f2:49:aa:1a:59:ec:6f:d3:f9:
         b2:b6:00:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:44:59 2026 by rpki-client