Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/1CF72A482B0C11F08B7A2511C4F9AE02.roa
File:                     1CF72A482B0C11F08B7A2511C4F9AE02.roa (raw, json)
Hash identifier:          5SNRV6AwQIUw5WcLW3t5oJkMDa/T28uo/y1DYMxjUw4=
Subject key identifier:   B7:69:4E:37:4B:9D:4D:CD:3E:4E:3B:D5:69:75:14:F6:8A:85:33:EE
Certificate issuer:       /CN=A9141559/serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
Certificate serial:       99
Authority key identifier: 27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/1CF72A482B0C11F08B7A2511C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:13:00 +0000
ROA not before:           Wed 07 May 2025 06:25:48 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153854
IP address blocks:        163.227.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl
                          rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 06:45:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141559, serialNumber=27F5ADA9A17130739310938459B14ADA2DD2F507
        Validity
            Not Before: May  7 06:25:48 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a59aeb-bdc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3c:0b:94:84:fa:43:84:f6:f0:e1:8a:0e:3a:
                    0c:e4:b9:17:b7:a0:ea:14:14:f7:f1:53:cc:53:06:
                    33:1a:10:d9:72:26:1e:1a:83:ff:02:6c:57:26:ad:
                    4d:08:94:91:40:6e:b1:c2:88:13:1c:46:3e:8f:5e:
                    93:9e:40:7d:99:dd:a3:e1:16:32:52:af:40:9f:2f:
                    02:03:6a:e6:8a:28:a3:0e:55:f4:c2:d9:c9:35:88:
                    8c:58:81:aa:2e:bc:2f:e9:d4:31:41:e9:68:30:6e:
                    da:72:73:fd:e9:7e:51:17:89:82:72:26:de:bd:b3:
                    da:b0:f8:2c:77:3c:8e:73:ea:73:87:76:41:6e:09:
                    8e:a6:85:0c:49:99:10:19:dd:19:5c:6e:b8:75:fa:
                    3e:21:48:9a:35:75:30:d4:2f:67:63:ad:4a:cc:35:
                    e9:4d:cc:42:2c:8d:29:21:1f:bb:aa:de:00:85:ff:
                    e3:0f:b3:76:08:1b:7e:a6:e3:3c:d2:bf:85:32:12:
                    55:5f:59:c9:12:65:25:4b:de:7a:0f:fd:a5:ed:a0:
                    61:85:17:f3:48:bb:58:44:64:fd:84:a4:82:d3:3e:
                    6c:1d:45:04:e0:97:5f:61:7f:b3:9e:4c:1c:b1:13:
                    e7:b8:4c:9e:16:d5:c3:5c:9b:33:59:0a:ca:4f:e7:
                    f5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:4E:37:4B:9D:4D:CD:3E:4E:3B:D5:69:75:14:F6:8A:85:33:EE
            X509v3 Authority Key Identifier:
                keyid:27:F5:AD:A9:A1:71:30:73:93:10:93:84:59:B1:4A:DA:2D:D2:F5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J_WtqaFxMHOTEJOEWbFK2i3S9Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141559/27C2E3E62B0B11F0B92ECF81C4F9AE02/1CF72A482B0C11F08B7A2511C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6f:f9:c0:3b:66:f2:32:db:98:0b:a6:7d:c1:c0:8c:be:dd:
         9b:b5:5b:de:c0:39:00:7f:fa:b6:a6:0f:89:46:e6:a7:d0:f0:
         60:23:a7:bc:e3:e6:3b:ca:a9:79:15:0d:86:3f:ee:90:f0:98:
         12:cc:63:c7:4a:42:fe:5f:ba:cd:44:d1:e3:0b:8c:94:40:ea:
         77:9e:02:af:ba:6d:b6:6b:ae:b4:f6:34:93:93:20:25:fb:57:
         1d:7c:56:10:e0:b3:a5:04:08:3a:d3:20:10:fb:71:54:bd:40:
         16:fc:f6:c5:2c:cf:3c:ef:9d:9a:0d:e9:06:95:6b:5a:13:29:
         46:be:3e:d1:30:dd:0c:3c:df:ae:a6:a0:63:81:93:2b:99:7c:
         96:02:30:cc:69:b5:e0:ae:0a:ca:35:4c:7d:3e:e0:96:75:f8:
         ed:a4:66:ad:05:ad:c6:83:44:29:83:4b:d9:e2:0c:94:5e:7b:
         e8:c0:e6:76:20:1d:39:c6:ae:b5:d2:43:cb:bc:6a:f6:7f:cb:
         d1:c7:c2:f0:3a:a0:1f:a0:0a:4a:e7:33:ce:69:94:41:6e:0e:
         e9:19:d4:51:4a:56:05:9b:c1:b8:19:08:21:fb:af:6c:ae:3b:
         5c:dc:60:3f:7c:e9:6b:23:73:e2:9b:e2:f9:75:2b:8e:aa:01:
         3f:c4:e6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:17 2026 by rpki-client