Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa
File:                     FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa (raw, json)
Hash identifier:          MV4I569w9zPiHP/yIqubx9xyWgXjsBIdhw/uq6cgQpU=
Subject key identifier:   1B:32:A7:84:1D:F4:51:D3:DF:34:8B:2C:AF:26:8F:3B:1D:EC:5F:6A
Certificate issuer:       /CN=A9153850/serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
Certificate serial:       F2
Authority key identifier: 2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 06:37:02 +0000
ROA not before:           Sat 25 Apr 2026 06:37:02 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153680
IP address blocks:        163.223.56.0/24 maxlen: 24
                          2001:df5:3340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl
                          rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153850, serialNumber=2AB2432C3AD5128ED73E99C460D0611FAF4D220E
        Validity
            Not Before: Apr 25 06:37:02 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69ec610d-fa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:01:73:d7:68:6f:27:ea:01:71:9d:f2:da:
                    97:9a:b9:5e:b2:e8:5b:d4:a0:2c:18:8e:35:bc:70:
                    da:53:cf:af:56:9d:35:e4:2b:8a:5f:23:52:6e:e0:
                    b1:31:c9:71:80:ba:7a:9f:5d:7d:64:9e:0a:f4:4a:
                    7e:15:7e:3f:ad:ef:fe:30:2a:57:13:96:bf:89:5f:
                    10:20:3e:91:cf:3d:a3:6b:65:91:d6:b4:39:77:d8:
                    7a:18:4a:19:43:c8:39:f8:85:8f:db:bc:4e:c0:62:
                    9f:65:75:cc:1b:ff:57:fc:e5:bc:b9:22:25:4d:4f:
                    3d:7c:96:39:d8:51:cb:b3:8b:30:03:86:0c:87:fb:
                    5e:03:20:b6:4b:e7:d2:69:5d:b7:a5:7f:ee:38:30:
                    a7:e0:d8:16:ca:a2:9b:bd:cd:e3:82:37:e8:0c:94:
                    ab:aa:b2:2d:9a:df:c4:5d:32:16:08:b6:c4:9f:d3:
                    71:a0:5d:9e:2c:de:34:53:46:47:e5:85:27:59:2d:
                    6c:54:55:70:36:8f:7f:73:04:89:2b:eb:82:44:a6:
                    67:57:ac:94:16:fd:9e:41:0b:14:9e:6b:a9:35:2b:
                    2b:0a:cf:80:fc:70:df:df:08:35:9c:30:09:e5:23:
                    6e:5b:52:12:49:db:44:65:4c:35:33:d9:08:c1:45:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:32:A7:84:1D:F4:51:D3:DF:34:8B:2C:AF:26:8F:3B:1D:EC:5F:6A
            X509v3 Authority Key Identifier:
                keyid:2A:B2:43:2C:3A:D5:12:8E:D7:3E:99:C4:60:D0:61:1F:AF:4D:22:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/KrJDLDrVEo7XPpnEYNBhH69NIg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KrJDLDrVEo7XPpnEYNBhH69NIg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153850/7B3B37D4018611F0B05B4C59C4F9AE02/FC7F121AAA6F11F0BCFEBD63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.56.0/24
                IPv6:
                  2001:df5:3340::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:b8:01:f2:26:df:7e:fe:45:7c:25:0a:a2:86:17:1d:be:aa:
         d0:6b:73:83:c8:89:c1:e4:f9:6c:d4:10:81:20:9a:01:78:fe:
         5e:8a:bd:40:66:cd:bb:94:76:52:f6:8e:53:48:b6:66:ce:e2:
         31:4f:46:86:1e:e0:e2:c7:aa:78:04:7d:87:99:0a:76:27:42:
         23:33:c0:dc:c3:bb:6c:5d:a4:c7:a5:95:ef:4f:47:07:6e:6d:
         df:d2:98:ef:eb:9c:f7:9c:98:84:4c:a1:4b:10:7a:91:be:52:
         00:fd:e0:53:31:d0:78:61:ac:2c:6b:ac:ff:5c:78:50:a7:16:
         f7:79:60:45:a2:96:f8:0f:9a:5f:f6:24:17:d8:56:07:0f:b0:
         ae:7c:8c:e4:15:e4:8f:96:50:7d:d7:77:b6:c0:63:fd:ad:ca:
         33:91:17:bb:ea:6c:68:7f:42:de:2b:d3:ee:f0:31:21:72:33:
         4b:d6:f8:a5:b5:5c:bd:c1:b0:de:8f:9d:a4:25:48:e5:e5:ec:
         d8:74:d0:69:7b:95:76:2e:3f:22:c8:01:db:09:63:a1:16:89:
         96:92:cb:ff:25:8e:8e:46:35:65:3d:aa:08:8a:57:5c:ce:ac:
         41:72:82:a6:85:cf:96:91:f0:f1:84:09:27:f6:7e:72:0d:d5:
         5b:a7:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:23 2026 by rpki-client