Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/88E4BD9A288D11F1BCA0C177AC833773.roa
File:                     88E4BD9A288D11F1BCA0C177AC833773.roa (raw, json)
Hash identifier:          ePFNe4XO2TIzeYfRmxq7NksAW3nOo1W0WY0Fjnbncb4=
Subject key identifier:   F8:02:C5:BF:8F:68:81:E4:13:90:CC:29:9E:E4:7A:81:8D:8E:81:BB
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       BE
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/88E4BD9A288D11F1BCA0C177AC833773.roa
Signing time:             Wed 25 Mar 2026 20:59:38 +0000
ROA not before:           Wed 25 Mar 2026 20:59:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152698
IP address blocks:        163.227.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 22:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Mar 25 20:59:38 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69c44cba-dfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:8a:c9:db:3e:12:0d:62:ec:85:ba:71:63:
                    b6:e8:63:5b:3e:ef:0f:9a:c7:58:56:99:84:25:e7:
                    ac:a0:f3:56:8e:ea:6f:1a:3d:07:90:3a:91:61:0a:
                    ff:4f:49:24:7d:78:f2:bc:ce:85:ce:9e:07:02:f3:
                    ee:48:c0:f3:29:60:04:bc:bd:ac:57:5b:af:a4:7e:
                    de:3e:97:64:27:6f:18:75:ec:b5:b4:fb:de:43:da:
                    aa:a1:5a:fd:88:c9:42:4a:88:2b:d2:90:c4:53:4f:
                    15:57:5b:c2:1c:9d:41:80:6d:d5:d6:51:1c:de:1f:
                    fa:31:71:84:67:7e:c1:76:15:d7:fe:32:a1:10:93:
                    5b:a0:4a:e1:95:b0:da:b4:e4:38:0d:2a:ac:da:85:
                    10:43:1c:9c:8d:57:4a:a6:a1:e6:b5:5f:4c:b1:d4:
                    b1:50:ef:d6:6a:0d:fe:2f:45:34:ac:55:5c:e6:a3:
                    48:7d:4e:ee:5a:03:34:45:e5:23:ca:7d:1c:2c:f4:
                    e6:c4:a7:e5:b8:da:f5:86:9d:72:56:0d:8a:92:76:
                    2c:6c:c0:23:53:63:d7:0b:6c:ae:ef:76:6f:d3:df:
                    7b:bb:d6:1a:94:8b:87:48:7d:7a:4c:8c:56:8f:d1:
                    92:01:56:c5:b5:ec:bc:13:eb:3e:0e:8c:f4:bc:ea:
                    1b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:C5:BF:8F:68:81:E4:13:90:CC:29:9E:E4:7A:81:8D:8E:81:BB
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/88E4BD9A288D11F1BCA0C177AC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:d8:cd:71:78:b0:bd:aa:48:22:db:0d:2e:a6:b0:80:45:
         17:36:2c:67:c2:f0:d7:4e:86:28:4d:34:d3:62:34:56:77:0d:
         de:b0:fe:d7:6e:45:a5:d7:34:91:cd:88:45:63:20:9e:b9:8f:
         f5:e6:75:ae:23:eb:43:ff:86:3c:d2:e6:35:3e:7a:d9:53:d6:
         53:7e:d4:3e:b4:25:05:e7:84:03:90:38:2b:be:e0:d0:ad:33:
         02:6f:3f:45:4d:a1:4b:b1:05:e8:69:d6:a8:f2:4d:ac:eb:4a:
         93:d4:f3:6b:1b:49:9f:30:df:a5:65:c4:82:3e:e4:02:1d:42:
         97:63:d1:5d:b9:33:30:d0:fd:01:4c:de:38:36:40:1a:c6:71:
         c1:7e:f9:73:0f:40:8d:b0:9e:e3:c3:99:87:fa:53:8b:5f:0f:
         96:b5:83:1d:c0:1e:20:bb:8f:26:be:c6:70:58:42:a6:2b:6a:
         fb:60:42:0f:dd:f6:1e:22:48:13:8e:df:e9:93:ed:07:a9:19:
         48:db:10:3c:03:58:63:89:d3:cc:5d:27:f6:0e:a1:c8:1b:fc:
         dc:0b:9c:5e:d6:52:1c:4b:d6:e3:c4:5e:b2:c2:f7:63:d3:89:
         cd:d1:ae:31:e4:29:8f:d5:d5:10:9d:63:4e:6b:11:5b:a1:f1:
         0e:bb:88:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:33:09 2026 by rpki-client