Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
File:                     DE917E7016C511F085B4FF6FC4F9AE02.roa (raw, json)
Hash identifier:          ETq/ueZ+moHz6omb3XVGSrkGJeYMxT06+9CG44Ybvps=
Subject key identifier:   22:FF:BD:71:0E:6F:97:12:CE:85:07:33:B1:13:7C:50:D3:07:81:25
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       B5
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
Signing time:             Wed 25 Mar 2026 06:44:42 +0000
ROA not before:           Wed 25 Mar 2026 06:44:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153738
IP address blocks:        163.223.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Mar 25 06:44:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69c38459-ba57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:aa:93:30:00:fb:03:23:b9:d4:02:17:74:
                    db:f1:1a:8b:33:dc:84:27:33:fa:7c:ff:1a:2f:ec:
                    a9:69:63:42:b9:70:a4:21:63:f7:9d:a0:1b:70:f3:
                    f8:82:b4:73:15:6f:a9:3b:cb:2d:51:cc:eb:36:2d:
                    c7:e2:35:30:8b:fe:40:2c:2f:f7:43:f3:e6:8d:df:
                    eb:30:e5:e1:39:84:5b:db:f4:29:2f:70:c6:d5:3f:
                    43:a1:88:ab:91:3b:2b:58:ac:68:7e:5c:26:d8:03:
                    fc:7e:6b:91:c0:d0:ff:68:c0:af:aa:ac:6c:a9:ce:
                    e0:35:cc:41:2b:7e:9a:03:ac:d2:21:aa:1a:01:43:
                    df:4f:aa:4d:2f:e3:0d:85:6a:ff:89:82:84:79:98:
                    ab:1c:cd:15:28:ff:46:1a:bb:33:6b:76:05:a4:fc:
                    b2:ed:90:b3:83:f4:fe:43:bc:32:e2:30:8d:99:34:
                    9a:a2:3e:c7:0b:22:8e:65:0d:68:06:33:1e:c0:b3:
                    dc:66:b5:4b:d5:0a:e1:54:f8:8a:c0:97:d5:d2:4a:
                    be:9c:7c:d8:7e:55:71:9d:c9:6e:93:b4:16:48:87:
                    83:01:56:8c:d1:cf:65:9f:32:3f:07:51:74:f5:b4:
                    a3:af:db:3e:8c:b6:ae:31:99:70:55:e4:f4:73:d6:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:BD:71:0E:6F:97:12:CE:85:07:33:B1:13:7C:50:D3:07:81:25
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e6:a6:79:de:fd:a4:b4:f7:d7:62:0c:4e:7b:93:24:1c:f0:
         f7:51:b4:42:0a:3e:a5:5e:ea:21:8d:4d:f1:c7:3c:16:0c:15:
         de:53:d7:e7:8a:be:1a:4d:d3:08:a0:6e:5d:a2:53:49:31:ad:
         03:69:5c:40:a6:6b:3d:7d:e5:e0:41:4d:66:6c:2d:f4:66:f5:
         4f:ed:cd:b5:ad:2d:17:a4:14:0b:de:c0:cc:44:0e:c4:48:c5:
         a2:4a:43:6e:49:53:82:85:47:19:b4:07:f7:01:53:25:ef:58:
         b0:57:ce:b5:70:84:b5:c3:0d:79:f8:48:bf:61:25:35:f1:c7:
         02:d8:f4:2c:6b:30:18:0c:04:07:f1:da:c9:0c:5d:67:aa:4b:
         91:dc:50:51:7e:b7:78:39:6f:03:da:25:e4:17:a9:9b:94:2f:
         70:4d:2a:80:7a:36:d7:19:67:ca:60:41:50:e5:85:a7:1c:88:
         f2:6e:33:7d:5b:83:5b:c7:85:e9:a4:6d:55:bc:7e:b0:a2:bc:
         3b:22:02:d6:40:b8:a2:33:61:d8:fe:22:71:de:c7:8b:d3:74:
         02:15:fc:2c:3f:0e:0c:ed:ed:ae:c5:96:04:06:19:92:96:30:
         56:d8:c4:0e:12:17:7b:15:2e:10:d3:5f:22:d2:ab:33:b6:29:
         82:51:37:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI1NTExMTAvBgNVBAUTKDJGREQzODA0RDY0NThFQUYxQ0IzOTE3QjVFMzMyRkJB
NUM3MTVGOTEwHhcNMjYwMzI1MDY0NDQyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWMzODQ1OS1iYTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsB2qkzAA+wMjudQCF3Tb8RqLM9yEJzP6fP8aL+ypaWNCuXCkIWP3naAbcPP4
grRzFW+pO8stUczrNi3H4jUwi/5ALC/3Q/Pmjd/rMOXhOYRb2/QpL3DG1T9DoYir
kTsrWKxoflwm2AP8fmuRwND/aMCvqqxsqc7gNcxBK36aA6zSIaoaAUPfT6pNL+MN
hWr/iYKEeZirHM0VKP9GGrsza3YFpPyy7ZCzg/T+Q7wy4jCNmTSaoj7HCyKOZQ1o
BjMewLPcZrVL1QrhVPiKwJfV0kq+nHzYflVxncluk7QWSIeDAVaM0c9lnzI/B1F0
9bSjr9s+jLauMZlwVeT0c9bm/QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCL/vXEO
b5cSzoUHM7ETfFDTB4ElMB8GA1UdIwQYMBaAFC/dOATWRY6vHLORe14zL7pccV+R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjU1MS81QUIxOTIwMjE2
QzUxMUYwODgxNUY0NkVDNEY5QUUwMi9MOTA0Qk5aRmpxOGNzNUY3WGpNdnVseHhY
NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w5MDRCTlpGanE4Y3M1RjdYak12dWx4eFg1RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUI1NTEvNUFCMTkyMDIxNkM1MTFGMDg4MTVGNDZFQzRGOUFFMDIvREU5MTdFNzAx
NkM1MTFGMDg1QjRGRjZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo9/KMA0GCSqGSIb3DQEBCwUAA4IBAQC15qZ53v2ktPfXYgxOe5Mk
HPD3UbRCCj6lXuohjU3xxzwWDBXeU9fnir4aTdMIoG5dolNJMa0DaVxApms9feXg
QU1mbC30ZvVP7c21rS0XpBQL3sDMRA7ESMWiSkNuSVOChUcZtAf3AVMl71iwV861
cIS1ww15+Ei/YSU18ccC2PQsazAYDAQH8drJDF1nqkuR3FBRfrd4OW8D2iXkF6mb
lC9wTSqAejbXGWfKYEFQ5YWnHIjybjN9W4Nbx4XppG1VvH6worw7IgLWQLiiM2HY
/iJx3seL03QCFfwsPw4M7e2uxZYEBhmSljBW2MQOEhd7FS4Q018i0qsztimCUTdF
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:01 2026 by rpki-client