Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/0930CE00408411F0A6916727C4F9AE02.roa
File:                     0930CE00408411F0A6916727C4F9AE02.roa (raw, json)
Hash identifier:          5e7uRpjp4LbTN28bWS11lUc0oDiHjTplRVP3KjeglPI=
Subject key identifier:   6F:D3:0C:65:BB:62:6E:B7:73:C0:45:50:86:8F:DE:52:A8:8B:78:70
Certificate issuer:       /CN=A91656C7/serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
Certificate serial:       9A
Authority key identifier: 7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/0930CE00408411F0A6916727C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:20:08 +0000
ROA not before:           Mon 23 Jun 2025 07:28:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153789
IP address blocks:        163.227.87.0/24 maxlen: 24
                          2001:df5:ba40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl
                          rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91656C7, serialNumber=7B7F2A8D84AFBD8C332A9F4B4E6709B3AE7F0AF6
        Validity
            Not Before: Jun 23 07:28:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a59c98-769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:a3:0b:10:c9:89:4b:b0:15:2b:93:0b:1a:
                    1f:c4:43:02:74:3c:b8:2a:7d:8a:b9:98:fb:d3:f6:
                    34:06:f9:df:c8:ea:f6:2a:83:4d:ba:7d:05:e9:ea:
                    5e:66:eb:10:0b:14:9b:60:1e:8d:ed:6c:1f:58:f9:
                    00:f2:33:ef:97:6a:6e:66:c1:b4:65:53:87:86:d6:
                    20:18:6c:14:b3:bb:46:56:ca:10:44:b5:1a:96:5d:
                    15:51:0c:6c:8a:12:b4:e6:05:8c:79:05:a7:cb:1d:
                    8c:73:9a:d2:92:ca:a5:46:11:c9:a4:30:c0:ee:46:
                    f8:50:99:9e:39:4f:63:63:aa:2f:34:02:33:f7:1d:
                    68:78:32:66:0f:c3:07:fe:34:e1:fe:b1:9a:72:65:
                    6c:d2:99:70:6a:79:77:f0:41:ee:8f:12:a8:48:98:
                    10:47:d8:4e:b4:19:c0:fe:0e:81:06:0d:9f:da:15:
                    47:cb:64:cb:4f:30:0e:cf:69:2a:b2:26:07:24:20:
                    3a:0f:6c:c9:7f:6d:d7:a9:e4:f2:88:87:e7:f2:8a:
                    49:8b:ad:e5:3c:dd:35:31:c8:fe:7b:de:e3:07:45:
                    0c:4a:18:5e:d3:7a:7e:e6:25:bc:66:38:30:1b:36:
                    da:67:b8:c5:6b:f7:98:fd:7f:3b:2a:35:6e:53:4d:
                    6c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D3:0C:65:BB:62:6E:B7:73:C0:45:50:86:8F:DE:52:A8:8B:78:70
            X509v3 Authority Key Identifier:
                keyid:7B:7F:2A:8D:84:AF:BD:8C:33:2A:9F:4B:4E:67:09:B3:AE:7F:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/e38qjYSvvYwzKp9LTmcJs65_CvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e38qjYSvvYwzKp9LTmcJs65_CvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91656C7/5451324A408311F08B03AB65C4F9AE02/0930CE00408411F0A6916727C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.87.0/24
                IPv6:
                  2001:df5:ba40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:00:2c:e4:07:83:89:c5:21:62:d8:f7:61:73:11:c0:3a:
         64:ab:22:77:e6:5d:b0:ef:af:d2:e8:39:c2:7f:7f:ca:cd:00:
         ed:2a:12:3e:13:57:b8:67:d4:6d:2c:8d:bd:5a:13:7e:01:0a:
         67:bc:1d:11:54:43:ba:71:d7:00:00:7f:b1:c4:d6:12:5d:dc:
         9f:60:61:dd:7e:f2:4c:ee:f3:17:2d:7b:5f:da:49:15:3c:cd:
         75:d3:b4:8e:7e:df:25:d8:22:d3:9d:48:8d:ca:af:a2:9a:75:
         aa:fb:6f:ef:e1:9c:74:12:66:c4:63:19:55:21:45:96:07:eb:
         dc:58:4d:d9:48:30:20:8f:0d:89:a5:bd:e7:ee:32:6f:de:93:
         89:15:7b:5f:a2:1a:a1:1c:1f:f6:8c:5e:50:2f:e4:76:a8:ed:
         53:d1:59:33:2d:ce:e7:2c:ac:76:e0:15:a2:bf:17:5f:6e:51:
         94:fb:c7:af:47:e6:4d:63:32:98:1e:9a:84:ee:63:62:2f:56:
         1c:e7:54:61:29:c5:98:45:fa:1c:8b:7a:eb:9f:e4:73:b3:f7:
         eb:c2:11:85:00:40:1f:e3:ef:bd:ac:df:45:bc:31:a1:89:05:
         b5:f7:9c:a1:50:c6:98:a9:da:7b:4e:a2:d3:0b:92:5f:29:86:
         96:e6:b0:fb
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU2QzcxMTAvBgNVBAUTKDdCN0YyQThEODRBRkJEOEMzMzJBOUY0QjRFNjcwOUIz
QUU3RjBBRjYwHhcNMjUwNjIzMDcyODE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWM5OC03NjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwF6jCxDJiUuwFSuTCxofxEMCdDy4Kn2KuZj70/Y0BvnfyOr2KoNNun0F6epe
ZusQCxSbYB6N7WwfWPkA8jPvl2puZsG0ZVOHhtYgGGwUs7tGVsoQRLUall0VUQxs
ihK05gWMeQWnyx2Mc5rSksqlRhHJpDDA7kb4UJmeOU9jY6ovNAIz9x1oeDJmD8MH
/jTh/rGacmVs0plwanl38EHujxKoSJgQR9hOtBnA/g6BBg2f2hVHy2TLTzAOz2kq
siYHJCA6D2zJf23XqeTyiIfn8opJi63lPN01Mcj+e97jB0UMShhe03p+5iW8Zjgw
GzbaZ7jFa/eY/X87KjVuU01sDwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFG/TDGW7
Ym63c8BFUIaP3lKoi3hwMB8GA1UdIwQYMBaAFHt/Ko2Er72MMyqfS05nCbOufwr2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTZDNy81NDUxMzI0QTQw
ODMxMUYwOEIwM0FCNjVDNEY5QUUwMi9lMzhxallTdnZZd3pLcDlMVG1jSnM2NV9D
dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UzOHFqWVN2dll3ektwOUxUbWNKczY1X0N2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjU2QzcvNTQ1MTMyNEE0MDgzMTFGMDhCMDNBQjY1QzRGOUFFMDIvMDkzMENFMDA0
MDg0MTFGMEE2OTE2NzI3QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAo+NXMA8EAgACMAkDBwAgAQ31ukAwDQYJKoZIhvcNAQELBQADggEB
AB/tACzkB4OJxSFi2PdhcxHAOmSrInfmXbDvr9LoOcJ/f8rNAO0qEj4TV7hn1G0s
jb1aE34BCme8HRFUQ7px1wAAf7HE1hJd3J9gYd1+8kzu8xcte1/aSRU8zXXTtI5+
3yXYItOdSI3Kr6Kadar7b+/hnHQSZsRjGVUhRZYH69xYTdlIMCCPDYmlvefuMm/e
k4kVe1+iGqEcH/aMXlAv5Hao7VPRWTMtzucsrHbgFaK/F19uUZT7x69H5k1jMpge
moTuY2IvVhznVGEpxZhF+hyLeuuf5HOz9+vCEYUAQB/j772s30W8MaGJBbX3nKFQ
xpip2ntOotMLkl8phpbmsPs=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:27:37 2026 by rpki-client