Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/EABFF866266511F0A3060E66C4F9AE02.roa
File:                     EABFF866266511F0A3060E66C4F9AE02.roa (raw, json)
Hash identifier:          FisgyItAVG3Y15df/opUvBoxNb4fchWDbDPeeu269Zk=
Subject key identifier:   62:8D:9C:F7:40:D4:4A:C6:39:ED:12:3C:D7:40:7B:F7:24:2A:31:18
Certificate issuer:       /CN=A9175B42/serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
Certificate serial:       DC
Authority key identifier: D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/EABFF866266511F0A3060E66C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 08:34:39 +0000
ROA not before:           Wed 01 Jul 2026 08:34:39 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     153819
IP address blocks:        163.227.174.0/23 maxlen: 23
                          163.227.174.0/24 maxlen: 24
                          163.227.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl
                          rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:13:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175B42, serialNumber=D2BA251F83116BBB53A0C892310F4FF7ADEFFDEB
        Validity
            Not Before: Jul  1 08:34:39 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44d11e-58ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2d:36:30:4a:6c:3e:ee:c2:95:dc:6f:64:85:
                    d4:88:07:d2:62:96:2f:b8:bd:95:6a:28:24:22:47:
                    47:1c:d1:1f:8a:cf:05:d1:85:34:58:5b:99:c8:e8:
                    9a:e9:3d:6b:5e:8b:8a:08:4e:86:7d:4e:3d:80:9f:
                    c0:e7:ba:08:be:52:17:37:c6:0b:80:c1:95:a0:77:
                    8f:a6:bf:00:89:12:9f:a0:e1:cc:41:6d:bc:e1:1f:
                    37:41:22:e0:b1:79:8b:9e:7a:c5:47:68:ea:01:e6:
                    35:2b:12:bc:2c:08:ff:79:92:64:48:86:dc:ff:be:
                    f8:f7:50:d0:14:48:17:ae:d4:51:41:ef:41:20:87:
                    f1:7d:2e:a0:05:9c:ac:e4:dd:0b:b5:99:7c:28:31:
                    63:3b:d6:e5:72:09:da:5c:8a:ae:5c:83:9b:d5:3a:
                    73:d8:3f:5b:1b:95:94:96:a1:a5:bb:c5:ef:83:42:
                    8e:b8:ce:6f:3f:c0:2c:66:3a:f9:36:16:cf:83:72:
                    97:ce:e3:aa:12:46:c7:a5:ab:3d:de:e4:e5:2e:69:
                    97:48:05:e8:e4:fa:3d:91:b5:65:29:57:af:6c:04:
                    48:9e:96:fc:ca:4b:3a:d1:60:59:a6:43:2d:2c:b5:
                    97:74:e3:54:5b:a1:09:a1:7a:f1:18:0b:b7:93:c1:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8D:9C:F7:40:D4:4A:C6:39:ED:12:3C:D7:40:7B:F7:24:2A:31:18
            X509v3 Authority Key Identifier:
                keyid:D2:BA:25:1F:83:11:6B:BB:53:A0:C8:92:31:0F:4F:F7:AD:EF:FD:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/0rolH4MRa7tToMiSMQ9P963v_es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0rolH4MRa7tToMiSMQ9P963v_es.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175B42/48FEB1C0266511F08015AB62C4F9AE02/EABFF866266511F0A3060E66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:77:97:49:b7:fc:f1:11:b5:47:c1:b2:98:48:71:16:d3:75:
         78:0f:57:b8:67:39:2e:59:5c:37:c6:5e:80:c3:06:62:53:69:
         f1:f8:c7:6f:d1:3f:30:11:39:47:98:54:da:88:17:df:bf:a8:
         ac:46:c3:21:29:b6:6c:1d:54:50:c8:b5:36:6a:0b:b2:bd:0c:
         85:bf:15:db:64:5c:61:2a:06:d8:ee:d3:e0:da:8a:95:a3:11:
         a4:af:5f:31:b1:d1:cd:22:f2:ed:fc:0a:46:a6:56:38:da:5b:
         f2:14:a0:fb:0d:ac:f8:14:99:c9:38:0c:dd:4e:0c:cb:54:c4:
         7a:f1:d0:d6:6b:80:56:74:35:a1:b5:01:4d:ea:89:9a:87:77:
         fc:7c:49:48:05:01:e4:3a:e9:44:1f:30:b7:e0:03:42:8f:4c:
         a5:1b:64:63:65:d3:af:0c:09:14:c1:ab:e7:99:2e:b4:34:c0:
         dd:9d:2a:ac:03:88:e6:28:a5:7a:06:8d:4b:b8:56:6c:e1:08:
         3d:1b:5c:b0:2e:bb:62:0c:9e:f1:a1:78:5f:d6:7d:5d:13:81:
         88:9f:3d:53:b1:9c:a7:5f:a9:4d:fe:48:fb:fe:12:8b:22:2d:
         7c:61:11:60:b2:bb:e8:cc:f3:9c:4e:79:ea:b9:b2:df:eb:fc:
         98:01:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:59:13 2026 by rpki-client