Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
File:                     6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (raw, json)
Hash identifier:          C7LQWNUJ0+tn1CiwyEzZI+mMThGKGbGvFdyfAIkUOsM=
Subject key identifier:   C6:26:18:F5:2F:21:65:CC:37:08:01:CF:85:38:5A:CF:BB:83:33:BB
Certificate issuer:       /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Certificate serial:       C1
Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:24:33 +0000
ROA not before:           Wed 29 Oct 2025 08:24:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153706
IP address blocks:        163.223.146.0/23 maxlen: 23
                          163.223.146.0/24 maxlen: 24
                          163.223.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
                          rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
        Validity
            Not Before: Oct 29 08:24:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a45a31-5616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:57:4c:5c:93:b3:b5:52:bf:9e:f0:69:b9:
                    4c:76:6f:0a:2c:e2:46:5f:25:ef:69:04:76:4b:1a:
                    f1:5c:77:43:5f:b6:99:d4:5f:eb:e9:88:6f:b2:5a:
                    38:87:39:e3:36:0e:b0:6e:1f:d0:5b:6e:72:00:55:
                    44:65:15:aa:f6:25:ab:97:1f:be:94:3d:6a:82:63:
                    32:21:45:f6:e3:72:d1:c9:30:1b:e2:26:c0:a9:1f:
                    e9:63:6e:c7:42:88:69:91:84:7c:f6:be:4e:85:f5:
                    a5:ab:34:78:b9:5c:ec:e0:a2:b1:96:c3:11:31:09:
                    5b:d4:b1:2b:8b:b3:79:2b:da:aa:68:cb:18:22:d4:
                    be:a0:5c:b5:83:f1:a9:a5:05:15:0c:db:77:9c:b1:
                    80:1d:73:46:2c:d7:f4:3b:8e:57:ea:cf:a4:af:89:
                    9e:c1:90:98:81:76:61:e0:3d:d0:0b:a5:43:b4:86:
                    ba:9f:e0:12:d4:fb:7d:c3:1d:f1:05:d9:6a:35:a3:
                    42:67:c1:0b:c0:32:5c:9d:c6:75:b3:c4:08:bd:0f:
                    95:c7:28:88:a5:57:8d:39:a6:80:de:cd:af:16:ff:
                    86:b4:6d:68:c7:20:77:4d:35:2b:d7:93:b8:6b:5f:
                    c9:5b:38:29:31:2d:98:be:69:b1:7d:85:28:15:70:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:26:18:F5:2F:21:65:CC:37:08:01:CF:85:38:5A:CF:BB:83:33:BB
            X509v3 Authority Key Identifier:
                keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:ff:c9:16:4f:7f:63:02:f7:7e:09:e7:60:12:02:75:c8:b8:
         34:83:2b:9a:7e:32:18:70:dd:95:2b:c2:2c:3b:2a:f8:0a:d4:
         ff:58:e4:e2:a5:a2:6a:8f:2e:50:59:86:dc:7a:12:c7:93:06:
         76:b9:17:8b:fc:ce:75:e8:aa:7a:d4:6f:72:4d:9e:3d:b2:7f:
         68:3c:08:e8:b5:41:8d:9a:1f:77:75:eb:2e:e5:69:c7:0e:11:
         ef:99:ba:c8:6d:6e:8e:6a:11:62:f4:bb:e3:16:20:a6:fc:4c:
         e3:38:fd:c3:bc:1e:0d:35:c2:d3:93:ba:e5:c0:f2:a7:27:9b:
         33:94:a8:17:1e:02:19:ee:e7:b5:60:bb:6f:82:e0:a5:a1:3e:
         5d:ad:d1:79:49:f5:c0:97:e6:f5:8e:64:45:21:6b:89:c6:a4:
         0e:96:fc:5a:47:77:90:a4:0f:b6:9e:cd:dc:b3:ea:26:30:77:
         ce:c4:bb:68:07:fd:17:18:b2:c4:d1:79:26:1c:8e:c3:6d:f1:
         0e:21:fe:f1:87:8f:df:af:1e:34:af:78:94:80:26:0e:ef:81:
         4e:7b:57:ce:bc:33:4b:fe:e8:7d:02:9c:55:66:99:dd:d6:22:
         e2:06:a8:aa:ba:8d:a4:59:09:34:df:88:ae:d6:a4:5c:11:d9:
         31:e9:3d:1d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0ExOUYxMTAvBgNVBAUTKDYyQzcxRjZBRTkxNjI5Rjg1NENBOTQ2NDE3NjFCNjUy
MkNENDgwQzMwHhcNMjUxMDI5MDgyNDM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWEzMS01NjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArmhXTFyTs7VSv57wablMdm8KLOJGXyXvaQR2SxrxXHdDX7aZ1F/r6Yhvslo4
hznjNg6wbh/QW25yAFVEZRWq9iWrlx++lD1qgmMyIUX243LRyTAb4ibAqR/pY27H
QohpkYR89r5OhfWlqzR4uVzs4KKxlsMRMQlb1LEri7N5K9qqaMsYItS+oFy1g/Gp
pQUVDNt3nLGAHXNGLNf0O45X6s+kr4mewZCYgXZh4D3QC6VDtIa6n+AS1Pt9wx3x
BdlqNaNCZ8ELwDJcncZ1s8QIvQ+VxyiIpVeNOaaA3s2vFv+GtG1oxyB3TTUr15O4
a1/JWzgpMS2YvmmxfYUoFXCOcQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMYmGPUv
IWXMNwgBz4U4Ws+7gzO7MB8GA1UdIwQYMBaAFGLHH2rpFin4VMqUZBdhtlIs1IDD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTE5Ri9COUVBMDRDNjA1
OTQxMUYwQTJFMEUxNUNDNEY5QUUwMi9Zc2NmYXVrV0tmaFV5cFJrRjJHMlVpelVn
TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdNTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0ExOUYvQjlFQTA0QzYwNTk0MTFGMEEyRTBFMTVDQzRGOUFFMDIvNkFEQzNGREUx
RUE4MTFGMDgwRDYyRTBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo9+SMA0GCSqGSIb3DQEBCwUAA4IBAQAg/8kWT39jAvd+CedgEgJ1
yLg0gyuafjIYcN2VK8IsOyr4CtT/WOTipaJqjy5QWYbcehLHkwZ2uReL/M516Kp6
1G9yTZ49sn9oPAjotUGNmh93desu5WnHDhHvmbrIbW6OahFi9LvjFiCm/EzjOP3D
vB4NNcLTk7rlwPKnJ5szlKgXHgIZ7ue1YLtvguCloT5drdF5SfXAl+b1jmRFIWuJ
xqQOlvxaR3eQpA+2ns3cs+omMHfOxLtoB/0XGLLE0XkmHI7DbfEOIf7xh4/frx40
r3iUgCYO74FOe1fOvDNL/uh9ApxVZpnd1iLiBqiquo2kWQk034iu1qRcEdkx6T0d
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:23:18 2026 by rpki-client