Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/45A63E5E34C911F09E00523CC4F9AE02.roa
File:                     45A63E5E34C911F09E00523CC4F9AE02.roa (raw, json)
Hash identifier:          niJA5yf7uOGBwlsWQESb35Itj77e7OEteEhIeud6iMk=
Subject key identifier:   D0:9F:65:0E:59:36:93:F6:01:C5:25:52:AD:DD:5A:8F:48:E4:1C:80
Certificate issuer:       /CN=A9181CB2/serialNumber=5A86FED84155BBE475894ACAC52AA76566944094
Certificate serial:       F0
Authority key identifier: 5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/45A63E5E34C911F09E00523CC4F9AE02.roa
Signing time:             Tue 21 Jul 2026 09:22:48 +0000
ROA not before:           Tue 21 Jul 2026 09:22:48 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153844
IP address blocks:        163.227.212.0/23 maxlen: 24
                          2402:b60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181CB2, serialNumber=5A86FED84155BBE475894ACAC52AA76566944094
        Validity
            Not Before: Jul 21 09:22:48 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a5f3a68-398c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:d2:a1:58:39:a5:a5:64:cf:9c:2d:2c:da:
                    e6:f6:f6:aa:d0:58:ab:a3:d1:d2:57:1d:01:13:0a:
                    81:64:64:81:a5:61:2b:7b:90:c4:92:ed:7a:e6:92:
                    fc:79:d5:fe:f1:1b:e1:2f:44:a8:b4:73:e5:83:7e:
                    b4:c0:cb:77:37:b0:a3:c0:d5:45:ac:ca:64:f9:fe:
                    8f:17:df:90:ec:9c:f4:98:e5:da:c8:8f:14:4d:6f:
                    82:6e:bd:bf:89:88:bb:45:37:96:30:f7:10:4b:95:
                    84:5f:56:11:fb:9a:c7:f2:74:60:69:43:cb:49:f9:
                    6f:95:e6:64:bb:3e:4f:7d:97:3d:5e:92:96:02:0b:
                    b3:88:1b:79:78:f5:d7:e3:4f:8f:fc:d9:d7:4d:e7:
                    4c:70:a2:e1:44:5d:27:ab:ad:c2:2d:5b:84:69:26:
                    04:9b:e1:02:97:f7:7c:63:4b:48:68:46:c3:48:40:
                    92:5f:e9:aa:27:a9:1e:8f:50:5a:5a:d8:ff:47:a9:
                    67:14:d6:32:dd:d1:29:03:26:e9:e7:1c:26:31:bd:
                    79:c0:44:9a:2d:6f:37:29:af:50:ce:e4:74:a1:57:
                    06:69:ab:80:2a:40:be:b7:83:57:e1:4d:96:34:05:
                    ac:0d:47:d4:85:cc:b4:38:cd:02:56:a8:49:08:be:
                    47:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9F:65:0E:59:36:93:F6:01:C5:25:52:AD:DD:5A:8F:48:E4:1C:80
            X509v3 Authority Key Identifier:
                keyid:5A:86:FE:D8:41:55:BB:E4:75:89:4A:CA:C5:2A:A7:65:66:94:40:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wob-2EFVu-R1iUrKxSqnZWaUQJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181CB2/DC9A781E28E111F0A2304168C4F9AE02/45A63E5E34C911F09E00523CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.212.0/23
                IPv6:
                  2402:b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:06:16:ba:47:ee:ec:27:99:95:43:87:f5:30:14:a0:e7:8b:
         57:4f:ca:d4:fa:8e:ee:14:32:c2:be:e0:1b:fe:a0:df:74:4e:
         e5:79:9f:c9:7e:f3:5b:04:33:e2:e8:e6:0c:28:d5:af:70:c1:
         b8:3c:79:a0:3e:34:a4:ac:68:e8:af:2f:fb:3d:f7:c9:99:0c:
         c9:49:03:6e:c0:9d:30:6b:91:c2:1c:75:21:5e:c1:ad:cf:00:
         9a:3f:32:71:a8:5d:60:51:99:16:e3:dd:e7:40:21:0e:ea:fb:
         f3:6e:78:78:a9:26:9a:24:01:59:34:7a:0d:f0:cb:e4:3b:13:
         83:0b:de:f8:60:6f:5a:2c:82:b5:51:70:56:0c:79:35:26:54:
         2a:bc:ad:dc:e0:91:ac:a3:4a:42:24:8b:b9:85:41:07:71:55:
         8b:6c:98:ea:01:66:79:7e:57:c6:a8:7d:4c:2c:e9:8e:ee:e3:
         e0:01:d0:99:3b:1d:69:0e:df:14:04:1d:2f:85:1e:1a:07:74:
         9d:5d:7b:9b:a9:3d:2d:fc:e3:e4:8f:f8:69:77:7a:e3:69:5f:
         1a:cf:88:c8:ea:71:75:c5:18:86:84:d9:62:81:b0:7a:81:e2:
         88:39:8a:3a:23:6a:e5:1b:21:7f:7a:6d:8c:06:3b:f0:00:a7:
         00:87:cd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:00 2026 by rpki-client