Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/8000E572494F11F1BF737F10BE833773.roa
File:                     8000E572494F11F1BF737F10BE833773.roa (raw, json)
Hash identifier:          RSiETjjKzvCQ0UxbntfjXpMp1b8caiQTMLYifGRmsgs=
Subject key identifier:   5D:A6:47:3C:0D:28:22:BD:19:51:D6:DC:1B:55:E8:E5:9F:43:C5:2F
Certificate issuer:       /CN=A9183B95/serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
Certificate serial:       0509
Authority key identifier: FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/8000E572494F11F1BF737F10BE833773.roa
Signing time:             Wed 06 May 2026 13:28:42 +0000
ROA not before:           Wed 06 May 2026 13:28:42 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55154
IP address blocks:        43.228.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl
                          rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183B95, serialNumber=FAD7ECC9C05CD8EB2056909D6C614715E2C5133E
        Validity
            Not Before: May  6 13:28:42 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69fb420a-2ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:51:e6:62:91:92:a4:42:07:6e:2d:39:cc:
                    f9:37:39:a4:0f:ae:0c:91:ea:2d:8c:f4:bc:23:04:
                    ff:24:55:fa:95:3e:8f:88:19:40:ea:3b:9d:7d:06:
                    8a:6d:53:b5:b4:14:64:81:dc:f2:23:57:8b:a7:e2:
                    ed:57:c8:95:1a:a1:25:b5:b1:69:46:26:94:90:ac:
                    6e:37:10:77:70:29:5a:a5:d9:58:1f:ac:f2:51:63:
                    c9:ef:7c:eb:38:90:f0:fb:2f:8d:95:5c:bc:e1:29:
                    07:55:78:c9:65:3f:c9:0c:f5:a0:e1:11:9f:4e:2e:
                    82:68:04:0f:f4:df:36:e0:7d:cc:e6:c5:b0:de:cb:
                    e5:0b:1b:d4:09:47:bf:13:b2:cc:a5:0c:f1:f0:f2:
                    d1:cd:8c:73:9d:2e:88:27:39:88:03:df:34:d3:4b:
                    ab:46:70:2a:19:73:46:b1:09:a8:b0:01:84:5c:f2:
                    18:45:b6:a2:d3:b5:da:5c:05:d9:8b:fb:ba:75:3a:
                    67:98:f0:b0:47:fd:fb:0d:58:5a:dd:90:2a:4f:a4:
                    13:6b:58:1a:b7:96:0f:9b:f7:ae:74:24:e1:08:e3:
                    bd:97:ea:f1:99:8e:0a:53:10:6f:ea:1d:27:1e:bd:
                    b5:46:bc:95:e3:21:c9:a5:ed:a0:50:70:13:99:71:
                    57:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:47:3C:0D:28:22:BD:19:51:D6:DC:1B:55:E8:E5:9F:43:C5:2F
            X509v3 Authority Key Identifier:
                keyid:FA:D7:EC:C9:C0:5C:D8:EB:20:56:90:9D:6C:61:47:15:E2:C5:13:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/-tfsycBc2OsgVpCdbGFHFeLFEz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tfsycBc2OsgVpCdbGFHFeLFEz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183B95/B54A3C34803511EC9ADDA54FC4F9AE02/8000E572494F11F1BF737F10BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.228.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:d9:93:20:e4:eb:21:57:f5:23:fa:43:8c:90:d8:dc:49:
         b3:29:0e:70:3a:4f:5e:1c:7f:d4:50:4f:77:65:78:4b:ea:aa:
         a0:f8:8e:2d:04:8d:40:0f:43:13:03:6e:e2:bb:52:26:c2:c5:
         78:3a:6e:0b:19:a2:ec:61:7d:bd:53:69:aa:60:d2:95:5b:3d:
         14:1d:7b:2d:cc:92:bb:9e:f8:c6:ce:ff:44:ab:78:75:70:0a:
         37:53:bd:ad:2c:b7:e3:5e:d8:e1:42:8e:3d:f1:44:5e:8b:51:
         30:08:ec:58:fa:7d:d3:b3:71:f1:33:1f:53:ee:80:81:9f:82:
         db:eb:42:3e:e7:65:9c:7b:ae:b6:b9:69:8a:d1:19:2e:2d:6f:
         7a:0e:c0:14:5c:ec:c2:2f:2b:cd:a1:64:5b:f8:d0:aa:d3:61:
         f7:99:be:75:b4:af:1f:ec:71:4d:87:01:b8:ae:ef:b3:ef:af:
         3a:ed:27:4b:fc:5b:33:0c:63:c5:6d:04:51:a6:4d:f9:c9:a0:
         3e:0a:2b:10:2c:77:15:72:39:58:c7:aa:29:41:58:59:b0:fa:
         07:26:5e:df:f5:50:fe:5c:82:c0:f8:53:79:46:b3:49:d8:e9:
         c3:01:71:eb:7f:39:71:1a:38:be:9a:81:9b:7e:2d:67:ca:ea:
         d7:bd:4c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:33 2026 by rpki-client