Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/4C7FE6802C7711F084452D84C4F9AE02.roa
File:                     4C7FE6802C7711F084452D84C4F9AE02.roa (raw, json)
Hash identifier:          qBlqZfMDjnx0UMfAlbdKwXEXccU+fsokGjpUUo7G5No=
Subject key identifier:   DB:60:AC:88:FF:AB:EC:42:E9:D3:C1:CD:75:68:FF:99:26:07:D8:DF
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       0150
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/4C7FE6802C7711F084452D84C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:46:22 +0000
ROA not before:           Tue 03 Mar 2026 05:46:22 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     3754
IP address blocks:        163.223.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Mar  3 05:46:22 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a675ae-47df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:9e:d8:82:dc:0e:3a:6e:8e:2d:32:55:64:
                    da:ed:33:c2:15:9c:0e:25:b2:fc:30:3a:c9:66:06:
                    d1:93:85:cb:dd:e8:d2:15:a4:84:e5:57:49:01:82:
                    ed:cd:db:7d:f3:4c:8e:03:f6:d9:da:92:99:68:8a:
                    ce:1c:d5:ac:49:7a:09:48:37:72:87:e4:ec:c0:1a:
                    15:ef:7e:84:97:a5:e7:83:b3:d9:3a:ad:94:13:f4:
                    77:0d:1d:26:32:ed:41:5d:84:30:32:05:9f:66:70:
                    6f:b5:0a:bf:05:06:6a:c6:e3:83:98:c5:4f:55:84:
                    7c:22:91:15:88:bf:5b:3b:c3:d2:fa:c6:09:6d:16:
                    a2:bc:40:1a:0a:9c:2b:ff:08:d9:65:69:fc:b7:98:
                    80:42:a0:42:80:a0:d0:01:47:5b:07:7d:e6:57:4c:
                    c4:ce:4b:d7:0b:44:60:cf:c7:a2:5f:ab:0d:00:27:
                    46:d4:cc:0e:9e:5c:22:eb:68:9e:e1:05:37:66:ef:
                    36:c2:2f:82:80:e8:fb:6e:f8:72:c5:02:34:d5:3f:
                    e2:a3:8b:04:b9:91:76:ef:15:43:eb:57:d7:86:c1:
                    a9:7f:fb:fd:13:32:ad:06:a0:23:ba:c5:1d:17:04:
                    7b:80:3f:ec:bf:61:75:99:79:81:5a:c8:70:19:c6:
                    18:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:60:AC:88:FF:AB:EC:42:E9:D3:C1:CD:75:68:FF:99:26:07:D8:DF
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/4C7FE6802C7711F084452D84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:57:84:2c:51:57:7e:6d:93:76:98:4c:75:7a:49:3a:40:8a:
         2e:c8:79:d4:f4:5d:6e:8e:21:d8:99:bb:c1:86:43:ab:f6:6b:
         68:3b:9b:88:63:02:fd:32:c8:a3:15:75:77:e2:88:2f:f8:45:
         5e:da:c5:c6:71:04:dd:7d:d4:ca:f6:16:4c:d2:98:2c:bf:50:
         26:a6:6e:00:16:90:31:20:83:b6:82:97:28:94:7a:53:c9:73:
         40:0e:79:a2:d7:3c:0e:9b:20:9e:89:55:ff:a1:b7:55:2f:b0:
         26:2a:38:5a:d0:5a:71:80:ff:1d:9b:b4:1b:f2:04:1d:33:7e:
         94:ea:ae:8a:4b:33:8a:70:43:95:89:bb:56:c6:dc:43:01:ff:
         ae:e4:30:8f:4c:05:da:ad:03:19:be:34:d3:bb:4b:0e:23:49:
         3a:ae:3a:0c:21:94:0b:b2:8b:f8:36:6e:ae:5b:ea:b5:5a:90:
         43:e1:54:53:90:58:7a:ba:48:cd:17:3a:04:25:4c:00:71:f9:
         8b:f3:b3:5f:18:96:8f:f8:62:0e:3e:10:a6:65:46:fa:da:66:
         e4:39:d7:2c:99:40:ff:9d:ce:d0:75:b1:f9:66:ca:14:4d:a1:
         28:93:07:0e:f5:24:13:c0:b2:7f:59:75:9d:e5:b7:74:ff:be:
         79:d3:85:33
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0OUMxMTAvBgNVBAUTKDUyRURGRURGRUExNTM1QzEzRUU4QTAwRTU1RkM3RDUx
NDQ2RDY3RDQwHhcNMjYwMzAzMDU0NjIyWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2NzVhZS00N2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtTme2ILcDjpuji0yVWTa7TPCFZwOJbL8MDrJZgbRk4XL3ejSFaSE5VdJAYLt
zdt980yOA/bZ2pKZaIrOHNWsSXoJSDdyh+TswBoV736El6Xng7PZOq2UE/R3DR0m
Mu1BXYQwMgWfZnBvtQq/BQZqxuODmMVPVYR8IpEViL9bO8PS+sYJbRaivEAaCpwr
/wjZZWn8t5iAQqBCgKDQAUdbB33mV0zEzkvXC0Rgz8eiX6sNACdG1MwOnlwi62ie
4QU3Zu82wi+CgOj7bvhyxQI01T/io4sEuZF27xVD61fXhsGpf/v9EzKtBqAjusUd
FwR7gD/sv2F1mXmBWshwGcYYQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNtgrIj/
q+xC6dPBzXVo/5kmB9jfMB8GA1UdIwQYMBaAFFLt/t/qFTXBPuigDlX8fVFEbWfU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9FNkFCMkNERTRB
MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5jRS02S0FPVmZ4OVVVUnRa
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V1My0zLW9WTmNFLTZLQU9WZng5VVVSdFo5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU0OUMvRTZBQjJDREU0QTMxMTFFRkI3QkJENTFDQzRGOUFFMDIvNEM3RkU2ODAy
Qzc3MTFGMDg0NDUyRDg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo99NMA0GCSqGSIb3DQEBCwUAA4IBAQDkV4QsUVd+bZN2mEx1ekk6
QIouyHnU9F1ujiHYmbvBhkOr9mtoO5uIYwL9MsijFXV34ogv+EVe2sXGcQTdfdTK
9hZM0pgsv1Ampm4AFpAxIIO2gpcolHpTyXNADnmi1zwOmyCeiVX/obdVL7AmKjha
0FpxgP8dm7Qb8gQdM36U6q6KSzOKcEOVibtWxtxDAf+u5DCPTAXarQMZvjTTu0sO
I0k6rjoMIZQLsov4Nm6uW+q1WpBD4VRTkFh6ukjNFzoEJUwAcfmL87NfGJaP+GIO
PhCmZUb62mbkOdcsmUD/nc7QdbH5ZsoUTaEokwcO9SQTwLJ/WXWd5bd0/75504Uz
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:45:17 2026 by rpki-client