Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/552F0C342E2011F0AF4AB70CC4F9AE02.roa
File:                     552F0C342E2011F0AF4AB70CC4F9AE02.roa (raw, json)
Hash identifier:          Os32lL30yxnI+rMD5Up4IutqeJR0LoJ837R4MBPxXs4=
Subject key identifier:   7F:0E:A0:9B:3D:CA:CC:A6:56:05:33:B9:D7:91:15:B9:ED:B1:EC:11
Certificate issuer:       /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial:       AA
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/552F0C342E2011F0AF4AB70CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:27:13 +0000
ROA not before:           Sun 11 May 2025 04:28:05 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149874
IP address blocks:        163.227.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
                          rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
        Validity
            Not Before: May 11 04:28:05 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58221-f444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:6b:06:31:30:56:09:ce:43:76:73:eb:f4:
                    ea:a7:c6:de:e7:d6:d8:ba:e1:10:ec:d6:c4:5a:c6:
                    6b:44:68:0c:bd:1f:bb:22:65:46:20:57:13:32:46:
                    2b:2b:cd:b0:e3:a3:03:47:0c:bd:2d:15:d0:77:ff:
                    bb:2d:45:ff:1a:bf:4e:6c:61:f9:91:36:cb:70:33:
                    de:48:f6:7b:ec:f6:81:d3:f2:b2:71:4c:46:fb:a0:
                    07:f4:44:5b:1f:d3:04:26:48:4d:d5:7f:12:6d:29:
                    d8:68:a5:55:87:eb:32:78:a7:3b:2d:a6:ec:c7:01:
                    11:e9:8d:41:b6:08:72:b1:44:a4:ae:2c:6f:4e:e9:
                    a3:66:4d:8d:d6:66:fd:c5:19:48:4f:ee:74:61:05:
                    84:05:6d:49:1c:17:3e:bc:d1:36:74:35:ad:18:67:
                    76:ad:96:cd:5f:16:8f:e3:27:db:72:fe:fc:d2:1e:
                    fe:61:c9:1a:86:7e:8a:0f:65:6e:96:26:a0:22:76:
                    b1:51:7e:3e:73:81:29:05:26:fa:7e:f0:57:9b:06:
                    65:b2:58:c4:f1:89:4a:5a:58:16:c4:2d:22:c2:a5:
                    07:8b:d7:15:f3:6e:ef:14:22:0a:2b:3c:15:c6:0c:
                    23:50:ee:ea:4b:51:6f:d0:0b:65:23:96:9b:e9:db:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0E:A0:9B:3D:CA:CC:A6:56:05:33:B9:D7:91:15:B9:ED:B1:EC:11
            X509v3 Authority Key Identifier:
                keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/552F0C342E2011F0AF4AB70CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:fc:0d:73:3b:2d:d0:ec:c0:fb:3d:39:77:3d:68:05:13:27:
         ac:fa:34:dd:64:1a:ef:19:ea:2e:36:b8:04:54:67:39:3e:f4:
         b3:6f:50:1b:8d:4c:45:72:f8:49:1b:41:6a:a5:f9:30:9b:47:
         bd:16:ec:f8:8e:3b:41:1f:01:9f:ae:ab:f8:42:de:f9:97:4b:
         cc:33:1a:7b:49:a1:c7:a1:4a:b2:89:3f:30:ac:ac:28:53:93:
         8e:48:9f:7b:40:04:9d:66:cf:7f:02:d8:35:f6:21:87:4e:b4:
         ff:bb:40:4d:bc:b7:98:73:38:a4:5a:3b:19:b3:bb:64:6c:cf:
         a3:0e:10:d3:0e:31:3e:c5:59:af:50:71:2b:52:35:a1:ad:d1:
         bb:b0:6d:e8:03:d2:ae:eb:81:d7:8c:ce:90:55:87:91:fb:97:
         7f:61:92:46:18:d8:ea:a0:fb:98:c1:b3:da:20:47:61:e1:f7:
         47:fc:7c:81:9b:80:f3:13:cd:99:86:33:fc:52:c0:15:f2:19:
         46:d2:34:1f:75:8d:86:49:63:80:e5:15:cc:bc:e5:af:13:70:
         26:72:35:10:97:50:e9:c1:87:5e:91:ff:b1:7d:f4:99:f7:2c:
         6f:c9:45:9e:2f:c6:96:7d:37:46:a0:65:44:ed:d6:77:62:7d:
         a6:e0:98:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:38 2026 by rpki-client