Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
File:                     C865C1BC8D2E11F0A977AE41C4F9AE02.roa (raw, json)
Hash identifier:          Fw/j+y8H8YzLuAy+NNQ6vU7kAdtmWkerdqp60DAL/h4=
Subject key identifier:   1B:A9:E0:77:D2:18:98:4F:FB:0E:0D:71:D6:D8:2C:AD:5C:6E:70:6B
Certificate issuer:       /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial:       AB
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:27:14 +0000
ROA not before:           Mon 29 Sep 2025 02:50:50 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153836
IP address blocks:        163.227.185.0/24 maxlen: 24
                          2001:df5:77c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
                          rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:25:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
        Validity
            Not Before: Sep 29 02:50:50 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58222-5501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4d:f1:af:b2:af:47:85:f8:90:da:47:cf:48:
                    3c:b8:3f:88:65:5f:24:8c:63:cc:fd:24:79:96:78:
                    1d:b5:62:bd:ba:8b:6e:f3:fa:22:87:fe:a3:cc:2c:
                    47:26:e0:20:32:62:88:af:45:37:48:5e:eb:f5:93:
                    81:f9:8c:dd:54:c7:f8:f7:c9:5b:20:95:36:83:0c:
                    5f:c3:2f:8e:d6:23:27:7e:be:44:7f:e5:5d:db:13:
                    99:03:d2:98:7e:24:11:cb:b4:1c:16:ed:a9:a6:44:
                    03:bb:e4:00:de:7f:b4:9f:26:9f:76:05:a5:33:f6:
                    8a:b7:f9:5d:45:95:9a:16:0a:99:ed:c5:9f:82:20:
                    1e:de:42:25:11:08:cd:01:cc:d9:77:fc:2a:a9:e6:
                    e2:cb:2f:62:2e:c9:73:0b:c2:b6:66:7e:c2:70:cb:
                    d6:c6:db:4c:6e:a8:20:05:bd:8b:f3:1d:7f:36:c4:
                    61:70:26:d6:52:0f:df:42:df:0d:97:69:c8:36:7b:
                    22:9a:94:ec:2b:ea:3c:56:e8:53:53:dc:6b:71:ba:
                    fd:6d:fa:6f:63:bb:15:2a:eb:93:0d:4a:51:14:63:
                    96:af:ef:5f:c6:44:4b:d4:f5:76:5a:35:31:d0:94:
                    0c:0a:35:62:9c:4a:8f:a5:18:e2:4a:ef:0a:a5:1d:
                    aa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:E0:77:D2:18:98:4F:FB:0E:0D:71:D6:D8:2C:AD:5C:6E:70:6B
            X509v3 Authority Key Identifier:
                keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.185.0/24
                IPv6:
                  2001:df5:77c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:fe:45:17:a8:84:0e:0e:74:d1:00:9b:1b:87:f2:3e:af:20:
         0c:c2:cf:2c:9c:ea:ae:35:fb:fd:0c:53:0f:ec:38:73:21:e6:
         e8:4c:3f:58:3b:db:20:b2:43:32:6d:da:1e:a8:a1:af:45:44:
         f5:cf:f9:ce:9b:93:63:de:f6:63:c5:12:9a:00:36:5d:ce:88:
         9c:f5:32:dc:15:c9:28:34:58:54:94:2f:bb:a2:9a:d0:34:14:
         80:8e:2d:e7:de:a6:e8:c2:92:6c:90:84:82:7e:ce:74:fd:6d:
         c5:b3:7d:79:41:a3:9f:18:e5:56:d0:69:c2:e4:3b:5f:5b:c1:
         f1:f0:8a:4d:63:95:bd:5d:ce:d9:eb:38:34:78:c3:96:04:29:
         63:a9:59:ff:81:32:31:58:56:a1:c6:2a:fa:8e:c9:16:ed:90:
         0a:7b:13:64:89:84:9c:21:c9:ee:98:31:07:a3:2a:7d:a5:90:
         05:39:8c:10:3f:17:99:52:91:20:44:70:f0:f0:04:d4:7a:1c:
         f7:34:b4:9d:1e:7f:bc:6f:2d:b0:62:fc:f7:5f:c0:4c:e7:cb:
         c6:61:09:57:6c:33:0d:ac:92:89:4d:37:aa:e1:0d:1f:89:17:
         4b:40:94:3f:6a:15:64:57:2d:01:50:0a:3d:89:87:b3:5d:ab:
         d7:74:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:54 2026 by rpki-client