Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
File:                     F5CE8322AA8A11F0B2091087C4F9AE02.roa (raw, json)
Hash identifier:          RftIc/WPafbaN59fO/ljS0lkrMOduHYR+hGVEu5br4g=
Subject key identifier:   2F:28:F7:73:C4:6E:7E:C1:DA:41:1E:6B:ED:06:27:EF:0A:72:38:67
Certificate issuer:       /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial:       D8
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
Signing time:             Fri 01 May 2026 07:40:01 +0000
ROA not before:           Fri 01 May 2026 07:40:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153366
IP address blocks:        163.227.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
                          rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
        Validity
            Not Before: May  1 07:40:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f458d1-faba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d1:19:81:60:e8:b9:42:6e:00:f8:7b:18:c3:
                    f2:e7:dd:c6:c7:58:b9:6a:7a:a8:cf:87:4d:df:38:
                    7f:d6:35:16:7c:d8:bf:53:5a:99:f0:b3:ea:40:c3:
                    0b:62:69:5b:ea:1f:16:f1:92:5f:20:0f:07:d6:15:
                    31:23:9a:fe:69:af:f8:f7:30:85:14:db:cf:91:2a:
                    3a:71:23:27:99:53:55:1f:cc:88:e1:2f:ed:f4:59:
                    18:3d:3c:d6:1f:5f:0c:0b:12:1c:fc:06:25:b5:51:
                    fe:cb:bc:01:4a:67:89:10:63:fe:f8:50:fd:5a:cb:
                    a4:c3:04:3c:49:66:3e:33:15:9c:40:f5:2d:2b:1e:
                    88:b3:fa:87:32:11:91:4e:b5:79:78:3f:e7:bb:61:
                    28:87:aa:6b:2a:1c:fe:f8:fe:9e:11:63:f8:d7:47:
                    08:d0:d6:01:5e:e6:27:52:e1:bc:28:04:15:2a:7b:
                    09:94:cc:d8:16:c4:96:a2:4e:19:15:91:f6:1f:7e:
                    3f:76:83:93:97:4e:49:d7:61:ab:29:08:bc:c1:c2:
                    c4:87:fe:9b:88:55:8f:ec:01:db:97:3b:8a:c4:04:
                    12:98:ca:41:da:5b:6a:9b:ca:df:81:5e:93:2b:fc:
                    23:25:18:51:54:be:93:c5:f9:a8:57:61:44:a9:88:
                    4f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:28:F7:73:C4:6E:7E:C1:DA:41:1E:6B:ED:06:27:EF:0A:72:38:67
            X509v3 Authority Key Identifier:
                keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f9:da:63:6e:59:f4:33:77:b1:75:eb:90:26:87:1a:fd:9c:
         c2:cf:38:01:95:56:ab:fd:6b:62:72:12:c8:79:e1:54:b3:eb:
         53:46:c5:9c:9b:39:c7:c3:dd:3c:99:38:96:96:aa:d0:91:29:
         1c:28:2c:3e:82:b1:4d:0c:cd:86:42:48:e2:c3:f4:7b:81:2f:
         e2:e4:de:2f:00:e5:66:37:68:69:fb:18:6c:6f:86:50:d0:6a:
         b2:2b:87:ec:4c:40:12:d3:31:d5:5a:fc:b7:ce:47:fa:bd:df:
         27:26:48:1d:e2:0f:7d:48:34:a8:aa:5b:c3:cd:b6:6b:84:7a:
         74:2b:9e:74:5e:0a:18:e5:b2:11:29:a4:f4:ca:e6:f4:9b:c7:
         a6:79:57:2a:ea:54:81:11:32:2d:b8:c3:6e:d3:62:5d:5e:c2:
         63:14:3f:4b:12:40:cc:60:e1:f0:84:d8:9a:e1:4b:87:e4:ef:
         73:a9:55:2e:40:f1:4d:fe:02:36:c0:6e:7a:2c:88:ec:f2:53:
         a8:ee:12:41:fd:e0:0f:61:bc:46:8c:86:91:ab:48:40:5d:37:
         b7:3e:76:fc:22:06:05:e5:e1:95:af:fb:3a:6f:b9:a0:94:7a:
         d3:3d:d7:ce:17:61:f1:72:e3:ef:0d:19:91:bc:dc:05:92:4d:
         ad:8d:a8:a6
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI2QkMxMTAvBgNVBAUTKEQ4QkVFOTY5NUQ0M0IzMzlFNzU2M0YyNDEzQjcyMzE5
RDE2Nzc0QjEwHhcNMjYwNTAxMDc0MDAxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0NThkMS1mYWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdEZgWDouUJuAPh7GMPy593Gx1i5anqoz4dN3zh/1jUWfNi/U1qZ8LPqQMML
Ymlb6h8W8ZJfIA8H1hUxI5r+aa/49zCFFNvPkSo6cSMnmVNVH8yI4S/t9FkYPTzW
H18MCxIc/AYltVH+y7wBSmeJEGP++FD9WsukwwQ8SWY+MxWcQPUtKx6Is/qHMhGR
TrV5eD/nu2Eoh6prKhz++P6eEWP410cI0NYBXuYnUuG8KAQVKnsJlMzYFsSWok4Z
FZH2H34/doOTl05J12GrKQi8wcLEh/6biFWP7AHblzuKxAQSmMpB2ltqm8rfgV6T
K/wjJRhRVL6TxfmoV2FEqYhPwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC8o93PE
bn7B2kEea+0GJ+8KcjhnMB8GA1UdIwQYMBaAFNi+6WldQ7M551Y/JBO3IxnRZ3Sx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjZCQy9BMDMwQ0QzMDIw
NEMxMUYwOTYzRUI1NzVDNEY5QUUwMi8yTDdwYVYxRHN6bm5WajhrRTdjakdkRm5k
TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRMRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI2QkMvQTAzMENEMzAyMDRDMTFGMDk2M0VCNTc1QzRGOUFFMDIvRjVDRTgzMjJB
QThBMTFGMEIyMDkxMDg3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo+NYMA0GCSqGSIb3DQEBCwUAA4IBAQCT+dpjbln0M3exdeuQJoca
/ZzCzzgBlVar/WtichLIeeFUs+tTRsWcmznHw908mTiWlqrQkSkcKCw+grFNDM2G
Qkjiw/R7gS/i5N4vAOVmN2hp+xhsb4ZQ0GqyK4fsTEAS0zHVWvy3zkf6vd8nJkgd
4g99SDSoqlvDzbZrhHp0K550XgoY5bIRKaT0yub0m8emeVcq6lSBETItuMNu02Jd
XsJjFD9LEkDMYOHwhNia4UuH5O9zqVUuQPFN/gI2wG56LIjs8lOo7hJB/eAPYbxG
jIaRq0hAXTe3Pnb8IgYF5eGVr/s6b7mglHrTPdfOF2HxcuPvDRmRvNwFkk2tjaim
-----END CERTIFICATE-----
Generated at Wed May 13 03:36:30 2026 by rpki-client