Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
File:                     F5CE8322AA8A11F0B2091087C4F9AE02.roa (raw, json)
Hash identifier:          FXPDJuq/zjZiA2D6rc5QgOXQ/HXgvP43gQ4VPzDOmQM=
Subject key identifier:   A8:27:F8:21:62:0A:5A:40:80:E1:12:FC:F1:1E:80:CD:92:31:D4:70
Certificate issuer:       /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial:       63
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
Signing time:             Thu 16 Oct 2025 12:23:45 +0000
ROA not before:           Thu 16 Oct 2025 12:23:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153366
IP address blocks:        163.227.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
                          rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
        Validity
            Not Before: Oct 16 12:23:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68f0e3d1-5372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:61:8d:27:e0:c1:e0:be:12:0a:8b:5d:a1:
                    51:2e:f1:3f:c6:cc:2c:bb:72:c2:be:eb:41:9e:90:
                    19:2e:92:9b:6c:ab:36:40:e9:86:27:38:6e:a7:36:
                    01:d0:dc:08:a4:12:16:bb:5e:80:56:81:50:09:55:
                    aa:f5:ca:37:a2:87:ee:29:20:70:89:40:2e:b4:c2:
                    0c:b3:1f:a4:34:6d:7b:af:c5:33:b1:4c:d2:bf:c6:
                    8f:ec:5f:49:ce:13:93:96:b6:f6:d1:15:56:8e:c9:
                    8e:d6:6e:20:50:d2:1d:41:12:9d:db:88:d9:ba:c3:
                    d0:f0:b1:f4:da:8d:e3:c7:aa:29:79:5d:96:b8:02:
                    b8:d1:23:1e:3e:3d:39:7e:b2:e4:23:02:a3:dc:8b:
                    2e:98:9d:78:48:a9:f3:55:fb:66:3f:1f:ae:f7:90:
                    ff:3d:a6:ee:da:03:2c:0d:92:55:41:bb:97:b7:b1:
                    6d:d5:b5:fa:35:68:ad:04:05:28:8b:16:84:29:59:
                    9c:6b:e8:24:ff:04:b0:56:df:eb:01:e1:aa:e9:cf:
                    76:a7:2d:6d:b2:05:a6:0b:d9:50:be:92:b1:42:6b:
                    94:90:0a:38:53:a3:a8:be:cd:28:80:21:d3:ce:db:
                    c1:33:d0:f0:d7:48:f8:06:56:bb:50:7d:9a:70:94:
                    f4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:27:F8:21:62:0A:5A:40:80:E1:12:FC:F1:1E:80:CD:92:31:D4:70
            X509v3 Authority Key Identifier:
                keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:72:ca:c5:78:bd:e8:71:e2:27:17:bc:8f:7c:b8:32:9c:d9:
         f7:05:03:a5:80:47:07:ed:d1:99:96:d6:b6:a3:3f:33:bc:63:
         cd:32:34:c6:fc:fd:a9:00:a8:f0:72:b5:e3:1b:27:85:6c:a2:
         1e:45:d0:7e:ca:e2:87:e8:01:40:d4:f9:54:80:33:10:8c:fc:
         8a:8c:81:00:32:1e:36:2f:4e:45:de:c2:e4:63:dc:32:95:49:
         c2:c8:8f:56:fb:c6:b5:b6:fe:62:12:80:43:96:c6:13:a1:be:
         1b:53:1f:d6:60:60:cf:1c:b5:0c:d1:d2:b3:3f:89:a6:ef:ad:
         dd:f8:81:d3:2b:8b:32:85:b9:a9:51:04:fc:38:99:a6:70:4b:
         e8:16:e2:8b:8b:82:d9:8f:74:64:c9:cd:d5:0a:6b:0c:17:b0:
         be:53:9b:94:bf:e3:b5:f8:c1:9e:33:88:cd:fd:aa:89:f2:4b:
         98:dc:8c:1c:8c:49:e1:d4:13:8e:f9:ef:1f:50:83:a3:5d:fe:
         e8:02:58:ce:8a:c4:32:9e:38:ea:f1:1c:23:66:54:10:b7:6e:
         a6:3d:88:3b:28:16:72:74:d9:d8:51:bf:31:ce:a1:2d:3e:6c:
         a5:ca:3b:73:21:81:66:e2:c0:92:b4:ae:64:0e:d0:06:4c:72:
         03:8a:69:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:24:41 2025 by rpki-client