Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
File:                     F5CE8322AA8A11F0B2091087C4F9AE02.roa (raw, json)
Hash identifier:          LlZ/G8D7YTOcHGumExQMeBbX8YRDAKE+PcECfDsL5jc=
Subject key identifier:   CE:23:DC:B1:72:6C:78:6F:63:C8:5B:81:39:8E:37:4C:DA:4D:AC:6C
Certificate issuer:       /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial:       B5
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:00:17 +0000
ROA not before:           Thu 16 Oct 2025 12:23:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153366
IP address blocks:        163.227.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
                          rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
        Validity
            Not Before: Oct 16 12:23:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a589e1-6820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:7d:f7:81:69:c7:01:b3:05:fa:fd:e1:76:
                    fa:ff:b9:c6:fa:71:b6:55:94:82:19:71:0d:f2:ce:
                    06:10:22:68:47:59:a8:06:c4:16:4b:17:77:77:ad:
                    a7:4a:f3:b0:bf:8c:84:b4:00:4b:fa:bc:30:e6:77:
                    1c:fe:6e:e7:d2:3f:68:75:2f:2c:ca:6d:28:5f:8e:
                    46:c0:90:51:67:70:1b:e8:11:93:3d:b6:a1:44:75:
                    0f:bf:26:81:bb:8b:35:ad:e9:05:79:47:53:df:68:
                    90:23:41:0e:9b:b8:ef:65:fa:0c:ba:3c:01:6e:cf:
                    38:d0:c3:5f:51:86:ee:7f:07:19:d5:cb:1e:2c:57:
                    4c:72:e3:95:30:86:59:b3:53:28:35:1b:da:e0:dd:
                    92:ef:c3:6d:a2:40:28:e7:71:db:5d:53:6e:36:4b:
                    d0:72:b2:fd:75:5a:18:ff:3e:19:94:92:c6:c3:88:
                    99:35:90:4c:a1:f8:f6:88:a1:d5:ca:cd:80:d7:49:
                    03:eb:4b:54:b6:58:a1:fe:f3:e4:e6:e2:6b:30:99:
                    36:b2:7c:dc:9b:ee:48:48:89:45:47:16:07:2e:4b:
                    3d:b7:14:ac:7f:28:e5:f1:3a:d2:a9:22:a8:35:7d:
                    ff:65:34:31:b3:fc:a0:bb:63:19:02:9f:73:d2:d0:
                    e7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:23:DC:B1:72:6C:78:6F:63:C8:5B:81:39:8E:37:4C:DA:4D:AC:6C
            X509v3 Authority Key Identifier:
                keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/F5CE8322AA8A11F0B2091087C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:62:2c:d9:3d:47:ee:b2:00:1a:5b:3d:4f:82:59:8c:5d:90:
         a2:c4:7c:0d:b5:2b:74:36:e0:f8:66:48:31:58:40:1b:42:8c:
         40:f8:df:19:03:64:9b:6a:c0:fe:9f:9e:47:dc:8b:4e:c4:3e:
         4d:83:e8:fd:2d:72:c7:08:ba:8c:a1:f2:56:98:f4:db:8b:ff:
         f8:7c:c6:c8:fa:4c:48:41:e7:63:4f:45:d5:6e:04:c9:9a:3e:
         09:a8:da:c1:e3:f6:ad:d4:7d:5c:15:4e:ae:61:9d:9a:d3:c5:
         8d:81:f7:52:39:61:0d:4d:a1:b5:4f:6d:e8:e4:51:41:32:f0:
         5e:29:a4:ea:7b:e2:8d:ab:18:05:93:c5:c4:9b:3b:7a:7c:03:
         9b:3e:6c:d0:80:ca:0c:7b:2e:dc:09:f1:c7:cb:c8:ce:e4:e5:
         26:79:4a:eb:70:37:a9:e0:4c:61:e1:da:bb:c4:bf:cd:ca:e7:
         6e:66:f0:aa:92:04:33:b0:11:c0:54:22:63:41:36:79:f7:cb:
         f9:32:8a:f2:2a:62:5d:85:4b:36:c9:84:1b:02:08:d7:37:b3:
         51:bf:f1:ed:f0:ed:51:cb:5e:83:fe:71:84:13:9b:f7:c2:b3:
         dd:2b:82:4c:9d:cc:c4:18:a2:56:a1:f3:75:bf:b3:a5:af:86:
         5a:1f:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:51 2026 by rpki-client