Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/569B3232420111F1AA14ACFFC2833773.roa
File:                     569B3232420111F1AA14ACFFC2833773.roa (raw, json)
Hash identifier:          enP2l9Yw9Erb0zLPmEIe/iV0hnyi1aOiDafc8Z1cM0E=
Subject key identifier:   12:07:A9:9D:EF:49:74:41:C4:9C:94:C1:9B:42:4E:5D:CA:00:C6:7A
Certificate issuer:       /CN=A9193227/serialNumber=B058F6D5599E1D229A8EDBF59BE5482303D6A1A3
Certificate serial:       03
Authority key identifier: B0:58:F6:D5:59:9E:1D:22:9A:8E:DB:F5:9B:E5:48:23:03:D6:A1:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/569B3232420111F1AA14ACFFC2833773.roa
Signing time:             Mon 27 Apr 2026 06:21:34 +0000
ROA not before:           Mon 27 Apr 2026 06:21:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140840
IP address blocks:        163.128.128.0/24 maxlen: 24
                          2001:df6:dbc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.crl
                          rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193227, serialNumber=B058F6D5599E1D229A8EDBF59BE5482303D6A1A3
        Validity
            Not Before: Apr 27 06:21:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ef006e-7983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:23:4d:20:21:87:73:ce:00:0e:41:9c:7a:
                    23:53:b9:12:4a:69:d0:ed:16:56:a0:45:36:c3:f4:
                    0c:1f:4b:4b:47:5e:d0:91:f2:b1:ce:c8:12:ab:aa:
                    8d:d5:b7:d4:e8:15:af:d6:3f:e1:7f:71:e4:f7:23:
                    0b:0f:2a:71:d7:b1:bf:55:8a:ce:ab:5d:db:e5:20:
                    db:dd:44:4a:19:b1:1a:56:de:f3:68:d7:5b:a7:7a:
                    08:ff:77:88:3c:16:5a:67:01:d2:bd:ac:76:08:33:
                    e5:a6:1f:bb:43:bd:61:a6:30:bb:e9:ee:ad:34:1d:
                    c4:ed:58:dd:12:b2:4f:ae:9b:3e:05:77:de:ed:d3:
                    06:ab:a1:6b:28:49:7b:b0:d1:40:c1:2d:8e:e2:56:
                    b5:4e:04:01:e0:e0:6a:37:d8:6c:5c:c5:02:b6:36:
                    a0:58:ae:b7:f6:e7:a7:85:1d:80:0e:40:e1:2e:f3:
                    2e:82:af:75:87:2f:2d:38:80:1e:6d:3c:96:be:2a:
                    58:92:5b:36:4d:92:52:07:e4:0d:1a:c5:26:6b:fa:
                    6b:61:33:56:be:f9:09:bf:79:cc:31:75:79:38:fa:
                    2d:b8:6f:f3:4a:40:9e:e5:cb:f9:86:30:6a:23:85:
                    44:e5:e5:a6:6f:8d:cf:54:eb:d1:2c:60:91:42:d2:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:07:A9:9D:EF:49:74:41:C4:9C:94:C1:9B:42:4E:5D:CA:00:C6:7A
            X509v3 Authority Key Identifier:
                keyid:B0:58:F6:D5:59:9E:1D:22:9A:8E:DB:F5:9B:E5:48:23:03:D6:A1:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/sFj21VmeHSKajtv1m-VIIwPWoaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sFj21VmeHSKajtv1m-VIIwPWoaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193227/0C2494A2413C11F186C8B6FEC2833773/569B3232420111F1AA14ACFFC2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.128.0/24
                IPv6:
                  2001:df6:dbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:0e:3e:98:1a:e9:b4:ca:22:80:5c:e5:73:48:f1:c9:44:56:
         d2:15:a8:46:26:3c:d7:15:98:67:c8:c3:50:89:7f:e5:4d:fc:
         da:d4:3b:3d:93:3c:de:db:f5:59:2e:b2:30:41:0d:15:9f:ab:
         f3:8c:31:f6:70:58:8f:bb:77:f7:8f:24:4f:c8:4c:62:97:1f:
         1c:75:0d:01:b4:d4:40:da:ff:13:54:03:c4:76:91:69:87:bc:
         13:1c:4c:f9:72:5c:43:22:5d:c8:11:b3:48:3e:6c:34:ca:ba:
         13:a0:82:d0:13:44:bb:a7:c7:86:d7:e7:d6:cf:dd:16:4a:fd:
         47:fe:b0:c7:28:29:37:15:91:4b:ff:82:ea:89:00:29:ff:bd:
         ee:fd:ae:65:1a:07:bb:c6:ce:1b:9a:d9:e4:28:0e:59:67:53:
         50:b0:4e:27:46:b5:fe:d0:2d:3f:17:65:dc:fa:2b:92:55:9a:
         2d:f0:72:ce:22:4d:ec:ae:33:95:02:2a:97:85:c8:be:ce:90:
         1b:ce:b9:4e:19:6a:e0:78:c2:85:a1:7a:fc:b7:fa:f5:46:48:
         97:f8:5a:8a:5c:a7:96:ef:ab:a4:e7:fa:4a:fe:bd:38:6f:3a:
         09:32:e2:c3:6c:8d:72:a4:d1:8f:bf:c2:ad:fe:5d:49:2f:a3:
         d5:5c:e5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:56:01 2026 by rpki-client