Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
File:                     3051CA240FBB11F0B9C1D274C4F9AE02.roa (raw, json)
Hash identifier:          PGIqw8BHbURwduSPg9mp4INfNEkXZEuiYDqUDhxyyK8=
Subject key identifier:   BC:D8:5C:81:FA:8C:8A:BD:39:17:2D:2D:16:02:10:C0:BA:3E:83:36
Certificate issuer:       /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial:       CD
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:42:18 +0000
ROA not before:           Wed 29 Apr 2026 07:42:18 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     199695
IP address blocks:        163.223.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
                          rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:53:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Validity
            Not Before: Apr 29 07:42:18 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b65a-b1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:c7:49:15:6e:43:c4:b1:a0:9a:5d:76:9c:
                    bd:1c:73:44:6d:17:9a:6a:85:e7:7d:ed:62:e1:63:
                    49:f0:77:b3:13:7b:3a:f6:13:46:a0:fd:45:82:26:
                    8a:eb:b0:00:f6:c3:92:70:34:2b:df:88:3d:d9:aa:
                    3b:ee:0c:c5:ab:f6:41:d0:d9:25:4a:57:55:71:78:
                    12:7b:b0:d1:cd:45:51:a1:57:9a:b6:90:2b:e0:c7:
                    b7:7b:b2:c3:bc:b7:08:b5:9c:83:88:9b:0f:df:ef:
                    f5:73:c6:48:f7:a9:9d:e2:a8:38:34:a5:96:da:54:
                    61:44:86:6b:d7:a5:06:0c:f6:98:c2:24:f5:e8:09:
                    68:5e:71:84:41:1f:01:0d:18:6d:f1:56:f0:96:47:
                    90:e8:05:01:c6:07:ac:d0:ae:b5:f6:69:36:83:3c:
                    a2:a1:67:0e:c6:e3:2e:82:1c:09:a4:96:f1:b8:52:
                    5e:af:fc:1b:0d:2e:f8:9b:2a:49:4b:11:05:b8:b0:
                    70:7f:64:53:ac:8e:a4:88:e0:51:03:5e:bd:98:76:
                    3a:2b:09:51:91:82:fb:0e:57:67:c0:16:bb:a8:52:
                    95:29:dc:19:95:9e:09:39:34:a0:46:ad:08:c8:f9:
                    bd:8d:da:de:7c:5d:5d:2a:78:17:fa:5e:ae:70:71:
                    e4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D8:5C:81:FA:8C:8A:BD:39:17:2D:2D:16:02:10:C0:BA:3E:83:36
            X509v3 Authority Key Identifier:
                keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:06:dc:02:42:72:18:3e:f7:e2:c2:07:fe:f8:c6:98:7b:7d:
         65:7d:ff:13:90:85:1e:7c:23:98:d1:60:e3:94:f3:26:b5:67:
         bd:5f:72:36:d7:61:5b:33:8d:03:5a:5d:fc:7a:bb:ef:fb:2e:
         1c:6e:7d:4e:6f:96:97:f6:8e:08:18:cc:54:71:13:4f:3a:e0:
         9d:0c:7e:3e:2c:6f:60:53:b0:c7:bb:a3:bf:49:34:c4:cf:61:
         19:7e:ff:7a:22:2e:91:e9:5f:89:30:e3:ae:5e:23:46:1d:fe:
         4a:cc:3b:11:9e:e1:34:1e:1f:f6:81:3d:67:2d:4c:c0:b5:9b:
         b7:0f:b2:a1:57:d2:ad:85:1d:c3:bb:58:20:fb:88:ac:83:a9:
         57:92:12:6c:42:0c:e8:7a:fd:25:e6:8d:09:1f:8f:e5:25:9a:
         3c:9c:ae:1d:21:af:4f:2c:32:93:e3:2d:5e:2e:53:3e:67:bc:
         5f:92:f1:70:67:cf:fc:19:dd:18:87:fd:b6:27:08:b4:c5:bc:
         59:45:7b:39:01:01:10:2a:09:c5:03:45:08:c4:a4:06:65:70:
         22:6a:3e:6e:db:bd:17:86:c4:69:4e:b8:26:8a:0c:14:92:ce:
         37:1e:2b:cb:92:67:ac:91:01:07:50:b6:6b:74:63:94:a3:d4:
         e0:eb:2e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:55 2026 by rpki-client