Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/5448D8AC4DCA11F18462840CB2833773.roa
File:                     5448D8AC4DCA11F18462840CB2833773.roa (raw, json)
Hash identifier:          j8iatOZvVQg41rHjPtQGn8/eNVWR8JQ4DuhiAOfavec=
Subject key identifier:   4E:07:4D:10:6B:E2:CA:D2:CE:E0:3C:43:62:16:39:0C:B9:AC:D2:B7
Certificate issuer:       /CN=A91A7F6A/serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
Certificate serial:       F2
Authority key identifier: 95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/5448D8AC4DCA11F18462840CB2833773.roa
Signing time:             Tue 12 May 2026 06:18:02 +0000
ROA not before:           Tue 12 May 2026 06:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154676
IP address blocks:        163.223.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl
                          rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 06:33:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7F6A, serialNumber=95D42EC2F468B7E38F958C8FBA93180117DC26E0
        Validity
            Not Before: May 12 06:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a02c61a-2bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:c8:59:5a:46:e9:6d:bb:d5:43:92:08:ed:
                    dd:cd:be:fe:3c:89:8f:9d:18:aa:02:73:dc:1e:ec:
                    1d:56:82:cd:ef:97:06:cb:2d:0f:d0:51:50:69:ef:
                    54:a2:59:fd:26:b1:6d:53:f9:3f:e2:34:00:dc:d4:
                    23:eb:b0:78:be:da:e7:74:4a:61:e4:ce:8d:42:29:
                    9d:f2:fb:f1:33:0d:dc:7a:1c:6e:11:a2:a3:bb:15:
                    53:47:62:f3:8c:8b:29:65:f0:da:84:32:56:4b:1a:
                    2e:a4:55:96:c1:c1:95:8b:54:3c:de:f8:50:24:b4:
                    1e:43:d1:ad:62:27:22:e9:d0:6f:f0:14:8d:fa:bb:
                    b3:ca:80:06:5c:3c:b5:5f:11:5e:a5:ab:64:47:d3:
                    1e:17:c5:fd:5d:ab:20:b1:1a:81:d9:ff:0a:25:ae:
                    68:d9:d3:66:31:72:09:d9:d2:a6:3e:43:57:19:ae:
                    22:51:3e:94:dd:82:f3:56:10:bb:8b:cf:dc:0d:20:
                    5c:58:59:98:44:22:00:f2:90:d3:37:ae:57:19:f3:
                    7f:ff:91:c9:d9:6c:fa:25:08:69:c4:e7:a0:76:82:
                    7e:e4:82:75:21:da:93:77:a8:68:94:9f:d6:61:ad:
                    af:14:9a:a0:50:8b:2a:58:57:af:54:fa:e6:5b:b4:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:4D:10:6B:E2:CA:D2:CE:E0:3C:43:62:16:39:0C:B9:AC:D2:B7
            X509v3 Authority Key Identifier:
                keyid:95:D4:2E:C2:F4:68:B7:E3:8F:95:8C:8F:BA:93:18:01:17:DC:26:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/ldQuwvRot-OPlYyPupMYARfcJuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ldQuwvRot-OPlYyPupMYARfcJuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F6A/7A5298760AF011F08531D43CC4F9AE02/5448D8AC4DCA11F18462840CB2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:47:3d:f6:3b:2c:d6:0e:73:46:3e:8c:c4:69:34:1f:87:1e:
         b5:58:e5:4c:13:cd:ce:7f:d1:0b:fb:62:f8:80:10:79:c0:af:
         6f:d9:ee:40:63:1e:32:08:9a:0b:2e:ba:39:57:fd:7b:36:76:
         57:33:b7:29:f0:1c:74:dd:aa:a9:2a:d2:7e:5d:b0:52:a0:0d:
         63:af:46:17:4b:b3:6b:89:c4:33:c4:94:d7:4f:39:81:81:dd:
         f2:8a:6a:a3:7c:c2:b3:c2:5a:62:4b:29:42:86:38:3c:94:72:
         b5:06:67:f8:cb:02:66:f8:67:95:54:09:e1:6a:3d:de:18:fe:
         29:2c:6f:16:59:56:c1:54:0d:cb:12:ce:28:c3:b3:13:41:7a:
         c8:07:07:81:06:75:85:f1:11:dd:b8:37:f9:0f:cb:8c:9b:9e:
         fe:5f:e9:7d:8b:0a:69:74:a6:79:1d:21:9c:1b:ae:9d:4c:41:
         a2:ec:ff:89:b7:48:c8:25:a3:c2:89:4f:18:60:7b:73:16:ea:
         bb:37:6d:d3:91:e1:a8:6c:2a:00:cf:43:4a:5c:3e:63:70:b2:
         1c:10:4d:08:9e:a7:c4:84:3a:bc:eb:76:f9:87:20:44:9d:3e:
         49:e1:b7:55:cb:a4:a6:46:8a:51:d4:e7:43:bc:c1:8f:01:a1:
         bd:48:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:23 2026 by rpki-client