Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/BA5D351C4C0311F0ABCEF33AC4F9AE02.roa
File:                     BA5D351C4C0311F0ABCEF33AC4F9AE02.roa (raw, json)
Hash identifier:          CzRt1Vpg04doCx/2AnXX00Zgt+5+vt+JMpvQg/HVV4g=
Subject key identifier:   45:44:91:8E:48:32:9B:E2:53:D4:24:33:28:18:A3:74:99:4C:5F:CE
Certificate issuer:       /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial:       C7
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/BA5D351C4C0311F0ABCEF33AC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:42:52 +0000
ROA not before:           Wed 29 Apr 2026 07:42:52 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
        Validity
            Not Before: Apr 29 07:42:52 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b67c-7b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:66:98:92:8a:6c:07:62:8f:3b:f7:ef:87:03:
                    e5:ec:c3:eb:f0:1f:31:7f:3f:e7:5d:ab:b1:43:8c:
                    ec:08:3a:c8:e4:4f:c0:1f:23:df:b8:d9:dc:bb:a6:
                    5a:bb:fb:d0:fc:95:d2:0d:5b:a6:0a:b0:60:fe:f6:
                    d8:5a:e5:e1:41:5d:3f:07:6b:15:d6:90:4f:54:1f:
                    1a:b6:d9:ae:92:22:19:05:a5:71:a7:09:82:c6:74:
                    27:a7:2d:8d:c9:26:75:c0:90:b7:d7:3f:4d:44:e0:
                    6a:ce:a8:2e:63:0e:7c:c7:17:85:69:80:ec:ef:9f:
                    66:c8:ed:ae:03:dd:0a:35:ca:b7:8d:1c:72:bf:87:
                    74:cc:97:27:e0:a8:c9:1f:54:ad:cc:3a:d9:9a:6a:
                    c9:66:16:25:b4:8d:4c:84:39:81:74:f5:85:c6:42:
                    81:2b:bf:46:c9:19:cb:20:10:26:60:36:f9:58:72:
                    85:c1:9d:ad:7b:16:6f:0a:7b:94:36:93:b5:e8:3f:
                    5f:71:57:98:f4:7c:41:71:bd:19:37:a8:ad:39:31:
                    2b:a5:4b:cf:38:fd:ec:4c:66:04:61:60:38:d6:78:
                    85:a9:bd:a3:50:7f:44:00:df:f5:4e:eb:da:5c:32:
                    00:a1:22:7c:c9:bb:a5:d7:bb:ec:39:bf:80:a7:a0:
                    15:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:44:91:8E:48:32:9B:E2:53:D4:24:33:28:18:A3:74:99:4C:5F:CE
            X509v3 Authority Key Identifier:
                keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/BA5D351C4C0311F0ABCEF33AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:f6:f7:2b:95:9a:c1:95:61:7f:b6:80:88:3e:15:34:a7:
         5b:ba:ca:17:18:90:1f:cb:62:66:49:43:67:63:a7:e6:0d:33:
         c7:f3:ee:70:5c:00:f3:18:aa:7e:49:21:43:3b:2b:96:6f:bd:
         a6:07:44:6c:34:62:f8:79:25:66:0a:23:e8:0a:2b:f9:21:4d:
         02:ec:d1:bd:58:bd:df:ea:39:65:25:23:a3:7e:f4:83:fa:18:
         53:37:de:bf:98:2c:bb:a1:57:e0:70:8c:57:31:a6:43:7d:4a:
         7e:3b:c9:84:37:ac:e2:59:7f:c7:98:b0:75:ca:10:2b:fc:83:
         d2:b3:5d:0d:f7:ec:ef:9b:da:30:d0:f0:39:fb:a3:47:03:20:
         af:dd:01:5b:ad:6e:82:26:08:34:2b:89:fe:ba:ae:40:c3:61:
         0d:bb:19:98:f4:f9:f6:72:53:e4:d9:c3:0d:b8:50:c6:f2:6c:
         39:31:1b:c1:85:f9:c3:4b:74:4a:05:87:70:96:59:85:17:a2:
         a5:fd:3a:c9:67:03:9f:c9:2c:04:4b:ec:90:be:1d:66:40:79:
         0d:c8:2d:d8:d0:8d:3c:6e:1a:0f:c0:dc:11:c6:38:92:cf:37:
         61:c6:a7:16:f9:50:0e:28:ff:09:93:42:0f:2b:ed:c8:2e:7b:
         f7:2e:81:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:19:14 2026 by rpki-client