Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/2EFC5C744A9411F1ACAAC5FDAE833773.roa
File:                     2EFC5C744A9411F1ACAAC5FDAE833773.roa (raw, json)
Hash identifier:          hI3UfnWsXvEl793f+DTpuMnHlgyALjK0JdSxeLT5jcQ=
Subject key identifier:   3E:E7:E1:2D:10:3F:56:EB:4D:54:47:39:E0:B8:51:A2:E3:71:1D:1A
Certificate issuer:       /CN=A91DD92D/serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
Certificate serial:       1B
Authority key identifier: E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/2EFC5C744A9411F1ACAAC5FDAE833773.roa
Signing time:             Fri 08 May 2026 04:12:53 +0000
ROA not before:           Fri 08 May 2026 04:12:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154612
IP address blocks:        163.128.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl
                          rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DD92D, serialNumber=E5733B13FD86A23694702C3E28F3FF09497A9371
        Validity
            Not Before: May  8 04:12:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fd62c5-f4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:19:a0:34:13:dd:dd:fe:66:30:a8:e0:4f:
                    0e:d1:04:71:d8:86:99:2a:0f:0f:9b:e9:99:ee:7f:
                    2f:8e:b0:30:00:77:a2:d0:3c:84:f6:fd:35:f0:d7:
                    f2:15:f2:77:05:ed:81:b6:ae:66:30:7d:01:83:38:
                    07:ed:6f:f3:f1:35:7f:76:10:cc:02:64:57:19:64:
                    7a:58:4b:a2:e3:64:4a:28:fb:3c:36:84:52:ae:b4:
                    27:a4:ef:21:94:8a:65:d2:b5:b8:3b:ef:6f:3e:39:
                    87:7c:37:7d:7f:c2:a8:10:30:d2:f9:61:b8:6c:54:
                    9b:f4:68:3f:61:a8:b6:b5:c5:89:17:6d:95:e3:08:
                    2a:42:32:68:56:8c:a6:12:fe:32:5d:23:94:b8:01:
                    b6:74:89:2f:8f:f7:ec:6a:4f:71:bf:51:b9:9f:cb:
                    af:93:bb:42:f8:6d:9f:0a:8e:68:e7:f2:68:d9:4d:
                    db:4b:63:b5:c5:72:87:e4:88:48:dc:76:d3:ad:78:
                    31:33:56:2b:3c:8f:86:e8:7c:3f:62:29:d5:3f:be:
                    17:86:3f:f3:1b:bb:ca:49:2f:b5:97:e0:d0:e8:ce:
                    78:64:9f:dd:0c:d0:9c:c2:52:4e:3f:46:5b:91:0e:
                    7e:35:c1:eb:1e:a2:84:cb:10:a4:39:fc:a9:64:fa:
                    b7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E7:E1:2D:10:3F:56:EB:4D:54:47:39:E0:B8:51:A2:E3:71:1D:1A
            X509v3 Authority Key Identifier:
                keyid:E5:73:3B:13:FD:86:A2:36:94:70:2C:3E:28:F3:FF:09:49:7A:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/5XM7E_2GojaUcCw-KPP_CUl6k3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5XM7E_2GojaUcCw-KPP_CUl6k3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD92D/24D8E3DC36F511F1859AB4FEB9833773/2EFC5C744A9411F1ACAAC5FDAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:fb:84:04:6d:58:f8:73:76:bc:d4:9c:8a:ac:d1:64:b8:e8:
         ef:82:b2:13:e4:c7:3c:f7:f0:c4:9f:0e:08:73:14:3c:a2:16:
         6b:84:d1:e3:05:be:d2:b2:4f:14:50:27:52:fd:82:a6:d3:09:
         ea:a4:c7:01:15:88:42:ae:30:d7:b1:5a:99:40:aa:76:f7:05:
         fc:1c:e7:d2:37:bb:71:2c:aa:46:26:07:15:9f:e3:bd:20:96:
         71:c4:5b:b5:59:04:d1:76:f2:17:8d:fc:e0:ef:10:0e:8d:3a:
         02:21:b5:a6:39:e6:13:4d:81:21:16:f2:5c:19:f2:ae:1b:49:
         b3:5a:6a:06:bf:69:7f:32:3f:7f:5a:50:86:38:7d:63:6e:72:
         79:24:0c:72:58:8f:4e:4c:c1:fe:85:0d:6c:8e:63:e9:46:b2:
         43:b2:3d:06:de:51:f5:36:82:a2:5b:3d:8f:02:b9:13:76:96:
         08:e2:5d:cb:6c:d0:d6:2d:f9:22:44:64:39:4f:6a:0c:4c:88:
         8c:6f:38:b2:84:61:56:86:81:1b:82:73:bf:cc:88:25:1f:e6:
         9b:16:54:1f:52:0c:5c:78:29:d9:bd:fa:44:67:2b:72:50:ac:
         a8:99:c7:40:b9:fe:29:d4:2c:b6:91:ba:49:e6:64:01:9a:45:
         71:67:f4:c5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 02:48:36 2026 by rpki-client