Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
File:                     B0C47BF26CFE11F09B124778C4F9AE02.roa (raw, json)
Hash identifier:          xSiaH35CedPI/2lWdEwyR7ZfLRaL/x8nlbC3ig8ambs=
Subject key identifier:   EA:C6:7A:B9:C6:44:77:48:46:26:A9:79:42:1D:C1:C9:FD:6C:95:F7
Certificate issuer:       /CN=A91E17F3/serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
Certificate serial:       ED
Authority key identifier: 39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa
Signing time:             Tue 05 May 2026 06:39:32 +0000
ROA not before:           Tue 05 May 2026 06:39:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        163.223.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl
                          rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E17F3, serialNumber=39241DC2A94922EAFF982D9B4080F8BE40F7B6BD
        Validity
            Not Before: May  5 06:39:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f990a4-84c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:16:f9:3b:0c:3c:6e:c7:78:2b:d9:e6:c4:
                    64:39:86:6d:16:19:da:5f:f8:8c:0a:84:2b:f3:a3:
                    3a:50:51:3a:8a:74:ba:13:0b:73:fe:bb:b7:90:0d:
                    1e:da:67:23:40:6f:75:56:c5:35:3f:45:11:dc:c5:
                    7a:b1:81:08:21:dc:39:f1:97:21:b9:1b:83:84:b0:
                    73:66:9d:c4:75:1d:7f:3d:51:ba:3d:28:fa:63:5c:
                    ce:de:ac:64:6d:b5:0c:66:ec:1e:c6:ab:e9:3f:f5:
                    1a:08:46:d1:1b:f1:1a:86:1e:71:c1:a1:17:2c:a2:
                    83:67:9d:bf:6a:3e:a7:c7:2f:25:97:6c:81:2d:99:
                    71:13:cb:90:5d:7f:c4:cb:a3:17:eb:32:75:28:dc:
                    f9:2b:e9:b4:70:bc:f6:a8:d8:1e:4d:43:a3:be:18:
                    98:f4:e6:06:73:5d:52:17:70:dc:97:33:fd:f9:68:
                    b2:40:7d:8d:97:66:2e:f6:dd:4e:78:8b:77:16:98:
                    50:07:e9:01:69:8b:23:b3:15:bf:a1:ec:29:b2:2b:
                    8b:9e:3a:36:84:ea:7a:b6:4c:7d:5e:2a:e1:e3:0f:
                    a2:8e:09:02:f5:68:96:21:7a:86:4d:06:d5:5e:3a:
                    36:52:86:38:c4:47:90:19:d6:b1:f1:95:55:3d:3c:
                    39:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C6:7A:B9:C6:44:77:48:46:26:A9:79:42:1D:C1:C9:FD:6C:95:F7
            X509v3 Authority Key Identifier:
                keyid:39:24:1D:C2:A9:49:22:EA:FF:98:2D:9B:40:80:F8:BE:40:F7:B6:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/OSQdwqlJIur_mC2bQID4vkD3tr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OSQdwqlJIur_mC2bQID4vkD3tr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E17F3/9A9FB8F2FFEC11EFBF55BB6FC4F9AE02/B0C47BF26CFE11F09B124778C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:c3:63:14:e9:f5:77:d5:3b:a9:c8:8e:e3:f2:23:48:4d:
         36:fc:b2:80:2b:66:e8:fe:47:2c:55:84:94:a5:c2:97:3c:65:
         c2:7c:bd:4a:bd:10:a9:ed:a8:4b:b3:6b:24:a8:21:7d:86:63:
         39:f2:e6:57:fc:34:dd:7c:19:a2:01:7c:d6:4f:68:20:27:49:
         46:47:ca:1f:f9:84:e0:43:1e:34:ac:b7:18:c3:80:d0:da:ef:
         6d:8e:a6:f7:0c:e9:b2:cc:95:ef:c3:e6:53:68:16:9e:01:7c:
         d8:17:60:42:bb:7c:14:bd:aa:3d:53:bb:87:80:82:a6:e4:7b:
         40:d9:c9:83:ce:c0:32:6b:98:b2:d6:06:7c:36:6f:a0:31:ab:
         cd:45:ef:d7:9d:12:fb:b4:4c:7b:39:c6:13:13:6b:28:c2:fe:
         38:17:82:50:78:d1:2d:83:26:e7:37:23:31:cf:96:81:02:92:
         a2:f3:e0:42:4d:8a:1f:54:c9:21:f3:b6:7a:18:d4:ec:42:a3:
         03:c8:03:bf:c2:8a:56:e9:ee:77:cf:49:99:49:d1:5f:c3:49:
         73:9f:9a:e1:a3:bb:02:3e:0d:f8:b3:bb:9f:a1:d5:36:f8:d9:
         e3:d6:27:14:82:f7:65:5f:3f:6b:26:3f:2b:3b:40:5c:e0:ab:
         43:30:cd:9a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE3RjMxMTAvBgNVBAUTKDM5MjQxREMyQTk0OTIyRUFGRjk4MkQ5QjQwODBGOEJF
NDBGN0I2QkQwHhcNMjYwNTA1MDYzOTMyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY5OTBhNC04NGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm8UW+TsMPG7HeCvZ5sRkOYZtFhnaX/iMCoQr86M6UFE6inS6Ewtz/ru3kA0e
2mcjQG91VsU1P0UR3MV6sYEIIdw58ZchuRuDhLBzZp3EdR1/PVG6PSj6Y1zO3qxk
bbUMZuwexqvpP/UaCEbRG/Eahh5xwaEXLKKDZ52/aj6nxy8ll2yBLZlxE8uQXX/E
y6MX6zJ1KNz5K+m0cLz2qNgeTUOjvhiY9OYGc11SF3DclzP9+WiyQH2Nl2Yu9t1O
eIt3FphQB+kBaYsjsxW/oewpsiuLnjo2hOp6tkx9Xirh4w+ijgkC9WiWIXqGTQbV
Xjo2UoY4xEeQGdax8ZVVPTw5EwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOrGernG
RHdIRiapeUIdwcn9bJX3MB8GA1UdIwQYMBaAFDkkHcKpSSLq/5gtm0CA+L5A97a9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTdGMy85QTlGQjhGMkZG
RUMxMUVGQkY1NUJCNkZDNEY5QUUwMi9PU1Fkd3FsSkl1cl9tQzJiUUlENHZrRDN0
cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09TUWR3cWxKSXVyX21DMmJRSUQ0dmtEM3RyMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTE3RjMvOUE5RkI4RjJGRkVDMTFFRkJGNTVCQjZGQzRGOUFFMDIvQjBDNDdCRjI2
Q0ZFMTFGMDlCMTI0Nzc4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo99qMA0GCSqGSIb3DQEBCwUAA4IBAQBpv8NjFOn1d9U7qciO4/Ij
SE02/LKAK2bo/kcsVYSUpcKXPGXCfL1KvRCp7ahLs2skqCF9hmM58uZX/DTdfBmi
AXzWT2ggJ0lGR8of+YTgQx40rLcYw4DQ2u9tjqb3DOmyzJXvw+ZTaBaeAXzYF2BC
u3wUvao9U7uHgIKm5HtA2cmDzsAya5iy1gZ8Nm+gMavNRe/XnRL7tEx7OcYTE2so
wv44F4JQeNEtgybnNyMxz5aBApKi8+BCTYofVMkh87Z6GNTsQqMDyAO/wopW6e53
z0mZSdFfw0lzn5rho7sCPg34s7ufodU2+Nnj1icUgvdlXz9rJj8rO0Bc4KtDMM2a
-----END CERTIFICATE-----
Generated at Wed May 13 01:39:31 2026 by rpki-client