Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
File:                     C163B1881A4711EDA547FE24C4F9AE02.roa (raw, json)
Hash identifier:          u9MFRcdbqfRuHXnWgmZPMWeGTqzUW3xkFzMNAHNNk68=
Subject key identifier:   65:56:2A:9B:E7:E2:85:9F:BC:0C:29:10:9F:9A:8D:3D:18:81:44:D0
Certificate issuer:       /CN=A91E2AE5/serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
Certificate serial:       157F
Authority key identifier: 7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa
Signing time:             Tue 28 Apr 2026 16:19:05 +0000
ROA not before:           Tue 28 Apr 2026 16:19:05 +0000
ROA not after:            Fri 28 Aug 2026 00:00:00 +0000
asID:                     9988
IP address blocks:        136.228.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5503 (0x157f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2AE5, serialNumber=7C63B283D9B8A06EEAD0621B823ED0F4E699DDF4
        Validity
            Not Before: Apr 28 16:19:05 2026 GMT
            Not After : Aug 28 00:00:00 2026 GMT
        Subject: CN=69f0ddf9-f135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:18:3f:c2:4b:9d:98:55:1c:92:fa:77:94:fc:
                    95:8f:88:b3:cf:3f:84:69:5e:da:5d:75:59:66:87:
                    50:f9:a9:1d:7d:f9:d4:f7:43:01:18:2e:83:fe:a9:
                    37:2c:da:e6:e6:14:87:21:46:18:65:52:ad:c0:16:
                    bc:2a:d4:7e:c8:22:30:a2:75:b9:b9:06:24:e8:a8:
                    b7:ca:0e:50:88:6d:88:43:eb:76:1c:51:8f:ec:cc:
                    ef:68:f6:4e:c1:31:ab:c6:4d:5a:18:0d:2c:5d:6b:
                    51:a6:0d:bd:9a:b8:da:4b:8b:e2:22:03:be:4a:4e:
                    bd:28:55:32:40:b9:cd:ff:84:6e:77:95:c0:19:79:
                    c7:45:d0:24:2f:c7:07:04:17:70:01:23:69:71:9b:
                    ff:83:21:2c:d9:04:88:6e:1c:de:34:38:ec:88:01:
                    ab:71:d2:d0:2a:18:f8:cb:99:90:c5:00:e2:13:c7:
                    42:ec:77:0d:47:9a:89:6f:70:d5:d0:c0:71:dd:1c:
                    73:a9:07:cc:fb:ac:5b:99:da:9e:b4:fa:06:50:08:
                    8c:43:09:62:25:31:4c:9e:3d:78:38:89:01:ca:15:
                    db:9a:2a:e8:13:cc:8a:0f:53:06:01:a3:12:d0:7c:
                    44:68:74:e4:f8:91:7d:4a:91:ff:20:e8:97:63:6a:
                    2f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:56:2A:9B:E7:E2:85:9F:BC:0C:29:10:9F:9A:8D:3D:18:81:44:D0
            X509v3 Authority Key Identifier:
                keyid:7C:63:B2:83:D9:B8:A0:6E:EA:D0:62:1B:82:3E:D0:F4:E6:99:DD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fGOyg9m4oG7q0GIbgj7Q9OaZ3fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2AE5/9D7276B65CA911E8AA42A346C4F9AE02/C163B1881A4711EDA547FE24C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.228.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         07:ef:2a:74:2b:85:05:4f:b6:1b:75:e3:a3:3c:98:3a:6e:57:
         b3:88:57:86:71:21:6c:b7:e0:1f:b9:6e:22:5f:eb:bb:bd:de:
         6c:ed:5a:5d:56:97:d1:b8:f3:bd:9e:a8:cd:94:1f:9a:96:c6:
         ac:67:66:85:20:84:b8:98:3c:f2:c8:85:fd:f8:71:46:aa:72:
         59:01:6f:0f:b4:60:13:93:44:e8:4a:2f:91:9e:c1:43:f0:d3:
         b0:b9:db:ca:54:55:9f:92:c0:79:c4:f4:53:5f:f6:4a:b1:87:
         60:59:9f:5a:36:1e:43:96:2b:ea:6c:a6:bc:dd:b9:7c:48:76:
         66:db:dc:61:61:06:50:3d:b0:b9:ef:66:1d:9a:b1:5d:1a:4a:
         32:76:a5:21:d1:bc:9a:e8:49:81:d5:31:79:d6:fc:9d:77:4c:
         8d:11:4c:61:46:67:ed:bc:a7:34:86:92:3c:fd:d4:93:c6:46:
         1b:37:3e:ed:b8:f2:c3:1d:13:91:a9:6f:14:a1:ba:02:7b:3d:
         48:a3:d5:b1:ef:9f:5f:91:aa:a5:c4:18:8a:95:d6:39:14:a4:
         c8:29:51:90:23:7b:0e:f0:e7:79:7f:28:95:98:c5:a7:45:d2:
         bc:17:f6:26:f4:ea:56:15:9c:67:54:fb:0e:c6:22:88:5a:cd:
         24:34:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:53 2026 by rpki-client