Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/6028335E86F911F084A9FF7FC4F9AE02.roa
File:                     6028335E86F911F084A9FF7FC4F9AE02.roa (raw, json)
Hash identifier:          HfdNS1wfsXQ4sTjOLl19fnJyOg1OOpPzzn+pHOB9tDs=
Subject key identifier:   98:44:FC:DA:4E:3A:69:11:D8:48:5C:F1:05:C0:D9:AF:F9:7A:25:3C
Certificate issuer:       /CN=A91F2C07/serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
Certificate serial:       C5
Authority key identifier: 0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/6028335E86F911F084A9FF7FC4F9AE02.roa
Signing time:             Wed 29 Apr 2026 07:43:16 +0000
ROA not before:           Wed 29 Apr 2026 07:43:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.24.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2C07, serialNumber=0CE060C2E430DD851810C9F20FEC1BA21199E3D6
        Validity
            Not Before: Apr 29 07:43:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f1b694-17a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:c4:44:b0:2c:64:f2:ec:f6:16:33:0a:6d:
                    5d:59:98:d1:f1:42:91:51:b7:de:5c:b4:c4:d2:d0:
                    50:78:83:ce:31:0a:b1:dc:1f:f1:05:93:ef:3f:15:
                    bc:49:a9:8d:a6:d0:15:39:5b:75:9e:e0:3b:89:51:
                    1f:86:e6:97:9b:80:c5:01:ce:6f:dd:c2:23:67:76:
                    70:8d:c3:e9:05:a5:2b:41:11:01:da:b4:01:3b:97:
                    ba:a4:da:fa:df:6d:8a:7a:02:34:32:3f:64:93:e3:
                    9b:7d:39:b7:0a:29:53:c0:03:ed:d4:27:4d:25:04:
                    be:c6:8e:59:1c:a0:3c:13:ed:c5:e7:a6:02:73:26:
                    f9:7f:12:2b:c8:97:52:01:ea:ec:b8:dc:cf:68:fc:
                    82:f1:af:7c:3b:07:8d:b3:3c:a0:dc:ef:33:1c:8d:
                    19:5d:8e:64:2f:7f:b9:1b:50:a2:4b:d0:97:d7:46:
                    91:3a:96:d8:be:7a:5b:68:29:78:b2:8a:23:6f:3b:
                    4a:6e:50:54:05:4b:c9:85:6c:0d:c9:6d:2e:ff:6f:
                    3a:28:be:17:a4:bb:ec:58:28:0b:e3:0d:92:8f:dd:
                    ef:a7:9f:05:56:c6:6b:b0:7d:f7:50:bd:22:ff:9e:
                    ad:53:5b:40:fb:11:33:f0:a5:94:89:3d:6b:77:a5:
                    bd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:FC:DA:4E:3A:69:11:D8:48:5C:F1:05:C0:D9:AF:F9:7A:25:3C
            X509v3 Authority Key Identifier:
                keyid:0C:E0:60:C2:E4:30:DD:85:18:10:C9:F2:0F:EC:1B:A2:11:99:E3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/DOBgwuQw3YUYEMnyD-wbohGZ49Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DOBgwuQw3YUYEMnyD-wbohGZ49Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2C07/A774A9CE1E6011F0B7DC7654C4F9AE02/6028335E86F911F084A9FF7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:da:52:74:c4:35:67:b5:1b:6d:ec:cb:f7:cd:07:02:b7:
         23:09:ce:c6:8f:10:48:21:3b:0a:a9:c3:b8:21:72:ba:fe:97:
         4f:38:a6:ab:9b:af:a6:72:d0:4c:b4:6e:83:5c:b6:54:ac:e8:
         d1:3c:4f:88:1f:78:fe:a5:eb:54:d3:fd:2c:3d:f4:42:a3:ac:
         47:fb:a3:e6:22:57:a6:ea:35:56:75:1b:df:e4:8f:70:16:22:
         db:41:9a:c7:46:30:bc:0e:94:55:73:44:87:51:c5:be:ec:a6:
         15:2d:f6:95:b0:62:9c:08:ee:f4:16:c0:e7:b4:e0:96:df:7f:
         54:70:69:05:57:07:fa:a9:c3:61:69:9b:cb:9b:86:a2:b4:48:
         d0:b7:24:33:bc:58:47:d9:e1:60:9f:fb:04:ef:5a:5f:86:a2:
         0f:bc:96:63:43:41:db:fa:40:7c:72:6a:52:6d:cc:17:1f:8d:
         88:b9:ad:ce:8e:59:ce:4e:0e:ce:ed:e6:e4:15:fb:c8:ee:1d:
         2d:22:a3:cb:0b:79:05:5e:a7:15:32:69:b8:c0:e9:f2:20:54:
         1f:59:96:00:4c:0d:95:98:58:b8:8c:15:35:d5:97:42:13:16:
         6a:12:18:12:ec:b6:6f:1d:98:8f:2a:07:2b:6f:c6:6e:b5:0d:
         3d:d9:ec:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:10 2026 by rpki-client