Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/2917F838011D11F19AF518A8476F56BC.roa
File:                     2917F838011D11F19AF518A8476F56BC.roa (raw, json)
Hash identifier:          xJYWdy3vw+vjD1PJdLPXMUN2+mPgPI/QMzbJ06GDJ8E=
Subject key identifier:   EE:DB:99:11:06:4E:61:2D:F4:30:43:ED:02:7A:7A:E6:F9:B8:B3:C6
Certificate issuer:       /CN=A91FD59F/serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
Certificate serial:       BC
Authority key identifier: 2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/2917F838011D11F19AF518A8476F56BC.roa
Signing time:             Thu 07 May 2026 07:45:12 +0000
ROA not before:           Thu 07 May 2026 07:45:12 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153771
IP address blocks:        163.227.44.0/23 maxlen: 23
                          163.227.45.0/24 maxlen: 24
                          2401:fd20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl
                          rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD59F, serialNumber=2F72DC11392DAA505A8562E27638860603CDBEBF
        Validity
            Not Before: May  7 07:45:12 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fc4308-e95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:a8:eb:64:e7:b9:d9:3a:f3:12:2d:bd:83:
                    25:c3:33:84:09:70:03:db:97:0c:b9:36:72:af:6a:
                    21:19:70:c8:2e:4d:d7:5c:28:75:3e:95:d2:45:98:
                    02:4a:66:2e:11:06:35:06:e5:99:c9:a7:1f:14:f5:
                    a8:9d:09:ae:44:e0:c8:37:9c:77:f0:c5:9b:6b:a0:
                    35:e1:5b:9a:3d:e8:cf:78:87:d1:9a:f3:b6:34:d4:
                    50:02:8b:f0:9d:58:8e:ad:ee:81:4c:b7:24:37:f1:
                    12:d7:1f:8a:92:d5:bb:5e:4f:a1:fc:9e:e6:77:8e:
                    63:0d:d3:3f:ad:76:5d:71:1b:d0:bc:2a:e9:86:25:
                    59:5d:f7:0a:ed:f5:d2:de:05:42:71:1e:ce:61:38:
                    81:0f:d3:f9:cc:a6:89:7c:c2:ab:1b:5e:f0:1e:46:
                    ef:86:ce:88:6c:74:20:ef:f1:34:27:91:cc:2c:82:
                    5d:28:30:91:1f:75:29:2b:52:93:e8:77:af:72:1d:
                    ca:5c:62:ed:85:1d:42:e4:2a:02:ac:30:85:25:a8:
                    8b:c4:95:53:06:dd:32:00:19:31:2d:68:54:93:27:
                    48:d6:8c:d7:89:63:13:fc:34:47:50:d1:81:57:4f:
                    1e:9d:85:e4:a6:ba:e6:b7:a3:88:e3:37:94:0c:b7:
                    d2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:99:11:06:4E:61:2D:F4:30:43:ED:02:7A:7A:E6:F9:B8:B3:C6
            X509v3 Authority Key Identifier:
                keyid:2F:72:DC:11:39:2D:AA:50:5A:85:62:E2:76:38:86:06:03:CD:BE:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/L3LcETktqlBahWLidjiGBgPNvr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3LcETktqlBahWLidjiGBgPNvr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD59F/019043F033F611F09CE38E41C4F9AE02/2917F838011D11F19AF518A8476F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.44.0/23
                IPv6:
                  2401:fd20::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:2a:ca:2a:5b:2f:fd:7f:86:bd:61:52:fd:f7:b0:0a:6d:3e:
         33:b0:b0:00:d7:b0:a4:ad:03:2d:18:dc:29:98:65:b7:b7:4a:
         80:f1:48:d7:51:3a:53:9b:0a:f8:97:32:bf:d4:66:ab:73:16:
         2e:96:07:db:69:59:96:e5:e1:33:66:db:db:08:b2:cd:ba:bf:
         8d:d9:17:08:ad:7f:13:48:48:3d:9d:d7:73:c2:ba:16:9a:71:
         fa:7a:75:8e:2c:4c:33:62:cc:97:af:44:37:8c:8e:7a:8b:e0:
         f5:31:f4:14:bf:6d:9a:47:9b:17:60:19:7e:f5:b2:20:d7:68:
         78:98:3a:cd:e7:50:11:4b:b1:e7:f2:1a:4b:25:75:4f:ff:bd:
         58:58:a8:e2:db:e5:20:28:33:ac:8c:39:4f:e2:c2:1a:92:93:
         e2:eb:3f:b9:5e:58:15:d7:c6:3f:31:16:86:92:a6:3a:ba:07:
         c5:4b:05:2a:e5:e7:8d:ef:45:ea:ef:3f:09:8a:23:ba:07:6f:
         03:35:42:2e:69:06:ae:fb:08:a0:f8:1c:aa:0c:27:83:59:d8:
         ef:01:b8:3e:40:5f:b6:ac:98:6e:d9:7d:ba:a5:72:2e:67:32:
         10:e4:10:37:a3:76:09:a8:70:a4:10:19:3f:09:90:e3:4f:c2:
         40:b1:aa:a8
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQ1OUYxMTAvBgNVBAUTKDJGNzJEQzExMzkyREFBNTA1QTg1NjJFMjc2Mzg4NjA2
MDNDREJFQkYwHhcNMjYwNTA3MDc0NTEyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZjNDMwOC1lOTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCmo62Tnudk68xItvYMlwzOECXAD25cMuTZyr2ohGXDILk3XXCh1PpXSRZgC
SmYuEQY1BuWZyacfFPWonQmuRODIN5x38MWba6A14VuaPejPeIfRmvO2NNRQAovw
nViOre6BTLckN/ES1x+KktW7Xk+h/J7md45jDdM/rXZdcRvQvCrphiVZXfcK7fXS
3gVCcR7OYTiBD9P5zKaJfMKrG17wHkbvhs6IbHQg7/E0J5HMLIJdKDCRH3UpK1KT
6Hevch3KXGLthR1C5CoCrDCFJaiLxJVTBt0yABkxLWhUkydI1ozXiWMT/DRHUNGB
V08enYXkprrmt6OI4zeUDLfSDQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFO7bmREG
TmEt9DBD7QJ6eub5uLPGMB8GA1UdIwQYMBaAFC9y3BE5LapQWoVi4nY4hgYDzb6/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDU5Ri8wMTkwNDNGMDMz
RjYxMUYwOUNFMzhFNDFDNEY5QUUwMi9MM0xjRVRrdHFsQmFoV0xpZGppR0JnUE52
cjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wzTGNFVGt0cWxCYWhXTGlkamlHQmdQTnZyOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RkQ1OUYvMDE5MDQzRjAzM0Y2MTFGMDlDRTM4RTQxQzRGOUFFMDIvMjkxN0Y4Mzgw
MTFEMTFGMTlBRjUxOEE4NDc2RjU2QkMucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBo+MsMA0EAgACMAcDBQAkAf0gMA0GCSqGSIb3DQEBCwUAA4IBAQBg
KsoqWy/9f4a9YVL997AKbT4zsLAA17CkrQMtGNwpmGW3t0qA8UjXUTpTmwr4lzK/
1GarcxYulgfbaVmW5eEzZtvbCLLNur+N2RcIrX8TSEg9nddzwroWmnH6enWOLEwz
YsyXr0Q3jI56i+D1MfQUv22aR5sXYBl+9bIg12h4mDrN51ARS7Hn8hpLJXVP/71Y
WKji2+UgKDOsjDlP4sIakpPi6z+5XlgV18Y/MRaGkqY6ugfFSwUq5eeN70Xq7z8J
iiO6B28DNUIuaQau+wig+ByqDCeDWdjvAbg+QF+2rJhu2X26pXIuZzIQ5BA3o3YJ
qHCkEBk/CZDjT8JAsaqo
-----END CERTIFICATE-----
Generated at Wed May 13 03:12:27 2026 by rpki-client