Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/B3AF09C0209D11F0B81D0B48C4F9AE02.roa
File:                     B3AF09C0209D11F0B81D0B48C4F9AE02.roa (raw, json)
Hash identifier:          nWHUoa9vkhFGSYFzs6etU2+eRfNRWFgZ4uwCWfGuzx4=
Subject key identifier:   CF:4C:AD:F4:B4:88:4C:04:42:6B:9D:44:2A:E4:6C:A8:3B:D4:E3:50
Certificate issuer:       /CN=A91160BB/serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
Certificate serial:       C9
Authority key identifier: A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/B3AF09C0209D11F0B81D0B48C4F9AE02.roa
Signing time:             Fri 15 May 2026 07:43:11 +0000
ROA not before:           Fri 15 May 2026 07:43:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153809
IP address blocks:        163.227.140.0/23 maxlen: 24
                          2401:ffa0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl
                          rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91160BB, serialNumber=A9BBED2D73B8D4BE0116373D57483A0B0198E914
        Validity
            Not Before: May 15 07:43:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a06ce8e-5421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f4:5e:03:2c:b0:e6:3b:56:a6:45:04:25:f8:
                    10:3b:18:92:e5:93:26:e6:f7:e8:3b:f4:fb:69:76:
                    41:68:e0:a6:62:44:ae:ee:75:da:ed:f4:10:43:98:
                    c9:f8:35:bc:22:84:d2:46:d1:d5:36:71:72:96:18:
                    6b:f1:3a:1a:ba:ad:f0:35:1c:de:fd:5f:33:66:96:
                    49:bd:34:1a:b3:f0:2e:59:a3:ac:5e:3b:c7:03:f2:
                    ec:8b:03:1e:e8:aa:43:48:be:7a:5f:b1:92:f8:9d:
                    78:34:2f:7e:2d:69:63:f0:82:6c:c7:21:02:4b:37:
                    f5:d4:d7:20:8a:5f:de:96:e6:aa:2e:b6:b4:fc:5e:
                    81:e6:10:4f:21:8a:47:81:0d:69:72:2a:6c:4b:70:
                    1a:b2:76:2c:36:b6:ba:c9:31:c1:3f:57:5e:04:93:
                    bb:d4:16:46:47:46:24:30:7c:87:3f:5f:90:b9:42:
                    a4:eb:0b:aa:04:b4:f4:ac:3f:bd:94:71:6e:ee:f9:
                    9f:07:ff:aa:0d:a2:55:20:16:89:a9:89:90:3a:86:
                    ae:38:4b:83:d4:ac:39:d3:0b:4c:d2:46:97:86:15:
                    90:95:f5:81:6e:6b:4f:fa:68:0e:ca:fd:b3:7b:37:
                    8f:00:e3:a6:42:45:0b:af:90:cc:74:0c:14:48:19:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:AD:F4:B4:88:4C:04:42:6B:9D:44:2A:E4:6C:A8:3B:D4:E3:50
            X509v3 Authority Key Identifier:
                keyid:A9:BB:ED:2D:73:B8:D4:BE:01:16:37:3D:57:48:3A:0B:01:98:E9:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/qbvtLXO41L4BFjc9V0g6CwGY6RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbvtLXO41L4BFjc9V0g6CwGY6RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91160BB/41CD5D66209D11F0823D4847C4F9AE02/B3AF09C0209D11F0B81D0B48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.140.0/23
                IPv6:
                  2401:ffa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:e2:2d:21:51:c0:a8:03:2f:b3:27:8f:f5:52:fa:54:59:90:
         0a:91:c0:d6:9d:0c:68:8b:af:2e:f2:b2:a5:a4:b5:29:f8:11:
         38:e8:21:af:3b:a8:e5:f8:fe:3d:0f:20:0b:f1:7e:56:21:aa:
         5d:7a:49:d5:e1:5f:2e:cc:2e:55:5d:4f:6d:49:70:14:91:11:
         94:3c:71:cc:c4:8c:75:0a:d3:2f:5d:e4:5f:d1:85:64:44:3e:
         3a:57:20:fe:41:75:1a:37:99:4e:2c:5a:e4:63:e1:02:f8:43:
         ea:b3:6a:82:ed:c4:7b:19:5f:65:bb:a4:03:41:98:e8:16:d8:
         4f:79:b3:d8:67:0f:33:c8:d6:02:46:14:e2:d7:a7:a5:31:99:
         8b:b2:20:5a:2f:ae:dc:38:82:58:9c:92:b9:a4:04:19:85:d8:
         0e:ca:c4:d0:e5:0d:7b:c0:d5:5d:ac:e5:7e:01:ab:67:fb:29:
         1b:9a:86:8b:4f:f3:a5:ad:7d:63:7f:69:13:5d:6e:a7:6f:04:
         69:ba:e8:f6:a8:df:89:b7:6b:20:e1:11:7b:16:bd:73:c8:d0:
         a0:74:3c:82:b4:5f:64:82:4f:03:5a:7c:fc:84:93:48:93:f6:
         d3:fb:07:fa:39:16:e0:a8:e1:f6:7a:96:74:0d:93:28:0d:da:
         86:e3:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:04 2026 by rpki-client