Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/BDA4863C1E6111F09E161078C4F9AE02.roa
File:                     BDA4863C1E6111F09E161078C4F9AE02.roa (raw, json)
Hash identifier:          OXr2+RSmDVTw95MI4mSuzskhQkGrMUHAO2H/xbzWjGU=
Subject key identifier:   AF:27:5C:17:F2:6E:26:9E:33:87:47:09:0A:68:26:92:78:CB:61:6D
Certificate issuer:       /CN=A9119B9D/serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
Certificate serial:       A2
Authority key identifier: 22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/BDA4863C1E6111F09E161078C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:07:55 +0000
ROA not before:           Mon 21 Apr 2025 03:35:59 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl
                          rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:34:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119B9D, serialNumber=22587CC2CB6F351063783FB1CFDA66E44E2ECAC1
        Validity
            Not Before: Apr 21 03:35:59 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f3da-67cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:0e:07:d8:38:d9:57:bb:6b:0f:9f:03:2a:
                    1c:4c:ea:93:c0:34:94:40:e8:cd:97:31:b8:ca:fa:
                    90:46:1f:c1:9c:51:8f:f8:e0:c8:a9:f8:43:42:48:
                    f1:fe:81:38:db:7d:0c:b1:27:b8:b5:bd:2c:73:f1:
                    53:17:2b:56:8c:1b:a8:6b:27:37:da:1b:37:d8:2c:
                    84:9f:9c:3d:0b:09:78:4f:8f:c5:b3:48:d2:69:46:
                    30:8b:35:f3:97:48:52:5d:7f:85:eb:3d:38:a3:1d:
                    f3:da:13:e0:03:e6:53:ed:0a:cf:13:d0:bb:37:b3:
                    d3:84:c6:bb:c6:e7:78:b7:67:28:8c:83:06:56:a6:
                    dc:44:8c:f8:21:6e:e2:5f:d5:59:44:a4:85:d5:cf:
                    68:dc:17:ec:79:fe:43:ef:ca:79:2c:45:bc:a6:d9:
                    06:c7:6c:36:a8:c1:45:bb:94:03:fa:e5:08:81:ab:
                    d4:5c:48:5e:f4:d4:b4:5e:53:b8:1f:3f:e4:00:8b:
                    a6:26:57:8c:1f:3c:33:a5:6d:38:5b:8f:95:4f:12:
                    e9:ba:65:90:ba:8c:c3:6a:18:46:f7:c7:7d:62:a9:
                    4c:0f:5c:01:50:b7:0a:f1:39:6b:91:54:5c:14:9e:
                    68:bd:e3:b4:0e:6c:44:7f:bd:bb:36:d0:d9:ba:0f:
                    dc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:27:5C:17:F2:6E:26:9E:33:87:47:09:0A:68:26:92:78:CB:61:6D
            X509v3 Authority Key Identifier:
                keyid:22:58:7C:C2:CB:6F:35:10:63:78:3F:B1:CF:DA:66:E4:4E:2E:CA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/Ilh8wstvNRBjeD-xz9pm5E4uysE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ilh8wstvNRBjeD-xz9pm5E4uysE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119B9D/2402FB081E6111F0ADD3D173C4F9AE02/BDA4863C1E6111F09E161078C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:aa:a0:94:1f:1a:09:b5:39:4d:b6:fb:f1:96:58:71:c9:01:
         03:1b:47:cb:fc:52:25:d8:33:4c:10:af:10:f0:d3:34:e2:df:
         a4:39:1e:68:5f:be:2f:d0:c4:cd:43:2c:f2:a8:b6:f5:4e:80:
         a7:8e:ad:e4:a2:70:72:29:fd:9f:4a:e7:45:38:9d:71:bb:a7:
         ff:4e:0f:07:43:e1:d4:1f:14:09:81:87:23:ce:cd:86:5e:94:
         41:0e:87:0b:6a:6f:f0:31:6d:c1:79:5e:56:48:34:82:31:e9:
         f5:c5:ea:d0:1a:34:99:04:b7:be:bf:5e:c9:50:5b:4e:3d:8f:
         cc:bc:86:5a:68:0a:fa:d6:6c:ad:1a:d6:bf:34:19:0d:c9:43:
         57:20:6a:cd:a7:a9:01:db:6d:c6:bb:7f:df:62:0b:1f:12:14:
         cd:be:fa:a2:8e:9a:7f:00:99:d2:c9:fc:40:41:3d:93:74:4f:
         f0:1a:c4:6d:f1:34:73:37:1c:eb:9b:20:b5:c9:af:ca:53:99:
         47:bb:3a:89:6b:1e:cc:4a:4c:4d:1c:0d:d4:eb:50:0d:4d:5e:
         da:70:a1:15:4a:c5:37:80:43:4d:54:55:20:7c:aa:62:d0:f8:
         56:71:38:b8:10:cd:a8:77:97:47:98:29:71:a6:87:fa:ed:16:
         c6:e3:b8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:49:56 2026 by rpki-client