Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/F1940290212911F087425013C4F9AE02.roa
File:                     F1940290212911F087425013C4F9AE02.roa (raw, json)
Hash identifier:          aIejdLAewgudU6U+kv+7+KGIiYEWb/Zyhioe0M0XWcc=
Subject key identifier:   B2:E4:44:6A:ED:B6:4A:21:12:9F:2C:66:0B:1B:7D:43:32:97:E9:3E
Certificate issuer:       /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Certificate serial:       9E
Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/F1940290212911F087425013C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:45 +0000
ROA not before:           Thu 24 Apr 2025 16:34:08 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153800
IP address blocks:        163.227.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
                          rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
        Validity
            Not Before: Apr 24 16:34:08 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e4d0-ba9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:ca:77:e9:61:99:74:c7:e6:8b:4c:0f:15:
                    e2:54:1c:f8:8f:e2:d4:f6:b7:3e:a7:bf:5f:15:5f:
                    f2:28:72:0f:60:ad:70:cb:4f:60:05:5b:d3:55:10:
                    94:15:64:85:9b:47:a5:50:0b:b3:10:76:4b:02:7b:
                    ef:80:5e:fa:08:1b:b0:88:fa:a4:3c:c5:a8:ed:f0:
                    80:c3:4e:31:74:97:cd:21:0d:a2:d1:09:4c:8f:f9:
                    55:9d:44:0c:d5:58:e6:7a:af:b4:6f:45:57:b5:b0:
                    4b:5e:f6:c2:bd:69:62:0b:fa:a0:a3:6a:df:2e:2c:
                    7e:90:33:eb:1f:48:0a:65:74:db:80:47:47:98:1c:
                    45:5a:d9:c9:14:02:b0:42:28:04:21:d9:63:fd:75:
                    0c:d4:2a:88:b6:6a:91:5a:20:53:2c:65:ad:4a:21:
                    21:da:a2:53:34:e9:9f:bf:fe:9f:63:ee:d1:01:04:
                    f2:09:6c:50:e8:1a:4c:64:f1:72:3d:f6:35:44:1d:
                    48:08:27:18:65:3d:64:a9:94:87:9e:b8:0f:8a:d5:
                    86:b3:6f:a1:a9:bf:1b:97:6a:a6:dd:82:8f:8a:ab:
                    08:f5:3e:d2:84:a3:4d:1c:2a:de:71:51:48:76:a3:
                    d7:d5:10:f5:93:46:7a:9e:60:00:7f:f7:c9:f7:19:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:44:6A:ED:B6:4A:21:12:9F:2C:66:0B:1B:7D:43:32:97:E9:3E
            X509v3 Authority Key Identifier:
                keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/F1940290212911F087425013C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:d2:9d:8a:a3:fe:13:0d:14:e7:42:fa:77:b8:31:d0:d8:
         8c:df:8c:7a:33:fa:9d:cc:94:41:f1:50:14:0c:75:e9:89:07:
         ad:4d:1b:29:3c:43:e3:5d:dc:b1:b3:70:9b:01:ea:ac:e1:6c:
         c9:2d:31:01:e9:27:87:29:61:30:ed:f2:19:35:bc:07:16:d7:
         50:c7:c3:11:49:c7:e7:12:41:9c:53:ac:2d:64:bd:9f:bc:f4:
         05:bb:b9:9b:34:7a:e1:f2:e3:87:47:3d:1b:50:4b:49:44:91:
         7c:57:2a:9f:38:c5:80:87:6f:5b:49:cc:f0:33:13:77:7e:17:
         de:cf:56:a0:86:3b:62:ca:19:2b:4f:00:5d:5b:e0:f5:32:a4:
         8e:2e:ca:dd:28:fb:53:77:e3:d6:55:59:57:01:30:71:97:4d:
         9d:33:3a:d2:67:0d:c8:4d:a2:42:81:b2:d0:ae:1e:1c:eb:5d:
         7c:b7:67:54:5a:04:6a:3a:4d:fb:09:60:c4:6c:6a:48:9d:e9:
         29:77:6a:aa:60:89:08:c7:31:d5:5e:8e:8c:97:6b:74:35:ba:
         e9:f8:77:be:64:9a:65:3b:f7:3d:46:d0:d9:2e:84:fa:53:1d:
         eb:61:df:a5:c7:4b:cd:df:d2:50:05:ef:b3:d5:9f:29:5b:0f:
         71:9a:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:25 2026 by rpki-client