Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
File:                     D7E9A8C49DAA11F0A24E4963C4F9AE02.roa (raw, json)
Hash identifier:          jOlgXy5s6Ahmo/y9znHfijD5u8a2h7ukaclc+SI1hq8=
Subject key identifier:   BF:05:7E:19:F2:10:94:C8:09:C2:5C:BF:0F:AD:C1:BF:0C:12:A6:7E
Certificate issuer:       /CN=A911F584/serialNumber=80071765E98B39612588D3785721432C32607FEE
Certificate serial:       51
Authority key identifier: 80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:16:23 +0000
ROA not before:           Tue 30 Sep 2025 03:09:14 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153850
IP address blocks:        163.227.218.0/24 maxlen: 24
                          2001:df5:7bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl
                          rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F584, serialNumber=80071765E98B39612588D3785721432C32607FEE
        Validity
            Not Before: Sep 30 03:09:14 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3d9b7-0c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:35:85:a3:ad:47:42:c1:02:2f:cf:79:72:66:
                    3e:f3:d8:d4:dd:8c:a9:66:92:c4:3f:cc:34:27:cd:
                    fa:9b:ae:a2:33:07:fb:cf:a0:f8:52:a9:87:0d:dc:
                    39:69:64:02:c9:e8:89:f0:ac:59:20:27:14:c4:b9:
                    8a:d0:66:7b:d8:ef:d2:b3:6c:0a:85:df:9d:06:6d:
                    15:28:d9:0c:42:41:5a:67:6a:6e:a3:46:48:1e:78:
                    86:fa:64:b4:d3:c7:bf:44:67:eb:40:60:b8:19:1f:
                    b0:a2:10:6f:e8:0f:fe:94:2c:fb:09:09:3f:ee:52:
                    8d:83:8b:00:2c:8f:04:3c:cf:2b:fe:8e:1b:1a:20:
                    22:c5:f8:1f:3d:c7:e2:08:3d:46:c0:54:38:53:44:
                    23:00:86:ab:26:08:ad:cf:af:43:9a:2d:02:81:66:
                    65:78:99:12:3f:5d:ef:ac:53:98:36:76:ce:76:4a:
                    7c:26:a0:a2:cc:49:46:f2:17:58:d2:38:c3:a8:b8:
                    48:1a:a1:7f:45:36:fd:6d:7c:ff:14:48:92:7b:6f:
                    80:94:8e:e5:76:b0:29:37:13:cc:a7:a7:56:97:0f:
                    f8:50:8b:95:16:a0:2e:64:01:b6:9d:12:e5:8c:21:
                    7d:35:f3:c4:84:45:98:5e:9e:3e:01:80:99:17:fc:
                    ec:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:05:7E:19:F2:10:94:C8:09:C2:5C:BF:0F:AD:C1:BF:0C:12:A6:7E
            X509v3 Authority Key Identifier:
                keyid:80:07:17:65:E9:8B:39:61:25:88:D3:78:57:21:43:2C:32:60:7F:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/gAcXZemLOWEliNN4VyFDLDJgf-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gAcXZemLOWEliNN4VyFDLDJgf-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F584/FFF802189DA811F0AEDA3F3AC4F9AE02/D7E9A8C49DAA11F0A24E4963C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.218.0/24
                IPv6:
                  2001:df5:7bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:75:98:06:6f:ef:d1:9a:0b:93:a2:5b:a4:0e:1b:28:a9:53:
         35:cb:dc:86:44:88:05:a6:8e:fc:79:ee:8b:04:d5:0e:94:51:
         69:05:df:66:3e:09:d5:ee:a4:ab:76:b0:80:ef:31:cc:ea:16:
         d8:06:51:49:34:84:9b:ef:cc:6a:16:75:ba:3f:84:a6:7a:c1:
         df:d8:62:1d:de:59:90:eb:d9:86:ed:a0:8e:34:81:b7:18:a8:
         01:88:c8:9d:9d:9b:b8:e1:e6:77:d0:8c:3c:07:89:c5:29:07:
         ad:8b:9f:f5:01:e9:a7:f5:74:72:a5:d1:8d:ea:58:c6:84:9f:
         a1:18:91:d8:b4:7a:67:f5:a8:32:6c:d6:e3:49:96:14:58:86:
         d4:95:63:66:15:b7:91:20:0e:ec:c2:d8:c2:00:b3:5e:17:33:
         88:71:8f:e1:cb:ea:42:68:3f:d5:1a:52:bc:ac:8c:5e:de:16:
         d6:2e:59:c4:9d:ae:eb:3a:96:fe:5c:b6:b1:96:e8:d2:15:5c:
         8c:ca:9d:2a:73:11:30:ac:d1:63:47:00:0f:23:cf:e1:22:54:
         ee:2a:05:2a:8c:65:f6:c8:fa:21:81:36:39:e7:1b:de:43:90:
         e3:2a:ca:c9:3a:98:fc:40:37:7b:53:1f:33:29:05:47:d8:14:
         fe:c7:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:31 2026 by rpki-client