Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/FB24C32041DC11F091D21255C4F9AE02.roa
File:                     FB24C32041DC11F091D21255C4F9AE02.roa (raw, json)
Hash identifier:          yGQ/kBnyBqrm/5yKWqMTaxFVtmKEFjfNc2borFqp2nE=
Subject key identifier:   82:F1:A1:3A:4A:52:E3:1D:BB:98:BB:B2:F4:72:5F:E6:40:C3:35:CF
Certificate issuer:       /CN=A9120208/serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
Certificate serial:       AC
Authority key identifier: 4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/FB24C32041DC11F091D21255C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 07:41:49 +0000
ROA not before:           Thu 09 Apr 2026 07:41:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153655
IP address blocks:        163.223.22.0/23 maxlen: 24
                          2401:f360::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl
                          rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120208, serialNumber=4BA13D549A0564C31EA8B2315FCE3023BB6288A7
        Validity
            Not Before: Apr  9 07:41:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d7583d-1568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:25:7d:29:d3:bd:e7:15:35:57:69:24:71:f0:
                    78:0b:51:04:e3:13:d9:db:3d:28:48:71:08:81:d8:
                    04:cc:a9:66:49:be:84:66:06:e3:66:d3:b6:2c:c0:
                    c5:12:c8:ca:d1:5e:3a:fc:8f:9e:cb:7b:66:7b:29:
                    4a:89:a2:23:ab:f1:1e:b6:ee:08:c4:2a:62:62:16:
                    9e:01:fe:68:f0:0f:a2:cc:cd:d2:48:86:a1:ea:cc:
                    52:e4:77:9d:60:7e:dc:f0:ab:4d:7b:fa:39:f7:fd:
                    04:30:1b:a0:5a:52:76:b5:b6:f3:cf:30:a4:de:48:
                    25:19:49:98:91:f8:e2:5c:1c:1a:11:84:26:ab:ca:
                    23:0d:ac:5e:3e:6d:1a:9d:27:33:b4:06:37:d4:4f:
                    86:17:26:95:6e:f7:37:0f:1d:83:43:b8:a3:8d:db:
                    0c:71:9c:95:1f:22:4c:c8:3f:87:bf:0c:2b:14:5f:
                    19:03:7d:e3:c1:db:5d:56:33:34:81:12:68:07:dc:
                    76:9a:6e:ee:f5:b3:f2:28:28:f0:fa:b4:23:92:d4:
                    86:13:0b:80:71:7e:2b:5b:d6:6a:2b:4a:4b:e1:7d:
                    4e:0a:78:4b:bf:78:f7:67:e5:90:69:c6:fc:6a:2f:
                    d2:33:7f:e3:fb:68:fc:45:15:75:b3:c0:e4:71:cf:
                    94:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F1:A1:3A:4A:52:E3:1D:BB:98:BB:B2:F4:72:5F:E6:40:C3:35:CF
            X509v3 Authority Key Identifier:
                keyid:4B:A1:3D:54:9A:05:64:C3:1E:A8:B2:31:5F:CE:30:23:BB:62:88:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/S6E9VJoFZMMeqLIxX84wI7tiiKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S6E9VJoFZMMeqLIxX84wI7tiiKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120208/BA8674263B9711F0A170C775C4F9AE02/FB24C32041DC11F091D21255C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.22.0/23
                IPv6:
                  2401:f360::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:ea:b8:65:fb:c5:7b:5a:0b:c8:80:a1:ad:e2:6a:3f:77:ec:
         6e:8e:bf:eb:de:5c:48:19:c0:a7:65:28:2f:6d:d8:7b:aa:dd:
         3e:66:13:22:96:59:71:b6:66:cc:b0:b1:8a:28:cd:19:78:46:
         45:40:43:1e:ec:3f:9c:ba:f3:2b:2f:a2:c4:dd:55:cb:a0:ff:
         6f:af:e0:70:a9:88:f0:99:38:22:c4:70:3f:40:55:c1:50:28:
         8b:b5:84:bb:58:a3:0b:7c:eb:af:fa:b5:21:5f:7c:df:d8:24:
         18:bf:5c:bb:e4:e2:43:4a:0f:b8:61:a9:28:27:3d:3e:b1:87:
         88:17:77:d9:f3:38:fc:4c:59:b6:f1:f9:68:68:8a:ef:ce:2c:
         87:cd:90:48:76:d8:d6:69:36:f8:9e:79:e7:bd:e1:92:e0:ca:
         f3:da:67:f0:80:86:f3:b5:5c:ea:e3:b8:e3:ff:c0:ca:eb:0b:
         8e:4c:3d:f5:43:00:35:cc:16:94:4a:21:a3:1d:e8:f0:b1:54:
         71:10:d9:ec:5a:0e:ef:15:81:32:64:b1:6d:5c:9b:46:41:ad:
         9f:c0:9a:4d:ad:f5:ba:b9:ea:54:92:97:33:2a:4b:92:74:a5:
         a5:6a:e7:1d:32:14:f2:f8:1a:53:e5:e9:28:19:57:a6:c0:91:
         3b:90:77:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:47:58 2026 by rpki-client