Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/614772FE880B11F1AC7AC66A4111F970.roa
File:                     614772FE880B11F1AC7AC66A4111F970.roa (raw, json)
Hash identifier:          o0rs+htqUFzwdtNtfMIUKKh0z/keHJddP4OX/SU46ho=
Subject key identifier:   A6:5E:52:E9:5E:B2:6F:1C:14:F3:DF:F9:9C:AC:24:B1:F8:93:28:39
Certificate issuer:       /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial:       FB
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/614772FE880B11F1AC7AC66A4111F970.roa
Signing time:             Mon 27 Jul 2026 08:56:50 +0000
ROA not before:           Mon 27 Jul 2026 08:56:50 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     147237
IP address blocks:        163.227.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
                          rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Aug 2026 07:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
        Validity
            Not Before: Jul 27 08:56:50 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a671d51-4a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:25:58:2d:4f:56:29:6b:a5:69:7d:8a:00:
                    03:e7:82:50:1a:10:b5:c7:58:64:54:ee:95:03:f3:
                    1c:9e:53:61:21:cf:2d:ee:7a:29:6e:24:8e:1d:36:
                    ab:33:e2:09:70:eb:fa:5e:d9:b1:4f:ab:8c:e2:94:
                    ce:17:94:18:cd:3b:27:96:e3:70:ee:0e:4e:29:e2:
                    0e:30:74:ce:ef:2d:66:6d:1c:00:40:a8:e8:56:24:
                    10:af:ec:ea:a4:49:ed:4e:96:f3:fb:81:fb:1a:01:
                    bf:48:f3:da:ad:ec:58:b3:e9:ce:5f:d3:7c:7a:f5:
                    46:2c:9d:bf:06:51:ec:df:6e:72:74:eb:2a:ec:18:
                    ed:e0:cd:9f:c5:84:77:1c:a9:cc:d9:d2:4c:d0:91:
                    95:3c:74:18:d8:cc:9f:02:ce:84:15:e9:10:86:e4:
                    67:79:8e:dd:60:61:f3:90:c8:92:61:c2:57:a5:9a:
                    05:de:6a:6a:64:f8:e7:de:8f:82:f7:d9:5d:01:55:
                    f1:09:1f:da:e3:fa:42:09:c5:77:8e:06:1c:bd:60:
                    03:e6:62:3b:24:88:04:74:04:66:00:17:38:7e:6b:
                    36:fc:d8:62:75:e1:e7:ee:aa:c1:1e:3c:a7:59:0f:
                    e2:d5:8c:f9:23:58:b1:28:74:b6:d4:f1:52:c1:bb:
                    35:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:5E:52:E9:5E:B2:6F:1C:14:F3:DF:F9:9C:AC:24:B1:F8:93:28:39
            X509v3 Authority Key Identifier:
                keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/614772FE880B11F1AC7AC66A4111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f9:6b:6a:14:c4:6d:3e:f8:5c:80:f6:33:d4:f5:62:3e:a7:
         25:99:14:bf:c4:77:65:1c:17:b9:57:12:8f:11:e6:04:f6:39:
         fe:ee:72:90:f4:44:94:2f:e9:2a:6e:41:03:03:cc:4c:62:7a:
         1a:75:63:31:01:0b:c3:f3:11:17:5c:be:0c:58:34:c0:aa:c5:
         b8:cb:19:86:49:cc:98:da:b6:16:bc:36:88:f0:27:91:53:cb:
         14:77:d7:be:98:25:cd:f3:f7:88:75:18:42:5a:32:0b:2b:b2:
         84:f6:b7:90:74:a2:6a:1d:39:2d:0d:1d:99:34:36:07:6a:dd:
         fa:fc:06:24:19:45:09:75:d9:c9:a2:1f:c2:71:48:8d:dd:5e:
         7c:c9:30:2a:20:18:bb:d7:fb:e4:0c:5f:70:69:2f:15:c9:2a:
         8e:4c:2b:8b:1c:f5:92:2b:92:99:a5:d6:5c:98:41:c7:50:a5:
         dd:07:1f:f2:3d:7c:ed:98:70:2e:1c:20:04:10:59:89:cc:0a:
         60:94:58:1c:a3:30:05:c7:83:d4:41:d3:77:2c:38:b4:66:07:
         13:7e:19:60:cf:61:36:40:89:2a:ab:09:a0:41:a9:cc:ee:77:
         28:47:d3:db:09:34:dd:ac:8a:33:1a:70:87:8a:33:a4:c8:4d:
         8c:ce:c4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:47 2026 by rpki-client