Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa
File:                     B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (raw, json)
Hash identifier:          tWcNAFc3bYDjPCom57BiBbJ1UpCRJsDuVZnnn3Eh+8c=
Subject key identifier:   C7:4E:8D:C0:C7:CD:6B:02:D9:18:63:41:0E:0F:CD:9D:67:5E:ED:53
Certificate issuer:       /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
Certificate serial:       A5
Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:02 +0000
ROA not before:           Tue 13 May 2025 09:00:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150044
IP address blocks:        163.227.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl
                          rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81
        Validity
            Not Before: May 13 09:00:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e4a6-020f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5d:7a:81:12:54:9e:f7:2d:16:f7:80:9a:31:
                    b6:90:1c:1d:43:b8:54:29:ed:db:38:89:e7:6e:a9:
                    00:91:33:e3:82:1b:fe:ec:16:64:ea:25:48:ef:82:
                    d2:7e:d5:ca:0b:5a:0a:e4:ff:a4:62:27:5f:b5:49:
                    68:4d:a9:2c:e0:e0:36:ba:54:04:dc:33:7a:30:ca:
                    53:4b:2c:88:1a:99:a3:73:38:30:32:4f:41:24:a2:
                    3f:ea:3c:88:f4:cf:49:51:8b:00:3b:85:72:0c:7d:
                    2d:b0:4e:6d:31:d6:ea:fc:f1:38:83:3f:ff:16:2d:
                    9c:4d:ef:6a:c3:5a:66:fb:ff:e6:08:ff:bb:7a:a8:
                    ac:6a:99:66:e8:3a:33:22:78:56:4a:fe:d4:b2:ef:
                    01:c4:c8:15:12:84:d6:58:14:2a:da:a6:46:94:9c:
                    db:98:1e:3a:e4:10:5c:69:3b:23:2a:91:16:5e:dd:
                    74:99:e0:fc:5e:0a:e9:c4:34:32:50:22:54:be:bc:
                    9f:06:64:25:88:6c:1e:88:12:31:a1:64:ff:41:fa:
                    c1:ab:6c:8e:9c:44:bf:df:4f:cb:76:ab:39:5c:84:
                    38:0d:71:7d:59:16:c7:fd:fc:dd:d5:26:33:aa:43:
                    f0:af:bc:d7:f1:88:a4:d4:15:17:97:66:77:17:16:
                    96:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4E:8D:C0:C7:CD:6B:02:D9:18:63:41:0E:0F:CD:9D:67:5E:ED:53
            X509v3 Authority Key Identifier:
                keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:a1:47:14:0b:d1:56:70:ac:90:65:e5:cc:4b:ac:fa:26:61:
         f3:a0:c0:0b:92:1d:b9:ab:1a:80:6e:95:c5:69:7b:c6:35:46:
         6c:06:2a:11:ef:a8:e7:48:3e:9c:f2:f7:20:78:6c:20:7b:60:
         4e:74:be:ae:79:5f:7f:e5:6d:ee:75:0e:f7:7a:23:fb:4d:f9:
         5a:97:46:b7:6a:03:ab:82:8b:53:ad:75:cb:d4:d8:f4:56:9c:
         47:55:ed:e0:9a:32:cd:69:e5:1a:c3:40:c8:17:88:df:82:d1:
         34:f7:df:9f:aa:f4:f3:38:47:0f:01:a9:c7:b3:3b:2c:26:d6:
         e3:be:20:08:48:af:65:20:93:aa:ed:98:c1:d3:25:77:82:04:
         6d:1e:67:ca:44:e9:44:c1:53:5b:6b:71:ae:4a:19:6d:6a:64:
         3f:b3:92:f0:71:0e:d7:eb:6b:6b:b9:33:9c:74:4f:1b:2a:d2:
         32:47:1c:67:75:10:9c:90:44:eb:77:39:b3:43:2b:90:a0:9b:
         a2:8a:84:89:6d:1c:ab:5e:0c:d7:b2:87:a5:7c:86:96:bf:07:
         3a:47:dd:19:42:36:a8:1a:72:bc:76:e4:5d:19:ee:a4:45:3c:
         34:bc:61:0e:d0:a7:03:6c:d7:19:52:d1:c2:27:85:b5:c1:ff:
         1e:9e:73:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:40 2026 by rpki-client