Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
File:                     CB08B0C019C811F0958CB24EC4F9AE02.roa (raw, json)
Hash identifier:          oU1YzucoXB7KyIdRvg/07TuDKK4MCzNm2V2SoNLMLi0=
Subject key identifier:   26:33:0D:CB:56:3C:32:6D:70:09:27:66:8B:FE:2B:1B:71:78:78:88
Certificate issuer:       /CN=A9125532/serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
Certificate serial:       AB
Authority key identifier: 94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:02:52 +0000
ROA not before:           Tue 15 Apr 2025 07:13:51 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153775
IP address blocks:        163.227.62.0/23 maxlen: 23
                          163.227.62.0/24 maxlen: 24
                          163.227.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl
                          rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125532, serialNumber=94508B2AAB032AA33F9A002825823F9AB85C7012
        Validity
            Not Before: Apr 15 07:13:51 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e49c-7398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dd:0e:8e:b7:dd:8d:12:a3:35:8d:16:23:c8:
                    9d:22:54:46:32:c7:79:6d:90:c0:65:37:9c:5d:e2:
                    7c:ef:d7:19:90:91:f2:70:b6:aa:32:eb:f8:e8:29:
                    25:e0:47:95:e2:60:4b:f9:c8:dd:ae:a0:9c:9f:32:
                    94:78:dd:5c:8f:95:e5:e0:f3:14:19:0f:37:61:5d:
                    35:e1:4c:79:27:aa:18:fe:5a:dd:3f:a3:34:32:53:
                    1b:3a:8a:8f:45:18:74:4e:81:52:aa:57:5d:58:26:
                    6f:a3:2e:35:26:a6:1b:bb:fd:f5:5e:b6:96:ed:ae:
                    4e:fc:06:50:b4:81:30:24:dd:90:97:f8:c8:f9:2c:
                    5c:f2:a2:65:ed:de:68:79:4a:30:3e:d9:6f:29:97:
                    e4:16:34:66:83:ef:37:ee:5f:18:fb:b9:22:aa:a6:
                    15:79:0a:ca:1a:11:e2:6a:50:1b:23:f2:5a:77:af:
                    72:d7:a9:0f:5d:92:b5:1a:b8:e6:e6:8b:4a:57:93:
                    cf:ae:59:9d:34:bf:ac:6a:e1:9d:ba:4e:d6:d9:0c:
                    9e:19:78:51:98:cd:a5:58:b5:c2:80:2e:1a:bd:ba:
                    2d:91:fc:16:4a:16:34:86:23:2e:72:17:2b:46:5b:
                    b4:e5:71:4a:ce:40:e7:fe:6c:9a:d9:cf:e8:5b:b2:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:33:0D:CB:56:3C:32:6D:70:09:27:66:8B:FE:2B:1B:71:78:78:88
            X509v3 Authority Key Identifier:
                keyid:94:50:8B:2A:AB:03:2A:A3:3F:9A:00:28:25:82:3F:9A:B8:5C:70:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/lFCLKqsDKqM_mgAoJYI_mrhccBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lFCLKqsDKqM_mgAoJYI_mrhccBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125532/F37BD67A19C511F0A59D8928C4F9AE02/CB08B0C019C811F0958CB24EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:d6:aa:25:3d:d4:df:c3:95:cd:2d:08:b6:18:af:4d:1a:a7:
         20:5e:a9:e2:38:88:36:b7:e8:69:6d:a4:21:87:5c:36:43:40:
         da:7a:fe:c1:90:11:f2:b9:c5:f1:6d:8e:92:c3:f3:2e:4f:dc:
         e0:92:6f:b4:a9:08:95:40:da:6c:6e:df:31:2a:bf:a2:95:93:
         ea:6a:78:7d:79:27:e4:9f:94:6b:6a:7d:98:2b:94:dc:e7:92:
         f9:ea:b4:77:0b:1b:b9:0e:37:c4:c0:9f:f6:84:94:99:c2:a3:
         a2:e7:11:ca:4d:bf:ce:ee:36:75:dc:fd:39:bd:aa:61:51:c3:
         67:bb:4d:c7:66:03:f1:12:e1:c9:ee:28:36:f0:a4:3e:85:cc:
         18:8a:f4:a0:0f:cc:dd:40:79:8b:d7:86:d7:0d:36:3a:a6:df:
         e3:26:e0:26:df:1d:70:c6:74:2b:99:5f:5d:42:6f:c9:af:c5:
         44:b1:93:dc:6b:ac:37:4f:e3:7a:9b:9e:3d:e8:f7:43:51:a1:
         8b:da:80:5c:79:a8:6d:09:a2:7e:95:d5:04:72:eb:6c:aa:07:
         2e:43:cc:ab:bf:71:c6:2b:73:77:4e:24:cd:83:c1:d3:fe:77:
         5c:b1:e8:2d:84:50:95:3b:fe:3f:d5:60:1d:0b:96:45:85:8b:
         53:47:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:57 2026 by rpki-client