Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/C43A6D14325511F1978F2162B6833773.roa
File:                     C43A6D14325511F1978F2162B6833773.roa (raw, json)
Hash identifier:          ZQcKHfvJORnZBPl0xwIufb0foIAzEfuBoRsonDeM53Y=
Subject key identifier:   88:4D:45:FB:F4:EA:7D:1F:74:00:B8:A8:67:50:69:CB:EF:C8:C5:11
Certificate issuer:       /CN=A91263B8/serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Certificate serial:       06
Authority key identifier: 87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/C43A6D14325511F1978F2162B6833773.roa
Signing time:             Tue 07 Apr 2026 07:45:37 +0000
ROA not before:           Tue 07 Apr 2026 07:45:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     394432
IP address blocks:        163.128.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
                          rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91263B8, serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
        Validity
            Not Before: Apr  7 07:45:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d4b621-14e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:2d:be:89:1b:25:d8:ea:cf:81:bb:ea:16:
                    73:e5:69:4e:3c:48:bf:ba:a7:46:c5:ab:58:cc:20:
                    00:e3:57:7b:32:5e:01:3c:ea:88:c7:de:b0:76:35:
                    a4:78:6d:db:38:14:45:df:e8:81:2c:de:36:3a:34:
                    29:09:30:d4:d5:d2:c9:a0:4b:08:be:bd:80:22:20:
                    44:7a:e1:e8:ec:c0:55:34:e3:79:92:fd:1d:0e:63:
                    70:b9:12:8e:54:dc:1f:4f:b9:f1:8e:95:fd:a9:17:
                    8d:8f:ec:c0:b2:cb:48:a0:39:ed:ab:7e:44:dc:b0:
                    32:e3:52:8a:53:86:05:dc:09:dd:c6:28:3a:71:de:
                    ab:96:f5:01:45:ae:31:4e:38:9a:73:3e:f7:e1:f1:
                    6e:5f:a5:09:13:42:70:4a:66:1c:31:b4:80:fd:e3:
                    32:c9:a3:cb:fa:03:81:e9:11:28:fd:54:ae:2e:dc:
                    61:71:85:90:f4:8f:33:b2:d0:d3:64:41:49:f3:22:
                    d4:c4:06:11:7c:fc:d1:1c:b6:5a:ad:46:6a:db:2f:
                    b4:47:bb:27:12:d3:c6:5a:a9:69:8a:36:b5:23:1f:
                    8e:e9:a2:45:1b:24:c9:69:99:3f:64:d9:ee:54:92:
                    53:79:28:8a:a3:86:92:5c:7a:46:c9:ba:65:db:29:
                    bd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:45:FB:F4:EA:7D:1F:74:00:B8:A8:67:50:69:CB:EF:C8:C5:11
            X509v3 Authority Key Identifier:
                keyid:87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/C43A6D14325511F1978F2162B6833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:65:7b:eb:c4:a2:0e:a1:0a:0a:46:26:ee:aa:a6:07:a1:d9:
         67:b3:8f:40:3d:3e:e8:39:22:56:59:7b:ce:3d:77:a4:4e:00:
         db:7a:e9:74:26:cb:8c:d4:48:89:2a:56:86:00:06:36:f4:bc:
         71:08:35:8d:50:72:6a:07:20:8e:68:d6:ab:d5:42:3a:f4:c9:
         57:24:1e:0f:ca:6e:46:8f:a4:12:63:7b:d2:9d:cd:38:be:19:
         f5:ff:72:0a:b6:09:0b:73:e0:db:7b:f3:cd:70:3e:6b:0f:fd:
         c0:8d:0d:43:63:46:bf:2c:b0:01:4d:cb:a5:5a:07:01:b1:60:
         85:97:51:31:79:b4:6d:75:45:1d:a2:b8:57:7b:63:fe:65:3c:
         d1:ac:b9:2b:57:00:58:92:44:cc:ef:fc:90:3a:55:49:e2:b8:
         c9:d3:62:87:99:ab:e7:80:bf:1e:49:0c:96:9c:38:c2:20:76:
         e6:91:12:8f:ba:b8:91:ab:98:57:f6:d6:41:ca:1a:d1:e5:55:
         b8:1f:3b:fb:78:53:89:5d:f2:42:4c:b5:4d:5e:db:ac:9c:ae:
         dc:26:4e:a4:85:dd:73:56:b2:8a:51:48:12:2e:bd:8a:94:89:
         12:e0:ae:ca:5c:9a:a6:a3:b2:81:47:c1:ed:be:e2:2d:10:d5:
         1c:c6:9b:24
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:12 2026 by rpki-client