Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/0E4F46F2532E11F0B87D127CC4F9AE02.roa
File:                     0E4F46F2532E11F0B87D127CC4F9AE02.roa (raw, json)
Hash identifier:          +JT0f4RowYTHW2+9iIjJn3OKbrwqMZFChzHhfXtVmmk=
Subject key identifier:   F7:1A:72:AC:23:9F:19:F1:2F:B3:21:8E:02:F1:94:1F:12:3B:AB:95
Certificate issuer:       /CN=A912B6D9/serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
Certificate serial:       A4
Authority key identifier: AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/0E4F46F2532E11F0B87D127CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:07:34 +0000
ROA not before:           Fri 27 Jun 2025 08:09:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18024
IP address blocks:        163.227.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl
                          rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B6D9, serialNumber=AB62D963908CC0E3A80199A43D312A34A04881F0
        Validity
            Not Before: Jun 27 08:09:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f3c5-1eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:64:8a:d5:2b:da:84:ab:85:81:78:24:60:
                    97:21:16:60:62:0d:26:a7:cd:7f:75:32:ad:97:92:
                    ef:01:01:64:dd:3e:36:58:38:91:39:44:e2:66:29:
                    62:87:27:c1:f6:b1:60:8f:1a:d5:c8:55:60:b8:8e:
                    9d:c9:11:84:cd:2b:42:b2:13:b5:bb:bb:b6:47:f1:
                    2f:20:d1:a6:bb:c9:1e:28:58:ec:54:74:bb:89:c9:
                    f3:72:93:d9:e2:d2:6e:df:f4:dc:b4:59:0a:c0:db:
                    8e:2d:b1:91:1c:e9:fd:c4:90:36:d1:21:b7:de:be:
                    e1:ae:1f:c8:9f:99:72:42:ef:1c:84:3b:7c:cc:d3:
                    39:0a:cf:79:19:a1:3f:f0:b0:97:35:27:1e:c5:17:
                    dd:c8:3c:56:c0:5e:22:4d:ba:9e:05:25:d3:61:8a:
                    78:a9:43:84:c1:52:ca:3d:3e:35:ce:8c:60:6f:0f:
                    52:2e:e4:96:a1:a1:e1:11:bd:a8:dd:59:d4:56:f0:
                    0b:cb:ce:f1:2d:08:25:0b:18:50:89:8c:ea:aa:98:
                    fb:26:c0:b6:cf:b0:51:22:6a:37:ce:d5:e2:b7:67:
                    c5:82:bc:c3:c0:d1:97:62:14:6e:70:89:26:88:85:
                    84:c8:78:1c:ad:d9:cd:27:d1:e5:d8:b5:44:6d:4c:
                    65:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1A:72:AC:23:9F:19:F1:2F:B3:21:8E:02:F1:94:1F:12:3B:AB:95
            X509v3 Authority Key Identifier:
                keyid:AB:62:D9:63:90:8C:C0:E3:A8:01:99:A4:3D:31:2A:34:A0:48:81:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/q2LZY5CMwOOoAZmkPTEqNKBIgfA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2LZY5CMwOOoAZmkPTEqNKBIgfA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B6D9/7743D51E1E5F11F0BA389A4EC4F9AE02/0E4F46F2532E11F0B87D127CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:5c:4f:73:5d:09:fb:ed:24:51:1f:96:45:f8:df:9f:47:1e:
         af:0e:6e:0d:a1:6e:65:b3:92:34:0b:57:29:bf:f2:45:05:b6:
         fb:0a:ba:00:13:9e:4f:a7:28:18:cc:85:25:16:58:ac:cd:a5:
         bb:04:27:cb:e9:34:78:80:6e:3a:2b:2e:1e:da:56:4b:fa:20:
         41:1c:6d:ee:2b:ba:83:21:3f:1e:f5:49:dc:62:b1:d2:df:f3:
         be:0e:7e:93:f4:2e:8a:b8:df:5e:13:54:f7:7d:f7:d4:11:93:
         7f:5b:47:08:3f:b1:67:24:85:73:2e:2e:fe:37:3b:bb:b6:a9:
         60:89:8d:96:f0:ec:02:e7:5e:cb:aa:44:1b:ab:0e:8b:c0:9a:
         52:86:2c:0a:c2:8e:c0:42:61:a5:84:5a:17:73:2c:18:0b:a2:
         9c:49:7a:b4:ae:3d:b5:f8:af:51:d1:a1:70:63:99:a1:7e:59:
         98:88:50:fd:b6:54:92:8d:93:44:06:50:88:2f:bc:ec:fd:51:
         3b:ae:4e:2f:f5:70:db:a4:d9:6d:5d:ae:20:e5:57:9a:08:36:
         4d:57:13:40:3e:ab:42:77:97:76:f7:dd:1c:cb:46:e4:e6:d4:
         09:0c:92:c7:59:76:04:4d:1c:76:37:13:2a:ee:a9:0c:da:5a:
         21:36:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:43:18 2026 by rpki-client