Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/2A2F9262201811F09DB3CC16C4F9AE02.roa
File:                     2A2F9262201811F09DB3CC16C4F9AE02.roa (raw, json)
Hash identifier:          JIEsA7areAo/HXr9zawFvTRRX2S0zguLE0PWXUlfIVA=
Subject key identifier:   95:EF:4B:BE:E3:12:76:40:86:D1:0B:B2:AB:3F:D0:13:1F:1B:4C:95
Certificate issuer:       /CN=A912CD21/serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
Certificate serial:       B2
Authority key identifier: 81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/2A2F9262201811F09DB3CC16C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:07:19 +0000
ROA not before:           Wed 23 Apr 2025 07:54:21 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl
                          rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912CD21, serialNumber=818BB90332717F935730DAF14708FFC2F605F05F
        Validity
            Not Before: Apr 23 07:54:21 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f3b7-643a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:43:6d:fc:6d:28:42:e7:00:7a:66:7f:a4:
                    53:4e:48:8b:86:58:c9:7e:4a:fc:d7:8d:de:01:0d:
                    23:06:9e:f8:48:6f:f5:f5:e0:f5:65:8d:c3:b8:6d:
                    6b:10:1e:1f:36:38:20:a6:83:b0:19:5a:20:6b:c6:
                    c5:2d:1f:2a:bb:e8:0d:ae:5e:1d:6d:76:4b:b2:59:
                    7b:42:00:a5:2d:a6:f6:01:6c:c8:22:37:49:6a:95:
                    1b:c7:d6:68:3e:d6:9a:79:9a:9a:dc:0c:71:77:48:
                    92:16:25:58:62:41:21:07:3f:4b:17:bb:bf:8d:0e:
                    23:35:77:7a:dc:49:a6:61:66:a1:f3:23:f3:32:01:
                    3e:c2:f7:1c:a7:31:8f:7a:2d:29:f3:c7:30:36:02:
                    46:56:20:2f:6b:75:32:25:0d:d7:d5:49:77:9a:79:
                    1a:ba:a6:17:58:21:df:bc:30:6b:c2:02:39:a8:64:
                    e5:17:d5:e9:f6:95:84:76:8c:20:a6:4f:e2:5e:8b:
                    81:0c:22:22:36:3b:79:18:e7:72:f4:62:87:79:cd:
                    90:8e:1f:08:af:f3:1a:da:f3:ce:6c:2c:98:34:88:
                    35:10:00:2b:0c:68:a4:ad:71:e2:79:e9:e5:37:7f:
                    bb:ec:5d:5c:fb:e6:6a:53:74:de:e3:59:2a:08:e2:
                    6a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EF:4B:BE:E3:12:76:40:86:D1:0B:B2:AB:3F:D0:13:1F:1B:4C:95
            X509v3 Authority Key Identifier:
                keyid:81:8B:B9:03:32:71:7F:93:57:30:DA:F1:47:08:FF:C2:F6:05:F0:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/gYu5AzJxf5NXMNrxRwj_wvYF8F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYu5AzJxf5NXMNrxRwj_wvYF8F8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CD21/38C261E41C3811F0AA857D27C4F9AE02/2A2F9262201811F09DB3CC16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:4e:67:00:65:65:bd:b0:54:4d:e6:0c:d2:d5:29:ca:a0:85:
         26:14:e4:fa:a8:0e:99:df:20:d9:d4:64:df:d3:8b:2c:d6:73:
         e8:e3:ac:25:3a:26:ef:52:72:3c:30:2b:1a:02:3f:e0:be:e7:
         50:3d:d9:8b:b7:ef:c9:9f:04:d0:30:67:6b:b7:c9:7e:7f:aa:
         cb:46:e5:1d:99:5d:57:37:c1:61:82:5d:39:d5:5b:f9:dd:87:
         2c:37:b5:05:de:db:3b:69:ba:cb:7f:39:f8:32:f9:59:75:df:
         83:34:d7:e3:f4:c1:96:c8:da:47:36:98:8a:5f:e4:20:9b:bb:
         ed:08:39:3f:af:20:54:e8:0b:7c:fe:c2:34:6b:dc:b9:87:32:
         91:99:bb:fb:c0:f1:4f:43:0a:58:76:9f:0b:71:97:d5:8e:54:
         b6:86:d3:a2:e1:11:c8:84:72:9d:04:f0:ed:09:d6:f7:be:a7:
         f6:c6:2a:84:f0:de:fa:cd:56:2e:6f:6a:f3:a1:4c:c9:ee:6d:
         ba:ee:c0:09:18:f5:23:59:71:c6:c2:05:26:e0:40:6c:10:e8:
         7d:f7:36:19:b6:86:2c:30:65:56:42:65:03:78:cf:bc:bb:57:
         6e:12:73:04:d1:da:e0:47:c7:54:85:d1:bd:ef:96:29:bb:1b:
         22:d9:31:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:48 2026 by rpki-client