Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/8F93DAA0332311F0BF038621C4F9AE02.roa
File:                     8F93DAA0332311F0BF038621C4F9AE02.roa (raw, json)
Hash identifier:          hj4r5L43295Kpx1PmuExGfY8XpjMW5ANjI0juKbUWcc=
Subject key identifier:   79:3E:FE:B4:81:3F:8A:A3:12:20:E4:4E:FD:C3:A2:74:2E:6F:CE:56
Certificate issuer:       /CN=A912EFFD/serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
Certificate serial:       93
Authority key identifier: F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/8F93DAA0332311F0BF038621C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:05:52 +0000
ROA not before:           Sat 17 May 2025 13:33:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132044
IP address blocks:        163.227.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl
                          rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:43:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912EFFD, serialNumber=F6F385DF1FEA2857B6843F66356543FB76BF08A6
        Validity
            Not Before: May 17 13:33:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e550-5aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:02:4a:3b:f6:ed:67:13:54:80:f0:ae:be:
                    9b:c4:94:e2:0a:a8:c5:10:77:73:6f:dc:1b:5b:32:
                    43:6b:c4:8a:a0:ed:b7:2b:5f:7f:a4:33:d0:f6:7f:
                    8f:3a:73:0d:e6:3a:20:03:4f:e7:13:99:b8:8f:24:
                    08:8b:32:41:ea:61:f8:a0:6e:dc:d2:34:c1:72:1a:
                    d9:c3:ea:9b:76:c1:2f:0e:93:50:67:39:d0:68:45:
                    84:54:4a:5c:f6:c9:26:b7:6c:86:aa:48:e7:5f:99:
                    e4:ed:8a:b6:ca:4d:ee:8d:bb:63:93:39:bc:23:9e:
                    d6:db:fa:3c:a5:98:77:7f:08:b6:6c:8b:1e:e1:19:
                    64:89:b2:d7:3f:39:63:d7:5a:e4:ca:35:e3:9a:f8:
                    89:ba:c2:c7:0f:9b:8c:1f:5b:62:67:1a:36:58:c5:
                    99:1f:2f:26:8f:06:8e:9d:9b:8a:9d:17:45:7b:ca:
                    b8:aa:e4:27:a5:93:07:ed:af:12:c9:00:61:e8:4a:
                    3a:8c:43:ec:fe:48:6a:09:a2:8d:8d:19:9e:77:3c:
                    14:c3:cc:35:d5:5e:ea:d5:32:80:76:35:72:ab:7d:
                    8d:e7:bf:b2:9f:7b:fc:d9:a0:9c:cc:c4:44:e6:ae:
                    ce:17:9c:ab:ae:f0:22:a7:46:6e:48:05:a9:d8:3d:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3E:FE:B4:81:3F:8A:A3:12:20:E4:4E:FD:C3:A2:74:2E:6F:CE:56
            X509v3 Authority Key Identifier:
                keyid:F6:F3:85:DF:1F:EA:28:57:B6:84:3F:66:35:65:43:FB:76:BF:08:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/9vOF3x_qKFe2hD9mNWVD-3a_CKY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9vOF3x_qKFe2hD9mNWVD-3a_CKY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912EFFD/EA12990E332211F0BAE0CA80C4F9AE02/8F93DAA0332311F0BF038621C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:d2:43:52:60:74:87:8c:89:4b:5d:45:4b:3a:17:7c:d6:
         e4:e5:da:57:9d:44:b0:16:59:e5:9d:16:af:54:a5:5c:ad:77:
         8d:43:24:eb:37:c1:9f:65:92:e4:cd:10:4e:c2:1d:22:36:5d:
         15:99:0f:b3:4b:65:17:a3:f9:57:30:68:2c:04:fb:75:f9:89:
         d4:88:0b:1c:21:9f:50:b2:83:3b:64:7b:d9:3c:a6:68:75:7d:
         5d:fa:79:13:9a:2d:d2:bf:c3:cf:7b:0a:8c:19:f4:b3:84:58:
         be:42:47:15:da:0e:10:60:99:bf:9b:74:0d:12:f6:d8:5d:40:
         fa:19:f9:a7:2b:9a:af:e1:7e:e8:43:bd:8e:9f:a2:9c:05:f8:
         d8:62:a7:ac:92:33:4e:dd:e3:24:b2:26:d3:7c:4c:ad:f9:d7:
         90:7e:66:73:57:97:cc:32:00:d7:d4:16:27:42:10:54:e8:22:
         5b:bb:ab:e9:11:b9:29:df:2f:39:b7:bc:ac:76:60:11:93:55:
         95:4b:63:8a:b0:0b:9a:47:cc:cd:c1:74:62:a9:ba:52:b2:30:
         2c:af:71:0c:36:4c:15:6b:0b:a7:bd:10:57:fd:47:93:4d:31:
         19:87:a4:4d:7a:b1:21:1b:d2:c5:f7:19:e5:c8:2f:1f:43:08:
         5d:ae:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:20 2026 by rpki-client