Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/04FD874E1FDF11F094B3136AC4F9AE02.roa
File:                     04FD874E1FDF11F094B3136AC4F9AE02.roa (raw, json)
Hash identifier:          FnYin0UiwJQP6hi7lM7gz0Ixigka5o2aszBJSr3nCik=
Subject key identifier:   B5:57:BD:94:52:79:23:98:D2:34:C5:3A:14:48:6C:17:75:D8:36:32
Certificate issuer:       /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial:       9F
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/04FD874E1FDF11F094B3136AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:22 +0000
ROA not before:           Wed 23 Apr 2025 01:05:17 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153793
IP address blocks:        163.227.101.0/24 maxlen: 24
                          2001:df5:6440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
        Validity
            Not Before: Apr 23 01:05:17 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e4ba-8423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:d6:1e:81:57:e4:3f:01:dd:aa:41:6d:ec:
                    65:72:1f:ee:a9:52:1d:d5:3b:93:1e:7d:a5:6c:88:
                    d1:7d:90:e1:01:88:65:27:8f:18:3d:25:b4:af:7c:
                    bf:d9:3d:94:98:6a:fa:b4:23:a5:4d:e5:c8:5e:a5:
                    d5:f5:c3:fa:5f:57:ac:61:d7:f0:85:c8:88:f3:21:
                    68:90:f2:97:ff:95:e2:3c:d7:55:b1:99:8c:94:a8:
                    5c:10:3a:83:98:bb:6a:14:90:47:d7:96:28:f6:7f:
                    34:d2:1f:40:05:bb:48:50:80:33:67:54:0f:44:1f:
                    62:c7:96:13:10:c9:e6:54:da:56:b0:46:5e:4c:03:
                    f6:7c:9e:4b:f9:8d:23:41:f3:e1:51:5e:a0:7d:89:
                    f7:67:85:73:db:0b:4b:05:3e:5c:58:e9:d5:a4:3f:
                    c3:cf:b0:d1:74:fb:b1:47:e6:d3:ec:4d:81:92:f2:
                    ae:4b:61:cb:4e:09:7f:8d:c6:ba:d5:67:46:ef:5d:
                    d7:4f:f7:72:fc:cf:1b:99:2f:26:de:0c:fd:6c:8f:
                    50:90:56:19:ac:a9:f3:3f:bd:64:25:f0:8e:1b:15:
                    58:d9:7d:8d:0f:76:25:91:29:f6:f9:df:a6:55:0a:
                    f5:cf:50:36:6b:dc:b3:5a:86:c6:56:08:6b:72:cc:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:57:BD:94:52:79:23:98:D2:34:C5:3A:14:48:6C:17:75:D8:36:32
            X509v3 Authority Key Identifier:
                keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/04FD874E1FDF11F094B3136AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.101.0/24
                IPv6:
                  2001:df5:6440::/48

    Signature Algorithm: sha256WithRSAEncryption
         cd:27:a7:0b:d7:ed:4a:f0:54:a7:a7:a4:69:71:58:d1:27:b4:
         f0:b9:cc:77:b0:1c:8e:2d:2d:da:54:19:d3:66:60:cf:36:55:
         f0:f2:ea:f3:68:60:d2:c8:56:b6:0c:45:49:e3:75:fb:7c:75:
         df:7f:73:3f:8b:40:44:fc:9f:9f:9d:ea:c3:4c:5e:1b:e0:46:
         88:a6:a9:2b:13:15:86:0c:7c:b5:6b:e8:11:a9:df:39:55:f5:
         bc:60:72:70:fe:6d:2d:da:de:18:21:d8:5f:58:c7:e0:4e:04:
         c0:f0:80:3b:0b:76:bc:1a:d0:52:bf:a4:55:66:96:ad:e1:d3:
         a6:3a:16:ef:b0:a0:c8:20:d5:a5:22:a3:96:36:9e:54:b6:34:
         a0:8a:0b:0f:11:6d:3f:54:2f:48:ed:a9:d0:47:fd:98:86:24:
         88:15:cf:cc:c6:04:de:31:50:b0:9e:fb:f1:80:95:a8:b0:55:
         c6:97:b6:f4:fe:44:4c:aa:01:c7:fa:11:2a:4a:7f:5f:dc:19:
         d4:e8:46:c6:67:96:c1:eb:bb:ae:79:5b:d0:7b:d2:2c:4f:76:
         4c:00:ad:1e:9b:2a:82:03:73:ec:a6:b7:50:a5:48:30:a7:2e:
         0a:35:bc:99:59:45:3c:a5:90:a2:f5:d5:7f:25:b8:89:45:82:
         c5:3f:79:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:24 2026 by rpki-client