Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/04FD874E1FDF11F094B3136AC4F9AE02.roa
File:                     04FD874E1FDF11F094B3136AC4F9AE02.roa (raw, json)
Hash identifier:          ytK8wWdrYPra1E/l8xXWI1AT8E/6aAB7MEKN1b5tfbY=
Subject key identifier:   94:ED:6B:BE:49:95:C5:0B:80:B7:17:B9:CE:EA:77:4D:FC:4C:35:4E
Certificate issuer:       /CN=A9146EB7/serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
Certificate serial:       D3
Authority key identifier: 80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/04FD874E1FDF11F094B3136AC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:38:39 +0000
ROA not before:           Fri 05 Jun 2026 07:38:39 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153793
IP address blocks:        163.227.101.0/24 maxlen: 24
                          2001:df5:6440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146EB7, serialNumber=805AAA36C017E9E86C3032A3DAAE8D268BDD4254
        Validity
            Not Before: Jun  5 07:38:39 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a227cff-4434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:b6:a0:dc:45:20:fc:7a:c6:da:3f:89:53:
                    39:1b:5c:ad:be:ef:ba:89:47:6a:9f:d6:48:bb:8e:
                    5f:f9:68:88:54:eb:cb:d9:08:91:81:9b:bd:08:4f:
                    d3:87:9f:d3:cd:e3:f8:de:db:62:e5:ca:0c:f9:17:
                    0b:d3:a5:36:86:d6:29:a3:74:fc:12:8c:0c:d2:63:
                    81:0c:d6:5e:8e:f5:96:95:9a:09:59:25:be:d0:f0:
                    20:0c:aa:7b:85:6c:0f:18:fc:5a:ce:cb:e5:54:db:
                    9a:24:dd:54:c1:7a:d8:c9:f7:2c:3e:60:dc:b8:29:
                    e3:cd:64:4b:af:d1:98:f3:8a:f2:42:5e:b9:38:13:
                    71:a4:4a:51:43:e0:de:b0:de:37:2b:85:05:9f:f1:
                    4c:c7:91:b7:d4:02:2e:58:54:dd:d0:fc:1f:bd:e5:
                    89:f1:aa:10:00:21:f7:0c:e2:24:34:04:21:2c:f9:
                    18:32:bd:ab:c0:2e:0a:c3:0b:71:b6:f1:12:43:33:
                    44:f3:52:8b:70:ae:ba:3c:72:e1:dc:39:34:46:b4:
                    ec:e7:a2:b2:6e:b7:ef:11:62:e5:cb:7d:b6:f2:35:
                    f6:a4:da:c5:06:1d:8c:94:d0:c2:02:d5:32:82:a9:
                    2a:3b:32:ba:47:e9:81:1b:46:f6:8c:25:b0:91:01:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:6B:BE:49:95:C5:0B:80:B7:17:B9:CE:EA:77:4D:FC:4C:35:4E
            X509v3 Authority Key Identifier:
                keyid:80:5A:AA:36:C0:17:E9:E8:6C:30:32:A3:DA:AE:8D:26:8B:DD:42:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/gFqqNsAX6ehsMDKj2q6NJovdQlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gFqqNsAX6ehsMDKj2q6NJovdQlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146EB7/831A842A1FDE11F0B9654717C4F9AE02/04FD874E1FDF11F094B3136AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.101.0/24
                IPv6:
                  2001:df5:6440::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:ce:32:1d:d3:33:4a:75:a0:a2:fd:97:a1:bf:1e:a0:dd:45:
         c1:86:f9:ed:e9:e2:86:48:d2:60:48:54:06:82:cb:5b:54:97:
         e5:4c:c9:a3:58:dc:e6:1d:c1:1c:7e:8c:9b:e7:dd:f6:51:23:
         a3:55:dd:64:81:6b:f5:38:5b:9d:5c:2a:01:73:5e:7c:7e:fa:
         83:d9:df:21:1a:42:e6:7b:af:e6:25:de:14:49:4b:87:2d:26:
         e9:45:ce:c8:4b:9e:b4:ce:ef:f2:21:a2:ad:e2:c0:c4:ed:e6:
         9d:8f:84:08:f7:ee:ac:3a:76:a8:d0:9c:71:2a:e6:39:97:a7:
         aa:f5:c5:98:74:26:e8:73:03:fe:06:e4:fe:a5:89:2c:a1:7d:
         27:2a:25:89:3f:c1:fa:d6:20:f0:5e:2a:7c:83:ee:04:71:2f:
         0d:92:c9:b2:01:a4:07:26:26:c5:e5:a2:50:c6:94:8a:04:34:
         34:b2:3d:9f:c1:eb:c6:10:a7:56:55:24:9d:0c:48:4a:cc:15:
         87:af:0f:46:5c:c7:71:0e:72:2d:63:d5:96:44:a3:12:86:36:
         aa:53:f9:34:62:94:f0:2a:70:62:7e:af:be:cd:ad:ba:07:af:
         98:25:b4:f0:4b:a2:b7:5f:e3:b8:75:0d:cb:2e:a9:32:19:c7:
         ef:cb:51:41
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZFQjcxMTAvBgNVBAUTKDgwNUFBQTM2QzAxN0U5RTg2QzMwMzJBM0RBQUU4RDI2
OEJERDQyNTQwHhcNMjYwNjA1MDczODM5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTIyN2NmZi00NDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnLi2oNxFIPx6xto/iVM5G1ytvu+6iUdqn9ZIu45f+WiIVOvL2QiRgZu9CE/T
h5/TzeP43tti5coM+RcL06U2htYpo3T8EowM0mOBDNZejvWWlZoJWSW+0PAgDKp7
hWwPGPxazsvlVNuaJN1UwXrYyfcsPmDcuCnjzWRLr9GY84ryQl65OBNxpEpRQ+De
sN43K4UFn/FMx5G31AIuWFTd0PwfveWJ8aoQACH3DOIkNAQhLPkYMr2rwC4Kwwtx
tvESQzNE81KLcK66PHLh3Dk0RrTs56KybrfvEWLly3228jX2pNrFBh2MlNDCAtUy
gqkqOzK6R+mBG0b2jCWwkQFk4QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJTta75J
lcULgLcXuc7qd038TDVOMB8GA1UdIwQYMBaAFIBaqjbAF+nobDAyo9qujSaL3UJU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkVCNy84MzFBODQyQTFG
REUxMUYwQjk2NTQ3MTdDNEY5QUUwMi9nRnFxTnNBWDZlaHNNREtqMnE2TkpvdmRR
bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dGcXFOc0FYNmVoc01ES2oycTZOSm92ZFFsUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDZFQjcvODMxQTg0MkExRkRFMTFGMEI5NjU0NzE3QzRGOUFFMDIvMDRGRDg3NEUx
RkRGMTFGMDk0QjMxMzZBQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQAo+NlMA8EAgACMAkDBwAgAQ31ZEAwDQYJKoZIhvcNAQELBQADggEB
AJLOMh3TM0p1oKL9l6G/HqDdRcGG+e3p4oZI0mBIVAaCy1tUl+VMyaNY3OYdwRx+
jJvn3fZRI6NV3WSBa/U4W51cKgFzXnx++oPZ3yEaQuZ7r+Yl3hRJS4ctJulFzshL
nrTO7/Ihoq3iwMTt5p2PhAj37qw6dqjQnHEq5jmXp6r1xZh0JuhzA/4G5P6liSyh
fScqJYk/wfrWIPBeKnyD7gRxLw2SybIBpAcmJsXlolDGlIoENDSyPZ/B68YQp1ZV
JJ0MSErMFYevD0Zcx3EOci1j1ZZEoxKGNqpT+TRilPAqcGJ+r77NrboHr5gltPBL
ordf47h1DcsuqTIZx+/LUUE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:55 2026 by rpki-client