Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/C028C06E18E211F081A75558C4F9AE02.roa
File:                     C028C06E18E211F081A75558C4F9AE02.roa (raw, json)
Hash identifier:          zKW/ra+nJQMWUbM8Pae8IdbHSNQ3IifmscVyx7k0qbM=
Subject key identifier:   81:42:88:D4:23:9A:4B:9D:52:80:3A:92:F0:B4:28:51:CF:E9:1E:0C
Certificate issuer:       /CN=A9154E3F/serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
Certificate serial:       D0
Authority key identifier: 28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/C028C06E18E211F081A75558C4F9AE02.roa
Signing time:             Tue 19 May 2026 06:40:08 +0000
ROA not before:           Tue 19 May 2026 06:40:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151366
IP address blocks:        163.223.115.0/24 maxlen: 24
                          2401:fde0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl
                          rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154E3F, serialNumber=28BEE70404B2430964C3029290D3EA604C910EB1
        Validity
            Not Before: May 19 06:40:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a0c05c7-c0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:af:ae:e9:1c:d4:8c:53:9e:49:ee:92:24:
                    84:a3:92:d5:f8:0e:b3:c9:ea:be:f4:f6:07:7e:fb:
                    41:36:7d:6d:27:ab:87:c6:13:f9:ef:bd:2f:9e:23:
                    6d:ad:1a:a7:10:f7:cb:32:9d:3d:60:da:88:7c:c7:
                    22:2f:ff:18:3f:d8:cd:ae:40:d6:50:9a:78:de:95:
                    01:86:fc:00:5c:51:68:65:40:61:8a:7f:22:8f:ce:
                    17:13:31:13:3d:5a:79:ef:54:fb:b4:90:1e:0f:58:
                    a5:1e:5f:30:32:25:4d:54:54:a5:a3:fc:7b:65:9d:
                    54:3d:a9:52:a6:7e:2a:41:e2:c3:21:f0:b4:fb:9b:
                    a1:68:54:2d:5a:d9:6c:97:7c:23:45:b9:46:ee:79:
                    0e:4d:3a:d9:6e:2b:7b:e9:96:b0:de:e5:96:9f:f1:
                    f3:3c:c3:36:a0:f6:66:15:a9:27:6d:06:35:e2:6d:
                    f1:57:07:74:f6:b7:e0:02:d4:ed:7e:73:01:94:21:
                    60:57:32:c6:2f:e9:46:8f:4a:e6:30:c2:7f:86:3b:
                    34:19:3e:69:99:0c:c8:d9:ac:dd:dd:e7:19:e5:29:
                    e2:6a:8b:1b:9d:eb:5b:eb:ae:22:50:7b:6d:40:0d:
                    3c:f2:e5:7d:ae:6f:23:d7:47:a5:19:a1:b6:ef:3f:
                    69:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:42:88:D4:23:9A:4B:9D:52:80:3A:92:F0:B4:28:51:CF:E9:1E:0C
            X509v3 Authority Key Identifier:
                keyid:28:BE:E7:04:04:B2:43:09:64:C3:02:92:90:D3:EA:60:4C:91:0E:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/KL7nBASyQwlkwwKSkNPqYEyRDrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KL7nBASyQwlkwwKSkNPqYEyRDrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154E3F/3C3E620E18E211F09BE99557C4F9AE02/C028C06E18E211F081A75558C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.115.0/24
                IPv6:
                  2401:fde0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:e5:9a:28:0f:8f:3f:16:c0:ab:ae:44:ba:9a:c6:e1:29:52:
         e5:0d:66:9e:da:64:a8:7b:01:0f:eb:ce:40:ca:5a:d4:3f:3e:
         83:54:54:81:ad:24:57:15:fb:91:85:cc:b7:67:c9:d1:18:02:
         06:8b:f7:e6:ce:75:c0:d1:2a:f1:cf:8f:1b:5d:af:66:42:28:
         82:51:26:b3:13:7c:9d:cb:7d:59:02:1c:77:c3:56:08:5b:16:
         fb:0a:a5:d2:2e:aa:64:2a:50:84:df:e6:8b:56:7c:43:ca:82:
         cc:79:e3:0b:d0:4c:b6:3a:6a:84:c3:80:3b:30:af:9e:50:f2:
         ad:60:56:cf:67:41:e6:8d:49:1a:c3:59:2e:e3:88:38:07:d5:
         c6:7f:7a:aa:08:ae:9b:67:56:16:7a:f6:e8:d1:f8:17:6f:76:
         22:3a:51:bb:07:d2:f2:06:2d:0c:fe:63:9e:3e:d5:e1:51:76:
         cb:7d:fb:8c:8f:85:d7:51:a1:7e:2f:6c:42:4e:b4:98:18:4f:
         75:97:bc:2d:f5:d5:5a:d1:b4:44:0f:d5:d2:24:84:b3:92:46:
         fd:84:3d:39:33:e6:44:85:11:08:3b:e5:45:9c:9f:e3:77:f7:
         52:ca:91:04:24:ea:ac:32:30:6f:23:5c:93:97:54:a2:88:e9:
         13:83:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:31 2026 by rpki-client