Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
File:                     DE917E7016C511F085B4FF6FC4F9AE02.roa (raw, json)
Hash identifier:          92OvboQnu0AfbGHnNVWc8k1x0nqYtBas1dH8qeWSNlE=
Subject key identifier:   7D:46:A4:53:52:33:E9:DA:56:8E:E1:54:AC:A4:8D:18:A7:C6:23:B5
Certificate issuer:       /CN=A915B551/serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
Certificate serial:       A5
Authority key identifier: 2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:02:37 +0000
ROA not before:           Fri 11 Apr 2025 11:12:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153738
IP address blocks:        163.223.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl
                          rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B551, serialNumber=2FDD3804D6458EAF1CB3917B5E332FBA5C715F91
        Validity
            Not Before: Apr 11 11:12:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e48d-19ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5a:de:af:25:94:39:eb:92:0b:3b:27:d8:d3:
                    2a:db:ae:95:6f:f3:93:67:d1:92:aa:27:6c:99:13:
                    b0:c6:3a:e5:e9:c6:2b:26:50:a7:cf:1f:f3:88:93:
                    29:4b:79:a2:6e:4e:4e:83:9a:56:f7:8f:a9:b7:96:
                    10:f8:9c:7c:de:60:97:a0:0a:96:2d:d4:75:96:a8:
                    9b:58:f0:7d:e2:b9:93:63:cb:da:6f:ec:9d:dd:e9:
                    f8:98:41:a0:89:47:2d:57:d0:34:48:82:ac:bc:87:
                    16:17:53:95:6d:42:ca:7d:32:20:c4:e7:3f:b2:36:
                    e1:ce:a0:dd:e6:c5:a6:8d:49:d2:b6:b1:b0:97:58:
                    29:65:97:db:7a:ba:03:b9:1c:00:2a:95:62:c8:65:
                    42:28:78:a4:49:80:6e:be:02:46:ff:2b:b2:21:a5:
                    f3:f9:07:14:67:b3:eb:fc:72:dc:6a:99:a8:b8:66:
                    fb:dc:5b:cb:16:52:4f:26:4b:2e:63:68:e5:27:89:
                    45:2c:09:c2:5f:a3:e7:3a:5d:7f:3d:a3:7f:ab:f5:
                    9b:ac:53:6e:ca:16:a1:7e:b9:a7:5b:75:b0:69:7f:
                    0b:8e:4f:46:b7:09:3b:75:b3:36:7e:4a:34:22:aa:
                    af:2f:92:e1:2e:cc:dd:0c:47:13:26:92:63:cd:ed:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:46:A4:53:52:33:E9:DA:56:8E:E1:54:AC:A4:8D:18:A7:C6:23:B5
            X509v3 Authority Key Identifier:
                keyid:2F:DD:38:04:D6:45:8E:AF:1C:B3:91:7B:5E:33:2F:BA:5C:71:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/L904BNZFjq8cs5F7XjMvulxxX5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L904BNZFjq8cs5F7XjMvulxxX5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B551/5AB1920216C511F08815F46EC4F9AE02/DE917E7016C511F085B4FF6FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:f5:bb:56:27:f3:0b:c4:4c:e3:26:55:b5:bf:db:e7:61:
         a1:a9:7c:c5:7e:7f:4a:71:82:a9:e6:59:e0:5b:4e:98:8a:0c:
         36:ff:ee:c7:8e:a7:ca:c6:82:ab:10:0f:c8:97:2d:50:a2:4b:
         88:51:03:35:a1:69:e6:d1:cd:44:7f:d5:cd:f7:e9:bd:24:93:
         31:b6:c0:05:23:21:7e:54:5c:c1:20:f6:3d:1a:82:92:f9:65:
         79:7c:27:d0:c0:dc:77:a1:f5:8d:f1:e3:25:ad:29:b2:99:30:
         3a:94:0a:98:b4:72:90:31:6c:91:f4:0c:35:fe:bf:b8:a6:86:
         6c:d6:55:f1:5e:18:d6:b5:fd:ff:d1:ee:f0:61:11:cb:e8:b7:
         2c:3a:ef:9e:ec:17:95:3c:e0:6b:f3:d0:7e:8d:b0:40:97:2f:
         8e:b6:db:cf:e9:d0:12:5b:9d:d1:c0:78:c0:40:9b:30:8b:d2:
         cb:c6:60:02:ab:68:2b:2c:7e:38:ca:c8:e1:31:df:b4:d3:b7:
         4f:cd:f2:32:cc:a3:fa:a1:fa:f0:23:68:2b:2b:39:b1:bd:1c:
         f4:01:0b:0b:4d:b0:c9:c5:f3:4e:44:5e:07:76:0a:eb:e0:a4:
         88:53:48:5d:80:8d:42:5b:0a:56:2d:6c:72:a3:f2:0c:8f:68:
         e2:9d:36:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:25 2026 by rpki-client