Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/D7605790272B11F08FF39632C4F9AE02.roa
File:                     D7605790272B11F08FF39632C4F9AE02.roa (raw, json)
Hash identifier:          s7nSBZgEuguHKvA0dP2uzOfAKKoPu7zIrIxCHfZMzCU=
Subject key identifier:   DB:B7:EA:28:4D:3D:BD:16:04:37:89:58:5E:8C:54:2A:E1:98:3E:E7
Certificate issuer:       /CN=A915CE6F/serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
Certificate serial:       B9
Authority key identifier: 1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/D7605790272B11F08FF39632C4F9AE02.roa
Signing time:             Mon 13 Apr 2026 07:43:43 +0000
ROA not before:           Mon 13 Apr 2026 07:43:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153695
IP address blocks:        163.223.110.0/23 maxlen: 23
                          163.223.110.0/24 maxlen: 24
                          163.223.111.0/24 maxlen: 24
                          2001:df5:3c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl
                          rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CE6F, serialNumber=1B1AF1835106C9339ADD3145E900B06FDA9E56E7
        Validity
            Not Before: Apr 13 07:43:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69dc9eaf-1682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:b6:ef:ad:30:2b:12:c8:92:06:8b:0d:4e:
                    f7:f6:72:40:e2:44:94:ff:d8:35:eb:58:e3:e9:5e:
                    8d:cd:28:e4:26:2f:55:a7:64:b8:c0:73:32:11:4a:
                    bd:dc:36:b5:7f:33:38:69:2f:bb:24:85:a5:b7:97:
                    10:84:8f:ca:b9:8f:04:b3:ba:5e:f7:7c:31:cb:61:
                    30:f0:78:b8:8e:ac:54:2a:67:04:24:f8:d4:b4:ce:
                    b8:a8:cb:45:bc:80:42:23:0d:d1:6b:a8:92:7f:0c:
                    4a:85:7c:99:7a:46:a7:9e:73:bd:c6:e9:02:a2:91:
                    ae:36:b4:8c:1e:1b:b5:69:70:44:54:ff:45:59:db:
                    3b:78:35:11:6e:30:dc:62:0b:0d:c7:ef:2a:b4:0a:
                    f0:1c:93:14:29:f9:d9:26:27:20:97:f2:56:2d:89:
                    34:f3:b5:4e:81:51:68:1d:32:8d:ff:44:cf:2d:1a:
                    28:63:0f:3e:11:0b:d8:4b:09:f6:27:e7:0b:db:71:
                    49:bd:8d:93:ab:ae:4f:85:b3:42:26:67:5d:64:09:
                    d5:8c:13:f8:95:8d:9a:54:1e:80:60:45:b7:50:20:
                    5b:b4:ee:3d:2d:22:84:b9:6f:0d:26:4f:05:98:7e:
                    67:bd:7e:d8:98:c8:65:12:bf:bc:1e:27:45:ec:55:
                    98:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B7:EA:28:4D:3D:BD:16:04:37:89:58:5E:8C:54:2A:E1:98:3E:E7
            X509v3 Authority Key Identifier:
                keyid:1B:1A:F1:83:51:06:C9:33:9A:DD:31:45:E9:00:B0:6F:DA:9E:56:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gxrxg1EGyTOa3TFF6QCwb9qeVuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE6F/2D1817B4272B11F0A0C6744DC4F9AE02/D7605790272B11F08FF39632C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.110.0/23
                IPv6:
                  2001:df5:3c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:8b:e8:2f:5a:e4:fb:ea:8e:38:73:8d:14:0c:96:85:d9:78:
         71:5a:06:8c:b2:c6:ca:92:e1:7d:2d:4f:9a:2f:59:e5:cf:c7:
         14:dd:ed:7a:25:c4:49:10:08:be:7a:f6:75:8b:55:9e:3a:ad:
         c3:86:ee:ac:54:30:b4:2b:1f:46:9a:10:50:77:47:c7:ec:eb:
         36:15:63:7a:16:60:bd:be:81:48:65:90:97:af:64:61:a9:c6:
         c3:2f:04:1e:ee:70:92:36:5c:bd:c5:8f:51:4e:6b:54:fd:ac:
         ce:87:ab:c5:da:99:88:7a:36:e2:a4:ce:1c:57:13:17:b8:10:
         0b:76:e4:d2:66:d0:de:dc:7a:04:89:e8:44:09:10:56:c9:cb:
         86:b0:12:a7:66:16:f1:92:4c:82:87:80:68:5e:e4:33:bd:d4:
         d2:13:47:21:9b:b0:f0:5b:3e:ea:ac:6b:94:1b:db:85:e7:17:
         07:87:eb:66:81:0c:29:19:24:57:c4:42:72:51:8c:82:4c:d2:
         6f:49:fb:b8:a4:b5:01:ad:39:98:50:06:a6:a8:cb:1e:b3:a8:
         88:f7:13:be:42:07:0e:34:87:a3:59:6c:47:bd:6f:b4:d8:ea:
         14:e9:17:21:51:90:68:2c:ce:b9:a5:59:47:78:15:c3:31:ea:
         c4:b5:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:20 2026 by rpki-client