Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
File:                     850105504F3D11F0A0960F7CC4F9AE02.roa (raw, json)
Hash identifier:          qNWHgfJsoNs5L5U5kNXNpJEP/6NUawEmBu4riDVc1MI=
Subject key identifier:   AB:DB:8C:D0:7B:FF:92:D8:37:A9:59:9F:5D:C7:38:50:D7:CE:60:31
Certificate issuer:       /CN=A916156D/serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
Certificate serial:       ED
Authority key identifier: 49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa
Signing time:             Thu 03 Sep 2026 06:56:49 +0000
ROA not before:           Thu 03 Sep 2026 06:56:49 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     153777
IP address blocks:        163.227.61.0/24 maxlen: 24
                          2001:df5:5b40::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl
                          rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 06:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916156D, serialNumber=49DDD1E4C5A9FC766626D2FA3B6637DA80EA2FD2
        Validity
            Not Before: Sep  3 06:56:49 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a991a31-17cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d0:1d:ea:21:21:7c:dc:37:2d:90:03:2e:8a:
                    1b:59:36:a7:92:d1:e7:04:8c:18:ad:c4:03:e6:59:
                    e1:93:37:a6:d7:96:0a:1b:45:18:c3:c0:d2:fc:e3:
                    f0:ea:89:be:37:43:6a:98:55:64:c7:33:64:e2:35:
                    ee:0d:7a:0e:ab:5f:8c:e5:18:ee:2f:98:0e:2c:70:
                    c3:b0:c8:97:71:8a:47:76:d6:6b:5f:86:d6:9f:cf:
                    06:a6:ab:f9:c3:5e:42:1d:0a:f4:25:65:0d:ff:9e:
                    e7:4b:67:af:67:07:0e:95:a9:9f:7f:fc:00:9c:6b:
                    86:33:3f:39:28:79:c9:7f:8c:d7:25:83:23:f3:76:
                    3f:89:85:ad:b0:ed:f5:a1:d2:2d:91:c5:6a:df:28:
                    66:6d:75:a3:59:c9:32:f3:48:4e:a9:5c:ca:f8:5e:
                    70:49:a7:11:e3:a8:13:6a:e9:47:6f:53:a9:48:6a:
                    f7:77:90:8e:a5:03:0e:cd:00:81:a4:ce:39:7f:16:
                    b1:98:8d:3c:fc:aa:3a:30:c6:8a:05:21:db:75:21:
                    38:70:e7:a0:47:1e:0f:e9:57:01:aa:4a:aa:c9:fe:
                    b8:1c:52:d3:5f:81:fc:59:80:e8:51:8d:53:de:a6:
                    1b:38:ba:b3:84:5d:6d:39:cc:84:03:07:fd:f9:aa:
                    87:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:8C:D0:7B:FF:92:D8:37:A9:59:9F:5D:C7:38:50:D7:CE:60:31
            X509v3 Authority Key Identifier:
                keyid:49:DD:D1:E4:C5:A9:FC:76:66:26:D2:FA:3B:66:37:DA:80:EA:2F:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sd3R5MWp_HZmJtL6O2Y32oDqL9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916156D/7CD3DEAC4E8911F0A81C6716C4F9AE02/850105504F3D11F0A0960F7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.61.0/24
                IPv6:
                  2001:df5:5b40::/64

    Signature Algorithm: sha256WithRSAEncryption
         57:4c:52:04:7d:93:66:0f:fe:bc:69:9a:4e:35:f5:67:06:69:
         04:82:90:13:30:ae:44:c3:a9:1d:1f:ac:3f:be:b0:ae:b4:95:
         4c:92:8d:d4:f0:43:d7:d2:3a:26:bd:7a:6f:e1:60:64:42:73:
         50:78:ae:47:99:52:f5:df:aa:98:c5:ab:8f:92:38:36:be:bf:
         08:9c:c0:39:2c:ee:33:ef:3d:e8:02:d6:5d:78:e5:24:ab:2e:
         6f:cc:b6:c2:2c:49:e2:7c:9f:ff:a5:96:3b:46:cb:15:5e:84:
         1c:0d:ed:84:59:d6:f1:a6:e2:d8:8f:0d:20:83:7b:7f:aa:95:
         df:cf:13:f7:34:c3:0d:65:e1:15:70:08:f3:f0:93:0d:22:3b:
         26:c3:50:6a:a4:16:32:da:ef:76:0d:5f:b7:15:69:87:45:e3:
         33:28:95:ed:b2:40:75:0f:13:a1:a3:e4:66:fb:51:e2:6e:9a:
         36:16:9f:32:af:7a:af:29:e6:28:86:74:69:41:dd:5e:65:66:
         c5:b7:d8:76:f5:62:32:26:09:09:4f:2d:ed:2d:cb:ca:f8:cb:
         40:bb:2b:9c:27:86:6a:f3:91:7c:5f:17:d6:6f:dc:0f:01:cb:
         13:eb:25:30:8b:09:a7:0f:d1:d9:b9:06:f8:f6:f6:e6:21:80:
         20:c1:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:28:14 2026 by rpki-client