Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/73667C2ED76B11F09495728677D3641D.roa
File:                     73667C2ED76B11F09495728677D3641D.roa (raw, json)
Hash identifier:          2Tj5hzFvoJCRrQMRxhtl/1QUyJ76MVlUsJwInbigzME=
Subject key identifier:   7E:2E:3D:A1:DC:70:89:B2:71:B5:62:B4:3E:92:E2:7F:E6:14:78:91
Certificate issuer:       /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial:       D4
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/73667C2ED76B11F09495728677D3641D.roa
Signing time:             Tue 07 Apr 2026 06:43:28 +0000
ROA not before:           Tue 07 Apr 2026 06:43:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     147181
IP address blocks:        163.223.240.0/24 maxlen: 24
                          2001:df5:5140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
                          rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
        Validity
            Not Before: Apr  7 06:43:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69d4a790-31d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:a9:1f:a7:5f:64:20:43:d5:71:41:93:66:
                    ff:bd:ce:96:89:10:49:e4:db:96:b7:5b:93:e0:02:
                    83:d3:c3:f2:d9:be:f7:1f:01:86:b4:76:81:97:97:
                    6a:a0:34:cf:db:4c:d7:82:65:a6:ef:7f:7b:11:23:
                    68:b8:23:e3:32:83:f4:ae:02:54:a5:b6:b6:df:b7:
                    8e:a0:65:69:2a:5c:39:72:22:5f:34:36:a7:0f:f9:
                    8e:d8:be:1a:7f:a7:20:7f:67:64:e6:49:af:83:f7:
                    df:e0:fa:1a:2a:10:2f:db:39:b3:3f:ab:13:6a:bf:
                    43:7a:be:c1:e5:2a:2d:6f:12:6c:3e:ca:b2:a5:61:
                    46:f6:97:cd:b2:63:1c:2a:3b:54:1e:54:c1:e8:2f:
                    53:6f:99:3b:15:bb:7a:9e:f4:d3:f6:e5:95:c2:2b:
                    32:09:7a:37:69:23:93:cf:27:c3:06:30:e2:f3:a7:
                    cb:c1:89:ba:21:c0:dd:eb:96:70:c7:4c:97:ac:e8:
                    ca:0a:a7:90:aa:39:9a:90:7c:7c:ae:b4:3b:f8:ef:
                    43:9e:9f:41:b5:b4:f0:dd:9e:ca:dd:79:9d:ed:0d:
                    26:66:98:7a:91:5c:58:3b:74:2f:db:54:e0:7c:bb:
                    b7:f9:9b:d6:ff:23:c9:72:6a:e6:c6:02:51:36:83:
                    0a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:2E:3D:A1:DC:70:89:B2:71:B5:62:B4:3E:92:E2:7F:E6:14:78:91
            X509v3 Authority Key Identifier:
                keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/73667C2ED76B11F09495728677D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.240.0/24
                IPv6:
                  2001:df5:5140::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:04:d0:76:cb:14:1f:1a:f0:7b:3f:80:2c:d7:af:85:f9:b4:
         97:b3:04:8c:0f:70:43:28:56:a6:58:61:c2:f6:65:16:24:55:
         df:8a:3a:1c:4f:23:51:90:62:56:d6:9b:0e:e9:db:01:aa:5a:
         11:dd:6f:d7:14:37:b7:7d:5c:aa:46:26:c5:28:75:51:d6:99:
         ef:d8:d6:e3:37:83:a4:fb:3d:d8:31:ac:e9:ea:d9:ca:21:d6:
         2f:57:35:0f:03:ff:29:67:4f:93:03:81:91:83:7a:b8:fc:7f:
         80:a1:9a:99:39:7f:43:fb:11:dd:51:d0:3c:65:c1:bd:3c:6c:
         29:5c:4a:fa:88:43:15:a3:0e:78:b5:a9:60:5a:f6:5b:d1:0a:
         f3:e9:3b:de:ad:df:64:12:bf:c0:c2:72:4a:75:0e:56:19:37:
         a7:1d:88:81:3e:bd:fd:f4:ea:e3:11:7d:85:05:40:f9:be:ce:
         57:66:c4:ec:7a:c2:55:9b:2f:84:b1:05:1b:7d:a3:8b:71:5f:
         91:47:c1:5b:02:2c:5e:ea:0a:ec:9e:df:c9:17:40:cb:e8:b1:
         ac:70:66:54:05:79:07:b7:1a:a6:d4:35:bd:47:9e:50:dd:c8:
         05:1a:7c:fb:4b:0f:2b:4b:45:02:a2:d2:fc:ba:96:e6:4e:99:
         0f:99:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:46 2026 by rpki-client