Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
File:                     FA9003D2D76B11F095EF502678D3641D.roa (raw, json)
Hash identifier:          lTioF3NNwOrm4Tz3PBkQrTdyGh1gsMsIDRrDa6o4vMk=
Subject key identifier:   FF:E7:F0:2E:58:0D:EF:6A:9D:94:3A:07:B7:C9:6D:B7:D8:3C:B7:67
Certificate issuer:       /CN=A9167F95/serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
Certificate serial:       BD
Authority key identifier: A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa
Signing time:             Sun 01 Mar 2026 16:19:33 +0000
ROA not before:           Fri 12 Dec 2025 15:05:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153755
IP address blocks:        163.223.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl
                          rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F95, serialNumber=A83BCF6DB288E96470D34D18AFB3E4A812791867
        Validity
            Not Before: Dec 12 15:05:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46715-171a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b2:43:c8:90:e3:60:29:fb:8e:a8:8e:ae:c3:
                    72:54:39:4f:d4:18:f2:be:6e:93:2a:95:73:8b:1c:
                    09:7d:7f:ee:29:ef:89:19:ad:ac:bd:cd:f8:e2:a6:
                    bd:82:e5:6c:ad:ba:91:37:88:05:f4:4e:6f:f1:dd:
                    e6:6a:78:5c:7d:b4:16:f1:94:df:13:99:d8:7c:85:
                    5e:eb:08:9f:c6:e1:07:a8:83:ae:71:58:e7:94:fc:
                    93:1a:11:db:07:a0:a9:e4:3c:ff:bc:be:87:7e:d5:
                    c0:c1:a3:50:a9:ea:8b:a3:b5:e7:31:73:3d:21:3c:
                    3c:d3:2d:c2:76:3f:d0:7f:9b:09:7d:6e:78:92:8e:
                    6b:fb:c5:f1:21:1c:51:d5:f4:6f:15:a7:cb:9b:3f:
                    72:8b:0a:bd:46:57:f5:23:ee:09:af:03:b6:ee:8a:
                    1b:c9:50:46:a5:63:28:36:19:5e:1e:4d:12:53:64:
                    a2:08:2c:e3:16:72:f3:a9:15:23:bd:17:18:f6:fb:
                    54:9a:f3:18:81:6b:2c:a6:89:23:72:e1:9d:f9:39:
                    aa:d4:d2:a2:6e:2b:cf:b2:c6:48:9a:88:8c:5a:15:
                    d1:c7:21:97:15:7a:86:84:c9:8d:b5:e7:eb:e6:b6:
                    82:0f:4d:04:d2:2d:e4:b6:d6:26:e6:89:20:5d:9c:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E7:F0:2E:58:0D:EF:6A:9D:94:3A:07:B7:C9:6D:B7:D8:3C:B7:67
            X509v3 Authority Key Identifier:
                keyid:A8:3B:CF:6D:B2:88:E9:64:70:D3:4D:18:AF:B3:E4:A8:12:79:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/qDvPbbKI6WRw000Yr7PkqBJ5GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDvPbbKI6WRw000Yr7PkqBJ5GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F95/7D33FD3812E711F0BDB9454DC4F9AE02/FA9003D2D76B11F095EF502678D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:35:ba:13:ef:a4:1f:9a:96:47:49:18:2b:73:c0:67:f2:53:
         0a:bb:c6:8a:01:d0:ab:87:d9:ec:a7:d3:e0:a1:f7:c8:0e:5b:
         9d:c8:00:42:6a:a4:72:f7:42:81:43:cc:7a:4c:df:8a:d0:6c:
         b6:de:82:db:ea:a1:aa:50:57:a6:97:f3:98:0a:fd:e1:83:4e:
         b0:ae:f1:be:33:9d:ac:50:b6:0c:22:dd:c2:09:40:de:89:77:
         cd:61:02:ca:6b:49:61:76:b9:89:f8:ba:1a:ea:73:4a:74:6e:
         f6:23:ec:cf:e0:42:fc:5f:37:90:3f:12:c7:18:fd:72:a3:84:
         25:fe:ba:32:a1:46:13:08:1c:e5:1c:67:98:d2:2b:f7:a5:9e:
         16:ed:5b:59:08:37:44:b6:fb:f7:4d:80:cd:5f:c2:a4:8a:bb:
         ff:29:f5:ff:75:da:50:ee:cc:be:5c:64:48:34:21:45:75:cf:
         2d:d3:41:11:40:0a:67:c0:89:ba:21:4c:fd:8a:b2:f1:10:e0:
         48:45:31:d1:d7:ff:7b:f2:5d:1c:80:a4:ce:9a:cb:3c:4e:fb:
         7c:f5:30:70:f9:e7:6f:7c:48:1e:b6:b9:79:66:81:42:44:78:
         4f:1c:85:4c:4a:f0:f8:13:0b:df:cb:9c:df:48:d2:80:4e:62:
         3f:f5:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:56 2026 by rpki-client