Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/9C40745A86F911F0AC1F5922C4F9AE02.roa
File:                     9C40745A86F911F0AC1F5922C4F9AE02.roa (raw, json)
Hash identifier:          dKDu7pxUPd5tlpeTg3pKXtSeGag27K78gfIOJikK4MM=
Subject key identifier:   06:46:D4:69:C5:97:74:80:17:A1:B1:E7:33:A9:DA:B6:08:68:69:0E
Certificate issuer:       /CN=A916C832/serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
Certificate serial:       A3
Authority key identifier: ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/9C40745A86F911F0AC1F5922C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:08:02 +0000
ROA not before:           Mon 01 Sep 2025 06:05:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl
                          rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C832, serialNumber=ED41CDF887B7DE2F5C201BE8814F1E8DF3D0201F
        Validity
            Not Before: Sep  1 06:05:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f3e2-d253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:1f:92:94:7f:53:80:ad:a8:0a:5e:87:b9:
                    a6:9d:f5:e5:99:e1:a5:e6:10:27:3a:37:0a:8b:f9:
                    e6:f6:51:86:e7:af:45:91:3f:ae:66:a5:3c:c6:f0:
                    d5:0e:b1:8e:3b:dd:6f:36:9d:51:61:2d:f7:d2:0b:
                    ec:d7:a0:12:4d:2a:19:fb:a0:40:4f:7d:f2:4e:1a:
                    39:6a:fc:20:57:2b:dc:da:2f:43:60:1d:d8:3e:4e:
                    16:8b:2a:b1:84:d4:50:27:b2:0d:53:a1:e1:c1:4d:
                    32:01:ac:75:ea:99:df:10:c1:7e:2c:a5:5b:14:f0:
                    2f:42:50:8f:de:94:0c:98:58:4e:19:f9:6a:79:18:
                    44:bc:ec:9f:d8:28:09:45:83:40:0d:41:a3:72:05:
                    3d:1b:fb:58:e8:e4:93:41:09:a0:6e:20:f0:9e:44:
                    f0:17:5f:b8:8f:4f:d6:96:40:3f:d2:92:f4:39:17:
                    0e:e0:3c:96:87:a4:dd:e9:c1:6e:fe:4a:e6:8f:a5:
                    6f:11:68:d5:3b:35:cd:ba:8a:0e:73:d4:93:30:e3:
                    7c:0a:15:2d:7b:25:23:58:1d:42:4c:54:0a:bf:35:
                    79:b5:3c:9e:38:55:7d:34:78:2a:8a:34:59:1b:73:
                    56:46:2c:ad:8b:e8:49:6b:46:42:21:08:7e:d8:f0:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:46:D4:69:C5:97:74:80:17:A1:B1:E7:33:A9:DA:B6:08:68:69:0E
            X509v3 Authority Key Identifier:
                keyid:ED:41:CD:F8:87:B7:DE:2F:5C:20:1B:E8:81:4F:1E:8D:F3:D0:20:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/7UHN-Ie33i9cIBvogU8ejfPQIB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7UHN-Ie33i9cIBvogU8ejfPQIB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C832/5B6180601E6111F0934F6F74C4F9AE02/9C40745A86F911F0AC1F5922C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:d7:3a:38:de:8a:6b:57:91:00:5e:df:bc:f0:c0:3a:06:
         29:50:7e:50:4a:4f:bb:23:ab:40:b9:b1:a0:03:b5:3b:bd:7f:
         4e:78:a8:48:f6:0f:54:50:73:1d:eb:d8:ed:70:ad:f7:96:ac:
         71:ec:d2:62:54:c4:ff:ff:89:5d:6f:4c:73:7a:ac:0e:60:b3:
         55:1f:2f:26:f7:9f:34:1b:75:b1:96:93:9e:d6:c0:43:00:ef:
         6c:af:84:f1:30:76:ab:38:09:22:00:a8:44:90:6f:c4:33:9f:
         0d:db:9f:b5:e9:c4:b7:5d:d0:5c:15:90:cb:3a:70:05:ce:5f:
         24:5e:f8:4d:65:7d:a0:04:14:dd:e1:36:72:3a:d3:51:78:c9:
         24:7b:51:f8:e2:9c:69:ab:ec:39:c4:10:77:3f:fa:3e:67:dc:
         15:20:ef:f4:34:f9:88:ec:15:3e:05:d0:2f:eb:8f:78:97:8f:
         61:84:32:9d:a0:72:19:39:97:fc:15:bd:81:3d:26:c7:20:31:
         d3:cb:77:95:ca:26:9f:25:4b:72:ce:db:a2:e1:bb:66:86:8a:
         3e:92:a1:40:40:1d:b5:61:a1:8e:90:a2:54:94:21:b1:68:f3:
         d0:94:16:b7:70:96:9f:d0:bc:49:3b:4d:9c:56:ee:fd:ad:84:
         1c:fb:d4:d7
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4MzIxMTAvBgNVBAUTKEVENDFDREY4ODdCN0RFMkY1QzIwMUJFODgxNEYxRThE
RjNEMDIwMUYwHhcNMjUwOTAxMDYwNTA4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjNlMi1kMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2gfkpR/U4CtqApeh7mmnfXlmeGl5hAnOjcKi/nm9lGG569FkT+uZqU8xvDV
DrGOO91vNp1RYS330gvs16ASTSoZ+6BAT33yTho5avwgVyvc2i9DYB3YPk4Wiyqx
hNRQJ7INU6HhwU0yAax16pnfEMF+LKVbFPAvQlCP3pQMmFhOGflqeRhEvOyf2CgJ
RYNADUGjcgU9G/tY6OSTQQmgbiDwnkTwF1+4j0/WlkA/0pL0ORcO4DyWh6Td6cFu
/krmj6VvEWjVOzXNuooOc9STMON8ChUteyUjWB1CTFQKvzV5tTyeOFV9NHgqijRZ
G3NWRiyti+hJa0ZCIQh+2PCdswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAZG1GnF
l3SAF6Gx5zOp2rYIaGkOMB8GA1UdIwQYMBaAFO1BzfiHt94vXCAb6IFPHo3z0CAf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzMi81QjYxODA2MDFF
NjExMUYwOTM0RjZGNzRDNEY5QUUwMi83VUhOLUllMzNpOWNJQnZvZ1U4ZWpmUFFJ
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdVSE4tSWUzM2k5Y0lCdm9nVThlamZQUUlCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkM4MzIvNUI2MTgwNjAxRTYxMTFGMDkzNEY2Rjc0QzRGOUFFMDIvOUM0MDc0NUE4
NkY5MTFGMEFDMUY1OTIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo+MaMA0GCSqGSIb3DQEBCwUAA4IBAQBbttc6ON6Ka1eRAF7fvPDA
OgYpUH5QSk+7I6tAubGgA7U7vX9OeKhI9g9UUHMd69jtcK33lqxx7NJiVMT//4ld
b0xzeqwOYLNVHy8m9580G3WxlpOe1sBDAO9sr4TxMHarOAkiAKhEkG/EM58N25+1
6cS3XdBcFZDLOnAFzl8kXvhNZX2gBBTd4TZyOtNReMkke1H44pxpq+w5xBB3P/o+
Z9wVIO/0NPmI7BU+BdAv6494l49hhDKdoHIZOZf8Fb2BPSbHIDHTy3eVyiafJUty
ztui4btmhoo+kqFAQB21YaGOkKJUlCGxaPPQlBa3cJaf0LxJO02cVu79rYQc+9TX
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:41 2026 by rpki-client