Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/14798B705DFE11F0884D684CC4F9AE02.roa
File:                     14798B705DFE11F0884D684CC4F9AE02.roa (raw, json)
Hash identifier:          LemiH8pfsweC82Hjr0VqZWkC1AnqngCYZh5w6GyY1xk=
Subject key identifier:   DA:FF:17:79:3B:09:BD:BF:72:85:0E:44:6A:4E:63:F1:B5:4C:16:AB
Certificate issuer:       /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
Certificate serial:       08
Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/14798B705DFE11F0884D684CC4F9AE02.roa
Signing time:             Mon 14 Jul 2025 14:48:21 +0000
ROA not before:           Mon 14 Jul 2025 14:48:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153766
IP address blocks:        163.227.14.0/23 maxlen: 23
                          163.227.14.0/24 maxlen: 24
                          163.227.15.0/24 maxlen: 24
                          2401:fc20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl
                          rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 08:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
        Validity
            Not Before: Jul 14 14:48:21 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=687518b5-093d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:10:8d:0d:f4:9f:d8:9c:e8:7b:38:ae:24:
                    d0:7b:c3:19:e6:fe:ea:57:43:19:32:51:00:52:80:
                    a6:a0:a1:5f:5a:fa:f2:29:14:0a:c2:f8:da:fe:e8:
                    8c:19:86:aa:6c:1b:dd:0d:e0:7f:91:cb:43:4f:52:
                    b4:aa:0d:84:d1:07:8f:aa:9c:5c:f5:a2:55:36:30:
                    92:48:14:89:b8:c7:00:be:c7:a8:17:f2:76:d7:4a:
                    32:76:a3:1b:cf:86:e8:2b:da:ef:38:55:3d:72:e4:
                    0f:04:fd:44:e1:28:00:3a:0e:05:2a:b3:6a:ca:78:
                    56:ce:43:37:80:03:6e:a6:b2:35:b2:62:bd:37:6a:
                    06:6b:ba:2a:92:12:28:16:1a:62:10:b1:f0:1f:12:
                    bc:9a:45:e9:db:62:d6:0f:d9:da:12:ca:b2:82:ec:
                    dc:34:b7:60:91:7a:dc:d2:df:31:6b:84:b1:5a:f1:
                    73:2c:5c:23:f9:5e:d3:bf:fc:9d:7d:d1:b7:6d:fd:
                    eb:06:5d:e3:3d:fb:57:60:09:12:8d:56:29:e9:e7:
                    0d:55:25:c1:e6:ac:c4:7e:8e:36:8c:20:7f:ac:b4:
                    10:56:aa:20:c8:1a:c7:80:d4:a1:b0:38:55:91:7a:
                    3f:8c:eb:c3:3d:5d:00:df:e1:58:cd:43:40:ca:8d:
                    c3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FF:17:79:3B:09:BD:BF:72:85:0E:44:6A:4E:63:F1:B5:4C:16:AB
            X509v3 Authority Key Identifier:
                keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/14798B705DFE11F0884D684CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.14.0/23
                IPv6:
                  2401:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:a5:c3:fa:c7:ae:c0:8a:bd:ce:c6:b2:53:9c:44:34:42:10:
         36:1a:d6:33:70:ae:79:b9:4d:52:de:e1:f6:30:f6:ae:a6:d6:
         bf:59:c5:f3:31:1c:03:f2:50:85:e5:f3:1e:40:9b:f6:40:a0:
         a9:9b:f9:dc:68:8a:6f:41:50:db:a1:a3:98:c7:9c:81:d9:21:
         19:66:dc:31:b6:58:1c:73:e4:9d:9a:d9:e3:53:a0:7a:92:67:
         a1:aa:49:09:8f:ec:a8:c1:41:ef:b8:a5:d3:18:a1:c7:26:29:
         16:e3:af:78:bc:f2:31:71:06:1a:2a:98:7e:65:f0:f0:c3:9f:
         a6:7b:72:5c:45:41:4b:2e:03:a1:c6:48:0c:dd:98:5a:73:de:
         b6:26:59:78:1b:a1:89:3d:00:6e:42:d5:f0:fe:4a:71:66:53:
         d6:de:e3:a7:e1:c8:b3:9d:06:07:d8:cb:fd:73:72:6c:aa:6e:
         8a:e7:fd:98:28:6e:f4:6c:52:6b:b5:16:bb:5a:66:ad:ca:76:
         4c:20:06:86:88:ee:60:82:2b:3b:36:d7:da:56:39:f7:24:68:
         8e:e6:37:98:22:28:59:88:6d:98:f5:fe:3e:5f:71:5e:87:31:
         23:9e:78:d8:6f:2d:e7:70:8c:f1:bd:10:ad:6a:35:34:51:cc:
         e0:7c:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 11:33:33 2025 by rpki-client