Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa
File:                     8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa (raw, json)
Hash identifier:          1vdpNZCb5eokv9kB4IF2yBs5bnjtxY0G7yJ15IMk+7Y=
Subject key identifier:   56:9F:04:BE:4A:77:BB:E1:49:8A:44:D3:4D:61:27:D4:06:1C:8B:7B
Certificate issuer:       /CN=A9178F62/serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
Certificate serial:       9F
Authority key identifier: 63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa
Signing time:             Tue 21 Apr 2026 07:41:20 +0000
ROA not before:           Tue 21 Apr 2026 07:41:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153766
IP address blocks:        163.227.14.0/23 maxlen: 23
                          163.227.14.0/24 maxlen: 24
                          163.227.15.0/24 maxlen: 24
                          2401:fc20::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl
                          rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178F62, serialNumber=63FA0006261D9E4CD4905906E5439694BE627BB1
        Validity
            Not Before: Apr 21 07:41:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e72a20-f298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:1e:6e:85:27:96:7a:07:52:3a:56:d3:af:
                    c7:ec:24:3c:55:ce:38:83:cc:ac:2b:c2:7c:52:80:
                    d3:52:49:93:26:bd:b8:01:25:9a:52:4a:c1:2e:d8:
                    11:26:74:b0:d4:7b:66:51:ce:f2:2e:b6:27:59:95:
                    6e:77:b9:32:6b:e0:62:60:a1:8a:12:b8:a0:b0:d0:
                    ed:4b:0b:d3:07:e6:7c:05:c9:8d:74:76:2f:08:bf:
                    57:82:64:73:cc:aa:5d:c4:e6:df:ae:fe:6b:ff:17:
                    9c:57:81:b5:6a:17:35:f5:a2:2b:8e:78:5e:35:35:
                    22:bd:15:da:48:71:5f:6a:67:70:14:67:6c:a7:b1:
                    ec:03:54:90:96:bc:5b:d8:69:48:dd:8e:5f:3b:67:
                    d6:8b:c7:a6:96:50:f2:d0:62:5f:4a:9c:ed:5c:de:
                    87:bc:6b:a8:b6:f3:01:0e:48:e7:32:d2:87:30:19:
                    2a:b9:39:ab:1f:2e:18:d6:d5:b4:c0:7c:fa:a9:2a:
                    3b:60:9a:2c:09:f5:0e:20:e8:96:34:af:fd:53:13:
                    8b:61:e8:e0:7e:0b:f5:cb:79:91:b8:7a:2a:3e:19:
                    42:21:dc:bf:f3:af:6f:3e:df:48:f3:75:be:d8:7a:
                    fd:57:fa:07:5e:dd:c6:6c:7c:ad:6e:83:a8:14:8f:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9F:04:BE:4A:77:BB:E1:49:8A:44:D3:4D:61:27:D4:06:1C:8B:7B
            X509v3 Authority Key Identifier:
                keyid:63:FA:00:06:26:1D:9E:4C:D4:90:59:06:E5:43:96:94:BE:62:7B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/Y_oABiYdnkzUkFkG5UOWlL5ie7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y_oABiYdnkzUkFkG5UOWlL5ie7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178F62/B878C2C85DFD11F0B5C07B4BC4F9AE02/8EA5A6E28C7D11F0B0706F1EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.14.0/23
                IPv6:
                  2401:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:5a:f4:7a:f7:05:27:23:fa:ee:bc:47:97:1b:54:66:2f:
         55:58:ea:be:75:db:08:82:22:90:08:0b:b0:13:89:2d:80:f8:
         a3:45:d7:29:79:57:c7:46:0d:5a:2c:2c:56:f8:77:20:95:f5:
         98:63:17:96:38:3f:42:42:93:e9:cd:0f:69:57:20:36:7c:2f:
         d6:f2:b5:d2:51:a5:0a:83:88:14:81:91:68:0c:8f:54:c7:ab:
         09:7c:ae:8b:b7:a4:18:38:c3:c1:da:a5:e8:8a:78:1c:29:06:
         7c:f4:53:ef:ea:21:76:69:23:37:27:cc:ec:6d:59:97:35:29:
         d8:e6:ff:22:b6:d5:0f:2d:41:25:a1:61:3f:7f:ed:aa:54:60:
         99:8d:26:1c:48:1f:ca:84:55:50:80:4a:ec:62:1c:3c:86:9b:
         b8:55:6f:5a:dd:5d:1d:92:d1:dc:4e:6e:04:43:db:a1:3c:4f:
         8f:4f:00:57:ef:d0:38:3d:11:23:a0:7b:7c:8e:3d:2b:84:64:
         c9:f8:96:1b:72:82:34:81:5b:2b:12:04:cc:0a:7e:57:dc:f0:
         fa:60:69:b7:b3:b2:89:48:87:49:c7:34:44:dc:78:90:5c:5c:
         22:8f:3d:1e:34:9f:d2:9d:5c:98:f5:fe:10:d8:28:17:19:0a:
         d9:b5:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:17:08 2026 by rpki-client