Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
File:                     6ADC3FDE1EA811F080D62E0EC4F9AE02.roa (raw, json)
Hash identifier:          eZIpW/uAc6VvUgj1mUM1+YMtbcurUKE2lt2tc7badCU=
Subject key identifier:   CA:6E:C3:EE:36:16:FE:14:A0:9E:D0:C6:7A:85:53:A7:87:82:0F:BC
Certificate issuer:       /CN=A917A19F/serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
Certificate serial:       7C
Authority key identifier: 62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
Signing time:             Wed 29 Oct 2025 08:24:40 +0000
ROA not before:           Wed 29 Oct 2025 08:24:39 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153706
IP address blocks:        163.223.146.0/23 maxlen: 23
                          163.223.146.0/24 maxlen: 24
                          163.223.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl
                          rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:02:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A19F, serialNumber=62C71F6AE91629F854CA94641761B6522CD480C3
        Validity
            Not Before: Oct 29 08:24:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6901cf47-a19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:67:a9:ea:6f:b5:be:4a:b0:f6:8c:ac:9e:
                    f6:b0:7f:98:c3:a8:4e:29:a6:48:6b:31:32:76:bb:
                    b1:32:3f:fc:30:3b:c4:ad:87:0d:5e:0f:09:f3:59:
                    a8:ba:64:aa:3c:47:ff:5f:24:7f:0f:1d:af:27:10:
                    a7:31:54:43:a2:f7:97:83:11:f6:39:d0:75:ae:60:
                    cc:26:ed:3e:d8:7b:f8:ba:c5:84:7d:00:ae:b4:9e:
                    69:10:1d:58:61:2a:35:b3:9b:a2:6d:0a:ce:39:9c:
                    27:6f:50:ef:80:da:14:1d:b3:a8:55:66:57:92:70:
                    ed:24:67:f0:6f:8d:7d:e1:23:9d:35:01:ab:4f:bf:
                    79:df:9f:1b:6f:94:bd:a7:0d:8b:40:7a:42:e0:1b:
                    58:ac:84:e0:f5:89:de:d7:73:b0:88:ec:91:d7:cc:
                    ec:d4:6c:7e:5d:ba:42:42:80:bc:23:bf:7e:9f:0b:
                    3a:ba:5b:ca:5f:3a:c6:63:d4:ed:1c:37:40:dd:61:
                    2b:29:48:ed:3b:94:3d:7f:02:c6:db:3b:06:f7:8c:
                    f2:0a:28:07:a9:73:10:cc:04:b2:08:09:92:f8:7a:
                    c4:26:5a:f1:d5:d8:89:a2:2a:20:dd:78:b2:7f:38:
                    90:f8:e5:4d:03:24:ec:8e:c4:73:94:0c:1f:91:45:
                    31:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:C3:EE:36:16:FE:14:A0:9E:D0:C6:7A:85:53:A7:87:82:0F:BC
            X509v3 Authority Key Identifier:
                keyid:62:C7:1F:6A:E9:16:29:F8:54:CA:94:64:17:61:B6:52:2C:D4:80:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/YscfaukWKfhUypRkF2G2UizUgMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YscfaukWKfhUypRkF2G2UizUgMM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A19F/B9EA04C6059411F0A2E0E15CC4F9AE02/6ADC3FDE1EA811F080D62E0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:23:cd:cc:3e:fa:da:75:e3:76:6e:3f:8d:a8:41:1e:23:03:
         a1:3a:04:29:34:08:a1:65:27:f8:e7:e1:6f:19:a6:ec:0b:66:
         02:a0:bc:f0:d0:2e:38:38:75:2a:6d:8e:60:56:cf:af:76:42:
         61:5a:68:8a:54:2e:2f:d4:af:0c:10:80:8a:63:15:a8:97:f5:
         1d:6d:bc:75:d5:de:09:c6:b0:e9:f9:7e:7c:73:77:a0:ee:6f:
         c7:43:95:4f:e2:13:09:f5:7f:45:b4:f2:d9:5a:63:75:85:09:
         21:c3:38:fd:bc:13:b6:b9:2e:9a:16:01:51:0c:2d:60:4e:fe:
         a4:34:15:b4:3a:17:7a:eb:b5:dc:aa:92:b0:40:f0:bc:84:69:
         2c:91:80:90:4b:d0:72:36:cd:c1:58:c8:26:16:70:ab:e6:ac:
         7a:b3:e2:0e:7d:16:66:6f:93:3e:41:2a:2c:65:da:33:7b:c9:
         be:3e:5e:97:5f:47:75:c9:30:08:c2:be:8e:35:bc:e7:a6:e2:
         dd:15:96:23:d4:c6:03:eb:11:5f:bb:e8:d3:8a:3a:e9:e6:78:
         a3:d9:80:9e:a5:2c:81:05:15:36:4a:ca:f3:b3:02:9f:bf:c1:
         f6:da:16:ff:89:2b:dc:8b:7a:c1:c4:18:9b:e5:6d:59:2c:ea:
         1f:ec:53:45
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QTE5RjExMC8GA1UEBRMoNjJDNzFGNkFFOTE2MjlGODU0Q0E5NDY0MTc2MUI2NTIy
Q0Q0ODBDMzAeFw0yNTEwMjkwODI0MzlaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5MDFjZjQ3LWExOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC07mep6m+1vkqw9oysnvawf5jDqE4ppkhrMTJ2u7EyP/wwO8Sthw1eDwnzWai6
ZKo8R/9fJH8PHa8nEKcxVEOi95eDEfY50HWuYMwm7T7Ye/i6xYR9AK60nmkQHVhh
KjWzm6JtCs45nCdvUO+A2hQds6hVZleScO0kZ/BvjX3hI501AatPv3nfnxtvlL2n
DYtAekLgG1ishOD1id7Xc7CI7JHXzOzUbH5dukJCgLwjv36fCzq6W8pfOsZj1O0c
N0DdYSspSO07lD1/AsbbOwb3jPIKKAepcxDMBLIICZL4esQmWvHV2ImiKiDdeLJ/
OJD45U0DJOyOxHOUDB+RRTFbAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUym7D7jYW
/hSgntDGeoVTp4eCD7wwHwYDVR0jBBgwFoAUYscfaukWKfhUypRkF2G2UizUgMMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMTlGL0I5RUEwNEM2MDU5
NDExRjBBMkUwRTE1Q0M0RjlBRTAyL1lzY2ZhdWtXS2ZoVXlwUmtGMkcyVWl6VWdN
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWXNjZmF1a1dLZmhVeXBSa0YyRzJVaXpVZ01NLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTE5Ri9COUVBMDRDNjA1OTQxMUYwQTJFMEUxNUNDNEY5QUUwMi82QURDM0ZERTFF
QTgxMUYwODBENjJFMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAaPfkjANBgkqhkiG9w0BAQsFAAOCAQEAmiPNzD762nXjdm4/
jahBHiMDoToEKTQIoWUn+Ofhbxmm7AtmAqC88NAuODh1Km2OYFbPr3ZCYVpoilQu
L9SvDBCAimMVqJf1HW28ddXeCcaw6fl+fHN3oO5vx0OVT+ITCfV/RbTy2VpjdYUJ
IcM4/bwTtrkumhYBUQwtYE7+pDQVtDoXeuu13KqSsEDwvIRpLJGAkEvQcjbNwVjI
JhZwq+aserPiDn0WZm+TPkEqLGXaM3vJvj5el19HdckwCMK+jjW856bi3RWWI9TG
A+sRX7vo04o66eZ4o9mAnqUsgQUVNkrK87MCn7/B9toW/4kr3It6wcQYm+VtWSzq
H+xTRQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 17:17:00 2025 by rpki-client