Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/82B7AD281C2811F0AF6EDC47C4F9AE02.roa
File:                     82B7AD281C2811F0AF6EDC47C4F9AE02.roa (raw, json)
Hash identifier:          //fCANZMUH8xgoi27pDocS10NmhDbhWBB2uRGDJADwY=
Subject key identifier:   04:57:DE:61:CB:D2:6E:90:95:B3:A7:18:4A:DB:06:35:39:4A:54:83
Certificate issuer:       /CN=A917C156/serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
Certificate serial:       A9
Authority key identifier: AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/82B7AD281C2811F0AF6EDC47C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:16 +0000
ROA not before:           Fri 18 Apr 2025 07:43:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153788
IP address blocks:        163.227.82.0/23 maxlen: 23
                          2401:fe60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl
                          rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C156, serialNumber=AC87FD690CC6B24C78FC3F71D32DDE0DBA2890DB
        Validity
            Not Before: Apr 18 07:43:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e4b4-cbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:36:c0:3b:c9:00:be:c9:53:24:b0:43:be:8c:
                    5d:ad:50:40:5b:43:28:d0:5a:58:b8:4b:54:88:e4:
                    e3:45:18:17:f2:56:13:7d:70:7a:11:4e:b9:4d:bb:
                    d8:b2:1f:92:84:e2:03:fc:d6:a0:55:bb:74:69:55:
                    7b:35:ef:99:e8:b1:2b:01:94:fb:fa:ac:47:8f:4b:
                    cf:83:70:5e:b4:d0:62:32:4a:80:e0:dd:2a:4e:1f:
                    e8:1a:db:19:3f:1a:de:4e:69:5b:34:ed:54:be:e9:
                    4b:7d:62:35:9f:5d:ad:59:2b:16:a0:4f:db:0d:c0:
                    db:63:9e:85:f2:d8:f5:e1:c5:a0:a8:4c:cd:c3:97:
                    ca:14:4d:7d:16:b1:82:bb:9e:66:35:32:f2:bd:75:
                    b7:b4:20:92:1f:d0:14:c9:f3:4e:71:95:f5:7b:f6:
                    93:4c:af:bb:9a:f4:b0:39:33:33:8b:06:ba:43:0f:
                    2d:3c:46:5f:0a:6c:2e:db:fb:82:42:7a:5e:57:79:
                    59:8d:93:f7:e5:07:66:89:42:d9:5a:58:76:39:fd:
                    c4:96:28:df:29:48:b1:d5:ad:00:a1:4b:3a:1c:16:
                    b2:20:1d:28:f2:7f:30:90:44:1b:8f:dc:be:52:38:
                    58:2f:2b:dc:49:1a:1b:7d:eb:b9:a7:c4:81:a1:04:
                    8b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:57:DE:61:CB:D2:6E:90:95:B3:A7:18:4A:DB:06:35:39:4A:54:83
            X509v3 Authority Key Identifier:
                keyid:AC:87:FD:69:0C:C6:B2:4C:78:FC:3F:71:D3:2D:DE:0D:BA:28:90:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/rIf9aQzGskx4_D9x0y3eDbookNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rIf9aQzGskx4_D9x0y3eDbookNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C156/142E64DE1C0311F0A5DC1556C4F9AE02/82B7AD281C2811F0AF6EDC47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.82.0/23
                IPv6:
                  2401:fe60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:57:9a:4d:cd:37:0e:f0:5e:49:03:ca:8e:09:55:bc:e9:
         68:bc:47:28:2b:da:af:a3:46:a4:f3:76:43:ed:f7:5f:a1:46:
         ad:5e:38:0c:0f:39:6a:c7:6d:05:67:35:de:2a:af:6b:14:70:
         24:ba:09:43:d8:3c:64:19:91:28:cf:29:9d:7b:0c:50:e6:30:
         c8:d4:76:8b:29:29:4d:ba:87:dc:84:ac:23:7d:22:58:b0:de:
         6d:8b:d3:0b:5e:52:bb:01:29:40:01:ae:57:0e:71:67:d3:22:
         d9:9b:e0:b5:62:c8:77:3d:5c:6f:b1:7f:41:97:1a:b3:5f:c4:
         3d:49:6e:d8:34:b1:2e:1d:46:93:b3:96:a8:50:82:5b:fc:63:
         31:4b:f2:76:f6:0c:c7:68:a0:08:74:d8:cd:16:de:08:b6:31:
         1b:a4:72:03:3a:30:05:12:51:d7:03:f6:92:61:72:86:1b:da:
         30:58:e3:b2:90:8d:e2:ff:d7:31:dc:90:a1:e6:07:8e:e7:d9:
         0f:fc:20:df:03:76:d7:aa:7a:43:7a:98:f6:2c:82:7e:f4:b8:
         3e:04:b5:61:5f:c6:3f:7b:35:08:c5:00:67:57:ba:fa:e3:ce:
         f9:03:4b:a2:7e:1c:28:9a:68:18:c9:e6:d5:69:66:c0:bf:52:
         fb:a1:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:26 2026 by rpki-client