Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/143607886D4E11F087D8A944C4F9AE02.roa
File:                     143607886D4E11F087D8A944C4F9AE02.roa (raw, json)
Hash identifier:          wMt1d6CUtR88aRMiZWHsRXiby2Ts98Q3j2MzOUnQMdE=
Subject key identifier:   8B:FD:37:17:7D:4D:85:20:22:56:87:B9:0B:B2:F3:80:D8:F7:97:10
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       47
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/143607886D4E11F087D8A944C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 14:04:16 +0000
ROA not before:           Wed 30 Jul 2025 14:04:16 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151704
IP address blocks:        163.227.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Jul 30 14:04:16 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=688a2660-d6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6b:98:7f:c2:2b:5c:65:6f:72:a3:9f:c2:7c:
                    1d:df:2c:81:8c:c1:49:ef:10:53:dd:72:19:f7:5f:
                    f2:f6:eb:72:a5:d3:58:02:2b:34:64:0c:5c:5d:bf:
                    3c:c7:33:0a:ca:0c:82:e3:12:3c:ee:db:4c:50:84:
                    e7:d8:4e:7a:c4:7c:b8:c9:75:86:de:44:d8:50:9f:
                    9a:ec:8c:7b:14:4f:11:a6:ce:98:8e:b6:23:43:0c:
                    c2:5a:5c:18:5e:5a:f8:c1:84:37:67:21:b3:59:73:
                    46:d1:22:01:d5:a6:6f:91:1c:dc:a3:62:85:77:d1:
                    71:9c:38:13:18:74:1d:29:d3:b9:f1:8a:af:5d:dc:
                    40:04:da:64:7d:b1:c7:67:0e:a3:e6:f5:6b:5a:9c:
                    09:75:43:5e:84:bb:13:94:7e:47:66:29:de:04:42:
                    97:fc:00:c2:1b:5e:10:70:82:13:51:dd:e9:0c:0e:
                    93:78:e8:ec:4b:12:ff:a1:49:53:4f:77:18:1a:bd:
                    06:7f:cc:92:b0:4a:72:f6:f5:58:62:31:46:bf:80:
                    23:2a:78:52:b6:fd:2b:ed:76:35:8b:a2:e3:7c:8f:
                    54:63:ab:f7:99:d0:52:ec:72:59:f8:0c:9b:16:40:
                    f5:52:2c:f4:1c:82:fd:a9:fb:2b:98:12:e9:4e:15:
                    ae:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FD:37:17:7D:4D:85:20:22:56:87:B9:0B:B2:F3:80:D8:F7:97:10
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/143607886D4E11F087D8A944C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:56:62:f0:d1:bd:4b:99:1e:84:f5:04:2e:8f:2c:81:74:87:
         b1:74:66:fe:da:a2:ac:a0:39:b0:98:7b:7a:6e:e5:5a:d5:9b:
         7e:98:e4:28:7a:11:d7:2c:c4:c6:41:4e:e1:77:4c:4d:64:67:
         ce:c7:da:b7:0e:9d:0a:81:ec:2a:2e:97:55:7e:c9:b0:5d:9e:
         da:1e:ce:59:4a:2d:d2:82:78:18:0f:bb:a6:5b:43:b0:12:4d:
         41:86:23:30:47:b1:27:45:a5:a8:89:c6:c8:cf:81:7b:22:71:
         d3:54:f9:30:cd:63:85:9e:ce:ab:e7:95:f7:76:01:6d:01:fb:
         a4:cf:4f:67:a4:ed:3f:da:39:2c:eb:ba:ba:f7:30:f7:73:40:
         79:45:7e:87:bd:44:14:1a:48:76:99:0b:82:75:56:2a:01:d1:
         04:38:80:62:1a:5e:54:3b:9e:a6:a2:cf:4a:2c:81:e4:46:b2:
         f1:6a:af:99:b9:ba:e0:3b:19:b1:d8:c3:60:33:c9:2e:32:84:
         fc:b5:a5:c4:23:2c:13:bc:22:eb:62:0c:84:98:5f:61:c8:b5:
         8a:13:95:ed:13:7e:c9:8b:67:53:a3:68:ac:9c:54:3b:56:4e:
         03:b0:00:f0:4c:52:43:74:da:70:59:eb:02:f2:ed:02:fc:98:
         0d:a7:56:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:53:19 2025 by rpki-client