Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
File:                     BF7A92E2FFC311EF9131D04AC4F9AE02.roa (raw, json)
Hash identifier:          J3DGY8juU3pcRJwZaQR0jzBRz3iKXp4A0M0KTR2lgY0=
Subject key identifier:   4B:ED:48:7F:ED:18:17:C3:33:14:5C:4D:36:6B:20:92:8C:A5:1E:C4
Certificate issuer:       /CN=A918922D/serialNumber=456C60836584E90A28A29D028B5B27601A93D446
Certificate serial:       B5
Authority key identifier: 45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:01:33 +0000
ROA not before:           Thu 13 Mar 2025 04:29:27 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     153688
IP address blocks:        163.223.74.0/23 maxlen: 24
                          2001:df5:36c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl
                          rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:19:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 181 (0xb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918922D, serialNumber=456C60836584E90A28A29D028B5B27601A93D446
        Validity
            Not Before: Mar 13 04:29:27 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3e44d-dd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:00:f0:e1:80:65:f0:2e:c9:97:79:c4:a5:
                    3c:d1:a0:ca:7a:fb:f7:0a:0f:4c:bd:28:82:18:8b:
                    fb:f0:1d:a9:8f:b1:3b:f3:97:99:6e:0d:a2:83:83:
                    94:3d:e1:81:57:5f:00:b2:5c:49:df:05:28:29:f0:
                    44:f5:03:7d:72:a9:ed:33:27:6c:a1:17:2c:19:28:
                    8d:20:3b:9d:46:a0:1a:17:ac:75:c9:58:05:d6:e5:
                    55:fb:d3:44:bd:8c:b2:f8:88:84:dc:67:0a:5b:d6:
                    3b:11:8d:e2:33:08:ea:62:d9:3f:7c:12:e3:f2:f3:
                    ac:e1:82:5e:c8:13:3b:41:4b:8d:ca:9b:7d:3d:9a:
                    e5:10:58:1f:f8:6e:7e:71:ae:15:62:30:86:e8:59:
                    29:9d:7e:e4:db:9c:2d:7a:1a:a6:f4:b6:f8:fa:9a:
                    c2:dd:94:87:41:18:61:7e:68:f7:54:2e:85:37:d0:
                    5c:4e:3c:52:9b:bc:70:68:c9:52:ac:62:e1:47:72:
                    52:cf:a7:39:43:11:6c:f8:80:cc:f8:6c:5b:f8:b1:
                    c9:2b:2c:97:d9:28:40:d9:ff:a1:f9:5b:5d:cd:9d:
                    01:b4:c3:8a:fa:0b:78:b8:85:34:88:2b:18:f8:0c:
                    06:86:d0:86:cb:46:98:95:99:83:21:51:df:62:cc:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:48:7F:ED:18:17:C3:33:14:5C:4D:36:6B:20:92:8C:A5:1E:C4
            X509v3 Authority Key Identifier:
                keyid:45:6C:60:83:65:84:E9:0A:28:A2:9D:02:8B:5B:27:60:1A:93:D4:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/RWxgg2WE6Qooop0Ci1snYBqT1EY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWxgg2WE6Qooop0Ci1snYBqT1EY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918922D/F9118D7CFFC211EF9B295E46C4F9AE02/BF7A92E2FFC311EF9131D04AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.74.0/23
                IPv6:
                  2001:df5:36c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:1e:ee:51:e2:7b:c9:63:ed:ae:71:c9:54:cf:d8:4e:8e:ef:
         a4:f1:82:2e:0b:5a:3b:c4:ee:7c:3f:26:7a:8a:39:36:96:3d:
         c0:e5:d8:41:c6:c1:fa:6c:a0:47:a1:8f:79:e4:09:6c:d5:ca:
         c5:82:9e:e7:77:b3:89:d2:6f:fe:f4:51:76:f2:9b:1b:c7:93:
         3a:81:b4:47:d0:12:48:ae:28:89:bd:60:ab:98:ad:1a:f7:52:
         d7:09:57:10:1d:e6:8e:4d:f0:84:dd:7e:68:cc:df:3c:63:b2:
         b4:0d:a6:fd:1b:cf:36:c8:d4:b7:d3:88:4b:15:4b:61:16:64:
         f4:69:5b:ce:35:70:13:c1:83:83:2c:48:cb:57:f1:53:dd:f0:
         73:a5:ea:e0:43:f8:a2:61:0f:1d:3e:a1:3b:67:67:2f:f0:9c:
         a2:a9:32:3d:92:9d:47:09:41:ff:73:c3:84:61:14:9c:64:43:
         8f:24:c6:cd:0d:72:ea:b1:13:b5:4a:52:e8:10:bd:68:85:46:
         a2:0e:43:20:a2:ed:11:7e:7b:89:05:79:5a:66:82:9d:84:9f:
         d4:09:3d:40:e6:b0:28:8e:7c:1e:50:c3:aa:fc:17:61:47:2d:
         b1:ad:82:9c:56:06:4e:d8:e8:33:65:0c:43:9e:19:ee:97:58:
         8a:3f:eb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:30:24 2026 by rpki-client