Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/8C215ED6172811F0B074151EC4F9AE02.roa
File:                     8C215ED6172811F0B074151EC4F9AE02.roa (raw, json)
Hash identifier:          XXi4HtBDPgCDEiDMleFH2KmICcdoHAtYUlHJKso9Buo=
Subject key identifier:   C7:B3:C3:D3:7E:26:95:74:0F:33:17:0E:87:7A:5C:05:9D:0C:7E:16
Certificate issuer:       /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
Certificate serial:       A8
Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/8C215ED6172811F0B074151EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:07:09 +0000
ROA not before:           Fri 11 Apr 2025 22:58:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153772
IP address blocks:        163.227.46.0/23 maxlen: 24
                          2401:fd60::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl
                          rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3
        Validity
            Not Before: Apr 11 22:58:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3f3ad-1a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:86:f4:93:86:d1:9d:74:b3:35:48:1c:ab:c8:
                    3c:52:0d:b6:66:f3:0d:e6:2f:cd:12:7b:eb:33:4c:
                    3f:60:72:af:4f:b9:49:f4:65:e1:1a:7c:0d:52:61:
                    ad:cc:cd:d8:6f:e1:0c:78:13:e6:25:01:66:3f:5c:
                    5c:25:93:14:06:4d:2e:ed:7b:a5:5b:57:2c:fb:3b:
                    7e:e8:ae:00:71:8f:b4:d4:7d:c6:b1:21:2a:51:32:
                    c3:d7:9d:3e:db:cc:c2:4a:68:f8:f1:a8:95:74:7d:
                    e0:47:c0:c6:ba:92:47:69:c0:ec:d1:9e:6a:a9:82:
                    c7:12:3b:98:a6:5f:b0:29:b9:69:12:9d:f2:97:cf:
                    70:92:5b:a8:fb:44:97:c1:9c:a6:07:27:75:3b:7e:
                    75:b0:db:1c:e6:e5:6b:a2:10:cb:4b:eb:02:54:9a:
                    51:8d:9d:f1:88:0b:d4:e6:92:02:ea:81:7d:92:77:
                    55:55:6e:33:1c:b3:c1:fb:e5:a8:75:bb:7d:60:b1:
                    92:78:e8:f0:5a:66:89:e3:8b:76:37:d0:69:73:31:
                    db:c5:a7:b4:fb:9b:fd:e7:2c:58:7e:08:7b:0c:ad:
                    62:34:1c:e1:ca:32:a1:50:02:1a:86:60:2a:ea:3a:
                    b7:12:9c:e0:fb:99:5a:85:b3:a8:77:2b:5e:1e:3a:
                    2e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B3:C3:D3:7E:26:95:74:0F:33:17:0E:87:7A:5C:05:9D:0C:7E:16
            X509v3 Authority Key Identifier:
                keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/8C215ED6172811F0B074151EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.46.0/23
                IPv6:
                  2401:fd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:93:be:ae:fb:8f:53:18:cf:18:58:21:9f:6d:eb:3b:32:d5:
         ad:96:19:87:72:c5:dc:93:e8:7a:2f:c9:d4:dd:39:00:21:76:
         9d:7c:86:56:51:0c:7d:80:d2:26:e7:16:91:98:c8:18:23:64:
         6d:70:59:fe:3a:9e:b9:1e:9c:80:85:72:4d:c4:3d:11:c3:0d:
         76:18:c6:56:65:7c:dc:63:bb:b7:b1:b7:06:b0:d3:7b:58:b9:
         6e:37:3a:ad:0c:97:7c:e1:fe:27:29:bd:5b:6a:3d:48:be:c0:
         02:d8:94:a0:d6:4a:ba:2f:dc:2c:66:d9:f3:5f:20:e6:a8:bb:
         ca:3d:e1:bd:37:fb:2d:e3:e8:d2:91:d6:24:0b:a0:4c:90:6c:
         85:93:60:cb:b8:86:8f:4b:32:50:64:47:3e:b6:e7:d5:9c:2c:
         45:86:a7:32:58:ee:d8:36:39:52:57:00:18:48:92:b6:14:03:
         43:d2:58:0d:04:78:36:e7:16:50:d6:4e:99:85:fc:23:bd:c9:
         7f:90:51:8d:87:22:cb:62:ea:fa:30:75:28:73:e5:f4:90:5b:
         b7:a7:e4:84:cf:f3:00:0b:46:14:22:c6:5b:83:21:99:b9:bd:
         27:9c:01:01:8b:3e:0d:27:ba:ca:12:0a:bd:5a:b5:42:c1:d2:
         c1:2c:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:50:32 2026 by rpki-client