Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/2B1A3764302A11F0B211AD0BC4F9AE02.roa
File:                     2B1A3764302A11F0B211AD0BC4F9AE02.roa (raw, json)
Hash identifier:          eajz65t2ux1KR+OQcc3Av8hhywthwVBpIhR8Ie4nBYI=
Subject key identifier:   D1:A5:B5:46:60:8D:54:5F:7B:5A:21:87:19:DC:C2:60:88:6F:E6:6F
Certificate issuer:       /CN=A918E269/serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
Certificate serial:       A1
Authority key identifier: 4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/2B1A3764302A11F0B211AD0BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:04:39 +0000
ROA not before:           Tue 22 Jul 2025 09:36:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150142
IP address blocks:        163.227.238.0/24 maxlen: 24
                          163.227.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 161 (0xa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E269, serialNumber=4BE1073936252E3CF072F989D7FDC4E7E7C66274
        Validity
            Not Before: Jul 22 09:36:24 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a3e507-14b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:37:b7:b9:e0:a2:98:c0:20:a9:38:d4:d1:a1:
                    05:48:15:39:50:22:fc:50:ef:5e:d3:8c:18:0f:12:
                    ef:0e:d1:99:30:3b:f4:45:a7:3e:3e:fe:c3:33:4c:
                    1c:4f:cc:6f:aa:ba:c1:51:3a:2a:44:8e:a5:dc:45:
                    58:fd:8c:cd:da:7a:b0:b5:7a:5b:ed:34:62:b5:3f:
                    c2:3a:01:3e:53:34:15:65:95:65:34:38:9f:fa:cc:
                    bc:d7:39:5e:99:63:9f:ea:f7:36:b1:08:b6:23:f9:
                    09:09:c5:5c:31:3a:31:f6:4b:02:98:65:b1:18:c9:
                    0d:62:a7:8e:69:10:e5:7a:78:c5:b5:10:04:7b:74:
                    7a:8e:1c:4f:5b:4d:31:39:e2:f8:eb:71:1c:94:bc:
                    a8:fc:28:78:05:84:9f:05:a0:3e:5e:75:f7:e9:49:
                    cd:92:36:72:85:37:01:fe:e9:f7:f6:5b:a2:57:f0:
                    4a:b9:ab:fb:72:b0:b7:ac:66:f8:9e:b1:ca:df:64:
                    f9:4e:33:92:c6:bb:6b:ac:c0:c2:ff:c2:be:50:63:
                    5f:d3:77:fd:7b:a4:39:15:a8:b8:87:5b:15:f1:ba:
                    01:d0:c3:64:24:f2:15:e3:77:b3:06:ac:8e:bb:14:
                    fc:2f:fa:6b:e9:53:a8:d4:65:b2:1b:f9:87:a5:a6:
                    f8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A5:B5:46:60:8D:54:5F:7B:5A:21:87:19:DC:C2:60:88:6F:E6:6F
            X509v3 Authority Key Identifier:
                keyid:4B:E1:07:39:36:25:2E:3C:F0:72:F9:89:D7:FD:C4:E7:E7:C6:62:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-EHOTYlLjzwcvmJ1_3E5-fGYnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E269/393BA8CE2B6F11F086ADE54EC4F9AE02/2B1A3764302A11F0B211AD0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:0f:5c:1e:07:99:ec:43:f5:b8:c5:29:dc:25:d9:39:17:
         d3:fd:ec:6b:22:bb:d9:ac:29:bd:73:5c:70:d7:dc:b3:a4:ee:
         25:8b:f5:06:29:2d:0f:07:76:29:45:d0:91:cf:8a:05:82:78:
         19:c6:18:e1:26:0e:9e:83:91:29:9c:cd:d3:68:7a:4c:7f:41:
         b8:30:7d:02:f5:36:e7:23:ea:09:2a:9b:f3:3d:00:86:f2:c2:
         56:8d:b9:4b:dd:38:00:68:f6:42:2c:58:9d:00:7b:9b:27:44:
         4f:34:f4:21:e0:53:55:a1:4c:b2:48:57:74:4f:63:63:46:68:
         95:b6:9f:8c:07:ef:8d:09:e2:be:bb:16:9e:b5:7b:c0:23:7e:
         39:67:d5:9a:61:a6:00:5a:fb:3f:d0:2f:5a:69:0e:57:78:eb:
         6b:19:da:b8:a2:18:be:9c:f7:61:5b:25:cf:7f:2d:8f:25:3c:
         03:c4:03:ad:df:fa:45:7d:8b:74:8b:80:d2:e4:c6:18:86:f4:
         ac:f4:55:3d:aa:aa:d2:f9:40:28:bb:d5:fd:0c:98:e9:60:20:
         da:b8:e2:84:43:d0:76:7a:ad:1a:9a:ab:cb:33:92:43:d1:6a:
         fe:9a:15:aa:ad:c6:93:66:b1:1d:8e:06:7c:27:7a:cc:90:35:
         c6:54:6b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:51 2026 by rpki-client