Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/7642123CFC1E11F09B32FBF0396F56BC.roa
File:                     7642123CFC1E11F09B32FBF0396F56BC.roa (raw, json)
Hash identifier:          wUTlNG0rdIyQETsGArG5LUIh1oGp+IUhcG90GqZMJhg=
Subject key identifier:   66:79:1E:46:43:FC:E9:A5:08:6F:A1:D3:A6:2C:62:5B:80:E8:23:9D
Certificate issuer:       /CN=A9193EEE/serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
Certificate serial:       B6
Authority key identifier: 01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/7642123CFC1E11F09B32FBF0396F56BC.roa
Signing time:             Mon 02 Mar 2026 13:19:55 +0000
ROA not before:           Wed 28 Jan 2026 07:54:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     147181
IP address blocks:        163.227.6.0/24 maxlen: 24
                          163.227.7.0/24 maxlen: 24
                          2401:fba0::/48 maxlen: 48
                          2401:fba0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl
                          rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193EEE, serialNumber=015C82EF8F17F75D01F2A30678685DFDC25E1F7C
        Validity
            Not Before: Jan 28 07:54:53 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a58e7b-6332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:c2:ad:12:c4:0b:fa:30:b8:3c:38:64:cf:
                    8c:c4:1b:a5:cf:9b:45:4d:8f:25:cf:70:3e:ba:3d:
                    7f:20:29:15:a2:41:79:4d:97:f6:0e:b7:1b:cd:ad:
                    24:ae:37:19:1e:1c:b3:50:e5:ca:57:61:08:b3:8f:
                    98:6d:fa:bc:ab:5b:af:3a:db:b1:5b:2f:ef:78:95:
                    ec:49:96:2e:c9:f8:4b:2a:a6:a7:71:74:03:05:4e:
                    46:5d:a4:84:e0:f9:34:df:27:41:26:10:71:73:be:
                    c5:17:2f:a9:b2:40:d1:a5:19:e7:56:7b:00:a0:ca:
                    55:71:1d:fa:5b:9e:70:67:ea:cc:65:82:03:a6:73:
                    ca:71:8d:97:41:8e:32:0f:20:2d:27:0a:2d:e2:82:
                    e2:7a:f5:80:82:5b:13:70:87:8c:eb:97:e3:f5:2f:
                    f4:4e:8f:f2:9e:77:db:e2:a6:63:1a:5a:c6:80:3e:
                    d9:8e:5b:a0:4b:59:f1:91:47:1c:2c:83:eb:d1:ec:
                    db:be:a6:71:ae:02:8f:17:6a:e2:28:ed:4f:fc:c3:
                    f9:0d:dd:ea:86:d8:52:85:66:3a:a1:b3:b0:24:45:
                    99:c2:ee:df:a6:98:ae:e5:ab:8f:71:89:0b:d9:23:
                    b4:38:89:8d:b7:c4:66:fe:3e:fe:bb:f0:b6:cb:2f:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:1E:46:43:FC:E9:A5:08:6F:A1:D3:A6:2C:62:5B:80:E8:23:9D
            X509v3 Authority Key Identifier:
                keyid:01:5C:82:EF:8F:17:F7:5D:01:F2:A3:06:78:68:5D:FD:C2:5E:1F:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/AVyC748X910B8qMGeGhd_cJeH3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AVyC748X910B8qMGeGhd_cJeH3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193EEE/DBB89F9E152B11F0892FD481C4F9AE02/7642123CFC1E11F09B32FBF0396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.6.0/23
                IPv6:
                  2401:fba0::/47

    Signature Algorithm: sha256WithRSAEncryption
         2d:4f:61:ec:ab:d1:86:08:4c:44:b5:65:13:40:d9:f1:88:ab:
         18:d5:e7:d8:d4:0c:4f:3b:4a:2a:3c:71:0c:ea:87:b0:ba:ae:
         77:f0:86:6b:b3:29:63:87:6b:d6:1e:78:f8:de:88:fe:5d:b8:
         7e:4a:b3:bd:91:c2:67:c1:24:f3:4f:6d:05:86:08:4b:2d:c1:
         bf:26:f3:eb:a0:9c:64:53:aa:d7:8a:ba:74:5a:6d:55:8d:09:
         08:1e:e0:b2:d0:a4:18:e1:49:ff:bd:b6:a7:67:4e:82:ec:ee:
         a1:11:bf:e4:fe:d3:87:ba:52:c5:74:05:b6:c2:b4:4e:2b:3f:
         73:7d:61:f7:63:ca:50:0e:9e:a2:f0:8c:dd:e1:dd:32:8f:79:
         62:eb:7b:4e:9f:4c:ff:bd:39:31:a8:f1:06:64:9f:35:00:3b:
         ee:19:2a:64:f8:fe:2b:bb:5f:4b:57:5e:53:2a:cc:94:17:c7:
         5d:02:ec:35:45:3f:bc:4b:61:a0:b6:da:4d:b2:22:33:3b:8b:
         1c:71:f8:28:86:4a:d6:64:53:5c:5d:50:7a:c1:36:de:73:c6:
         b5:79:b9:bf:ce:ef:5f:f7:89:b2:22:af:64:34:45:12:99:cb:
         75:ea:10:49:ec:f0:e7:a5:0e:48:f4:51:e6:4b:27:4c:da:5c:
         cd:a0:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:34 2026 by rpki-client