Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
File:                     3051CA240FBB11F0B9C1D274C4F9AE02.roa (raw, json)
Hash identifier:          nvz8XbFcLxgkpfB237Lbtk4e08aqr9uFKNDJJLY0z/U=
Subject key identifier:   8C:67:18:30:1D:5A:3C:83:27:ED:D5:E6:D2:9D:8D:B4:C2:D9:F7:F6
Certificate issuer:       /CN=A919A716/serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
Certificate serial:       AB
Authority key identifier: 25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:02:18 +0000
ROA not before:           Wed 02 Apr 2025 12:08:29 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     199695
IP address blocks:        163.223.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl
                          rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:28:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A716, serialNumber=25B0B3159BE90CF1A23B2521A52111FF03905EF7
        Validity
            Not Before: Apr  2 12:08:29 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3e47a-3182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:16:10:48:b8:0f:eb:5c:2b:5f:a5:1c:37:
                    db:9c:2a:4e:6b:54:81:6c:f2:e1:3a:02:82:8a:c1:
                    af:7a:6a:35:ea:c7:2e:c5:dd:45:1d:65:b0:a7:81:
                    de:04:75:5c:60:7d:4d:5e:1d:61:87:b4:ab:27:9f:
                    3c:06:b9:4c:a5:f7:31:10:0f:7f:4b:89:6c:5b:27:
                    fa:80:22:7d:21:53:81:5c:37:05:92:fb:45:e8:99:
                    0f:45:c7:a5:af:35:7f:f8:f7:31:13:81:a3:e9:46:
                    bd:31:d5:99:a7:02:49:fc:76:a3:e9:bd:65:90:62:
                    03:af:4a:cc:b2:ae:25:c6:7a:80:e7:32:c3:d7:fc:
                    d4:1e:36:16:92:b7:a8:81:5c:60:b9:ea:95:24:59:
                    30:79:bf:e1:8d:c4:58:73:13:c1:15:e0:7f:ec:e9:
                    cd:dc:a0:9f:91:99:1d:31:b4:1c:8c:55:28:b9:79:
                    7c:d7:fa:27:16:a6:c7:e5:bb:fe:41:d6:e5:1d:12:
                    dd:98:4d:7d:6e:37:1d:ed:04:57:ed:f2:e6:8f:79:
                    7e:91:e2:f7:8f:8d:e2:e4:7b:92:55:e7:bf:b4:6a:
                    64:9d:ee:4f:94:60:92:85:f8:3d:60:ce:07:49:b3:
                    07:53:30:16:c8:d6:ca:e9:3c:33:73:2a:b2:f3:90:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:67:18:30:1D:5A:3C:83:27:ED:D5:E6:D2:9D:8D:B4:C2:D9:F7:F6
            X509v3 Authority Key Identifier:
                keyid:25:B0:B3:15:9B:E9:0C:F1:A2:3B:25:21:A5:21:11:FF:03:90:5E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/JbCzFZvpDPGiOyUhpSER_wOQXvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JbCzFZvpDPGiOyUhpSER_wOQXvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A716/6019D3FC0F9B11F0ABC84074C4F9AE02/3051CA240FBB11F0B9C1D274C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:1b:ba:43:ea:6d:fe:a0:61:b9:63:4a:06:a2:92:a6:22:
         19:8e:cd:f9:d6:94:34:c1:fa:f7:bb:6b:32:95:53:48:4c:f6:
         e4:3c:81:2a:df:35:36:a4:87:e4:1f:25:d9:73:23:46:20:de:
         53:58:f3:d1:58:a5:d6:74:1d:42:48:4a:5d:66:40:e6:1d:e6:
         67:4d:f1:91:82:a0:89:7b:42:c6:fc:1c:36:35:40:bd:b2:a0:
         c3:79:79:0a:7f:50:6b:3c:16:67:ea:9c:c8:53:e6:d6:b2:48:
         18:42:3e:ac:f7:bf:fc:1b:03:41:83:67:a5:8e:4e:ec:61:67:
         16:ed:90:12:ed:20:e6:59:bc:83:0f:d5:84:1d:95:94:ed:6b:
         de:09:4e:2f:db:36:a3:d1:ee:ad:07:c1:23:93:50:e7:cd:f5:
         1d:00:16:36:b3:b2:67:90:27:47:a8:bd:75:21:03:35:31:60:
         85:dd:ba:df:b3:60:55:3c:b5:33:37:3d:13:75:50:d0:d3:e7:
         aa:29:6f:82:e0:c7:90:28:82:ef:71:ed:79:af:2d:e8:34:7b:
         f1:58:bb:10:1a:b4:21:86:37:fe:fe:6d:73:c2:07:65:22:8b:
         54:c6:f8:ea:94:ea:a6:45:d2:a2:36:51:0f:b9:6e:2d:a2:34:
         b1:b1:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:45 2026 by rpki-client