Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/301DED0C86F911F08DBDFA61C4F9AE02.roa
File:                     301DED0C86F911F08DBDFA61C4F9AE02.roa (raw, json)
Hash identifier:          vsIGVvlGCJQuRvbSj+mUc0cTXNJknUlsD/Soxx53ucA=
Subject key identifier:   9B:4B:2A:26:6A:9C:29:AE:0B:C8:14:74:29:16:A7:CF:ED:DA:45:A7
Certificate issuer:       /CN=A91A5FCF/serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
Certificate serial:       A3
Authority key identifier: 98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/301DED0C86F911F08DBDFA61C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:07:40 +0000
ROA not before:           Mon 01 Sep 2025 06:02:06 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl
                          rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5FCF, serialNumber=98AE956D426E1602CED8BB72588F62A3DA12A955
        Validity
            Not Before: Sep  1 06:02:06 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f3cc-5632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:72:53:68:42:23:3a:2c:4f:cc:25:d3:8a:
                    bf:5e:d5:ed:5f:28:0b:dd:ad:cd:b3:3e:c6:c9:bb:
                    24:e6:2d:1d:f9:29:9d:3a:24:60:54:61:e4:4c:bf:
                    2c:5a:2f:ac:73:31:55:5f:3f:3d:c6:d0:d6:0b:d5:
                    54:2b:0b:65:47:be:08:97:40:c6:f9:a3:6c:e1:44:
                    6a:ce:1d:a9:21:13:30:88:81:db:45:35:4e:ef:35:
                    fc:49:26:82:6b:76:e1:2c:5b:f7:53:f5:bd:f7:41:
                    95:54:ba:a1:d5:29:25:f5:d9:89:dd:68:0d:84:86:
                    e8:46:d3:e3:09:d2:37:f2:e7:b1:f5:a1:91:4f:64:
                    98:f3:1d:b0:f1:a0:9f:c9:c4:4e:84:d0:7b:c9:5d:
                    35:9f:12:3d:0f:ad:ff:7d:be:e2:0a:91:42:92:a8:
                    0b:3a:33:9f:0b:fb:24:5f:af:c6:26:20:9f:e5:c8:
                    f4:31:33:64:02:e0:11:bf:2e:f5:50:63:48:51:7c:
                    2a:cf:f5:a4:2d:68:31:1f:2c:44:11:95:f2:b6:c2:
                    7a:7f:a1:a5:d0:7e:bd:50:e8:98:67:f5:ac:cc:fc:
                    88:d8:59:e0:29:ac:a6:a8:18:29:b0:26:e3:8c:02:
                    f0:11:48:a5:60:5e:13:14:ab:5a:d1:22:97:d8:d1:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4B:2A:26:6A:9C:29:AE:0B:C8:14:74:29:16:A7:CF:ED:DA:45:A7
            X509v3 Authority Key Identifier:
                keyid:98:AE:95:6D:42:6E:16:02:CE:D8:BB:72:58:8F:62:A3:DA:12:A9:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/mK6VbUJuFgLO2LtyWI9io9oSqVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mK6VbUJuFgLO2LtyWI9io9oSqVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5FCF/B84C603A1E5F11F09E6A6B4FC4F9AE02/301DED0C86F911F08DBDFA61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:ee:4f:f7:9b:e5:21:23:1a:6c:1e:f2:3d:61:50:16:fd:
         9a:4b:a8:1a:01:ba:60:89:52:54:33:ab:e5:a2:31:0e:2f:79:
         f9:b0:fa:b5:15:3d:e8:dc:96:fd:e8:db:06:7a:e0:8d:f6:7b:
         67:73:b8:fc:d5:28:d0:06:0e:e9:32:6c:d7:a5:4a:e3:2b:00:
         c3:66:14:61:ac:48:1f:8e:15:a4:12:99:28:36:3e:4b:38:ee:
         0e:dd:ed:7f:7d:90:ca:75:8a:77:eb:26:a6:fb:5a:5e:12:5b:
         d7:26:33:83:3d:bf:e7:e4:97:f7:18:1d:b2:a0:13:cb:09:bd:
         70:55:68:7a:42:12:45:e7:3c:35:b6:9e:a3:7b:36:9d:55:e5:
         c7:cb:b3:83:e4:08:41:36:36:ec:7b:6d:34:6a:bb:66:ef:57:
         e2:50:51:f9:fb:17:f4:83:a6:fe:d2:dc:f0:b8:1e:d7:93:dd:
         53:12:b1:1c:f3:b3:d2:84:12:37:d6:e8:cd:2d:6f:de:f9:62:
         5d:fc:6f:a9:7f:55:9b:0d:5c:02:f0:df:3f:b3:33:50:25:a4:
         6d:84:97:77:2f:70:71:1d:da:31:79:67:61:85:01:63:35:9e:
         6f:7b:96:5e:1a:a7:99:ef:32:21:f7:6a:4a:18:d9:ba:81:85:
         1e:94:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:52 2026 by rpki-client