Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/B015DEC49D0211F0992DA43DC4F9AE02.roa
File:                     B015DEC49D0211F0992DA43DC4F9AE02.roa (raw, json)
Hash identifier:          2iUKMhz07cGysLco5d1V7oMpfZkixvqFHBDyH/7WAK4=
Subject key identifier:   17:17:0A:29:39:C5:C3:0C:BF:66:99:14:22:DD:E3:58:8D:47:F0:7F
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       95
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/B015DEC49D0211F0992DA43DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:20:05 +0000
ROA not before:           Mon 29 Sep 2025 07:05:32 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153686
IP address blocks:        163.223.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Sep 29 07:05:32 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46734-dd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:fa:fc:17:98:a7:ce:99:99:a9:38:c9:dd:
                    67:35:0b:f2:61:af:5c:ea:45:6c:7f:d4:5d:1f:ff:
                    c2:99:68:28:a0:a2:6a:46:2b:dc:d1:7e:e2:41:a7:
                    38:ca:52:7f:62:8b:68:39:4c:66:f0:f2:95:67:c4:
                    66:7e:27:37:f8:1a:27:38:76:a3:1e:0e:09:5c:d1:
                    b0:a5:00:3e:20:e3:76:48:08:40:98:5c:7a:0c:15:
                    d7:5f:01:32:f3:c6:16:34:9f:ee:91:f5:64:27:90:
                    fe:c0:78:06:53:b1:68:43:29:4b:56:43:5e:4d:97:
                    4e:b7:bc:11:8f:d9:88:71:b9:ea:6d:91:7d:12:8e:
                    55:bb:77:65:e0:f9:a9:7f:1c:8c:b0:2c:14:25:6c:
                    47:d1:d5:e7:cf:19:d4:f8:5c:f2:d3:06:41:64:07:
                    da:8c:71:ae:9c:fe:a3:9f:2c:0a:06:c3:d7:93:d8:
                    cd:1a:03:7b:3f:c6:7c:86:5b:19:e1:9c:76:94:f9:
                    d6:b9:1e:57:6e:88:a5:ad:75:38:af:04:94:ae:fd:
                    80:c7:d9:01:14:fe:2e:85:b8:c3:76:89:81:d5:4e:
                    cd:81:d9:88:02:e3:1e:9a:26:58:d4:44:77:46:9c:
                    89:46:63:b0:19:64:dc:67:7b:f2:17:21:a5:34:63:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:0A:29:39:C5:C3:0C:BF:66:99:14:22:DD:E3:58:8D:47:F0:7F
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/B015DEC49D0211F0992DA43DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:46:ef:e8:bf:17:35:db:80:88:ce:4b:b0:d6:1c:2c:0d:e1:
         3b:6f:a2:0a:2c:b3:0b:ee:ec:e0:90:2d:30:a3:42:03:5e:cf:
         c1:24:ef:48:51:21:a3:62:f6:80:c3:b9:8b:a1:7c:72:70:26:
         87:5f:ec:84:76:43:4d:7b:a3:ee:49:30:41:aa:1c:00:7f:d2:
         46:76:8e:24:d3:67:73:1e:a3:a6:76:9e:86:3d:5c:2f:c9:1c:
         52:6e:ec:42:a9:ca:91:e8:2b:30:cd:a6:4b:60:6f:fb:b0:a4:
         5c:6d:b0:70:1c:12:f4:94:50:20:af:a6:32:03:ff:c1:2a:7c:
         5b:0e:4e:6d:3b:dd:88:d0:f6:fe:1d:a9:4b:0d:25:55:34:cb:
         f1:84:b3:57:17:30:eb:7a:af:27:ae:eb:74:2d:8f:4d:e4:70:
         de:b9:a1:c3:4b:03:d9:43:59:fe:7c:cc:3f:e9:36:4c:ff:93:
         c3:da:e1:d9:95:b3:b0:a7:bb:33:e5:86:1b:9b:3d:ee:3d:41:
         da:8d:2b:e8:ab:0a:38:47:be:26:8d:53:6c:f0:d5:9b:09:3d:
         8e:3d:9b:d3:d3:96:62:25:44:ab:8f:22:b2:ee:74:f7:0e:1e:
         07:db:63:54:49:1a:4b:c7:a8:55:57:25:33:5a:ba:78:36:22:
         42:c7:45:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:29 2026 by rpki-client