Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/C24679DC741211F0808A8240C4F9AE02.roa
File:                     C24679DC741211F0808A8240C4F9AE02.roa (raw, json)
Hash identifier:          N7HLFHANn01+NhgR1Pjfm0vM2oOkPaw9sH4Q3c5dgnI=
Subject key identifier:   6F:6C:D2:1D:4C:F5:BB:BB:49:A3:F4:6C:FB:B6:A7:69:81:DD:DE:40
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       B2
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/C24679DC741211F0808A8240C4F9AE02.roa
Signing time:             Thu 09 Apr 2026 07:42:22 +0000
ROA not before:           Thu 09 Apr 2026 07:42:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     8075
IP address blocks:        163.223.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Apr  9 07:42:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d7585e-3e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:41:18:32:d7:fd:b7:90:d1:b8:33:a5:60:88:
                    12:37:7b:9f:b9:ae:eb:b7:28:f9:66:1f:53:e6:93:
                    79:4c:7b:30:1e:e1:71:60:42:3b:1f:56:c4:fa:25:
                    8a:fb:ac:fa:f3:f2:df:d9:ec:86:c4:f4:af:c2:11:
                    99:cf:59:46:2a:5e:23:0f:1f:70:0f:e9:03:bc:f4:
                    ea:55:5c:8c:18:09:a7:71:77:b0:f5:0c:69:6e:25:
                    2e:4a:ff:cf:63:be:c2:d3:be:1a:c8:c9:f8:db:04:
                    49:01:a5:29:70:58:dd:bc:cb:e5:3c:9b:9d:c9:2c:
                    55:82:d7:69:08:68:40:b0:0b:f7:7d:52:86:aa:df:
                    ec:1a:57:0e:57:4d:b0:3e:41:be:69:12:58:ef:5f:
                    95:c2:61:57:79:ef:81:1d:4f:b5:86:b0:c6:cf:af:
                    30:83:72:cc:16:bf:64:26:7c:cb:9d:c4:a2:20:e4:
                    73:a7:34:c4:96:23:4c:71:a5:0e:70:94:19:7b:46:
                    c2:7b:90:49:8c:75:14:8e:a8:2d:97:88:06:4b:18:
                    12:5e:67:f2:9e:49:21:b1:b2:5b:c0:99:5a:45:91:
                    97:25:1e:b2:c1:47:b8:1f:9b:96:c0:37:35:bd:60:
                    1b:4d:c3:5f:a7:f3:cd:77:5e:af:98:59:36:6a:c5:
                    07:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:D2:1D:4C:F5:BB:BB:49:A3:F4:6C:FB:B6:A7:69:81:DD:DE:40
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/C24679DC741211F0808A8240C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:b5:ce:04:a9:7e:aa:4e:f7:a9:a6:2f:62:10:0a:55:f1:02:
         4c:8d:08:41:87:d0:f8:b1:5d:f6:76:0a:df:ca:46:82:ba:94:
         3e:ee:6f:c9:75:cf:00:67:a2:b5:a6:04:42:26:11:75:c1:68:
         89:bb:19:f4:50:d7:f0:2e:29:44:20:7d:14:12:45:51:d7:9c:
         55:b6:5e:1a:30:d0:35:96:61:9f:97:75:2a:97:c0:b2:d3:cd:
         c0:b7:77:0a:02:fa:d8:5b:16:05:82:fa:72:59:5e:48:ef:b9:
         3b:cf:74:ae:24:d1:94:15:c7:28:3b:f4:1a:52:ef:9c:69:3a:
         83:cf:ef:bb:e4:e0:31:c6:af:f3:dd:e1:e9:95:46:ac:cb:f3:
         3c:a2:2f:a9:1f:fe:f8:5c:de:f1:82:bd:16:97:4c:96:a8:2d:
         c0:be:b6:9f:a4:d3:d4:0d:af:3d:30:34:28:c5:f1:36:fd:c9:
         cd:d0:ce:49:db:bd:2b:09:5e:8e:ae:10:63:4a:af:f2:9e:fd:
         81:bc:aa:1c:a9:e8:72:68:29:13:85:e4:a7:d5:f4:08:79:8c:
         18:64:1d:c9:0c:08:4a:d9:e8:2a:1b:36:db:73:dd:39:e3:d4:
         90:15:8d:08:c9:d8:c3:60:1a:69:b3:a0:86:45:26:b1:1f:d2:
         91:af:ad:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:29 2026 by rpki-client