Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/C24679DC741211F0808A8240C4F9AE02.roa
File:                     C24679DC741211F0808A8240C4F9AE02.roa (raw, json)
Hash identifier:          mnmEShTfHHr8jkJu+tgWkb3qWqXauPwn9ZXxFrRpLlE=
Subject key identifier:   88:C0:33:0D:D8:59:5B:3E:A6:34:87:FF:AC:00:2C:93:34:1F:C1:08
Certificate issuer:       /CN=A91AC5BC/serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
Certificate serial:       94
Authority key identifier: A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/C24679DC741211F0808A8240C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:20:04 +0000
ROA not before:           Fri 08 Aug 2025 04:47:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        163.223.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=A145241D9830AF24A71567351255EC8E7ED53EFE
        Validity
            Not Before: Aug  8 04:47:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a46733-37bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:70:6d:d2:30:79:6b:23:5c:4a:2e:23:38:
                    71:26:20:a1:8b:9d:2f:98:3f:df:ce:00:ee:8b:a1:
                    c0:28:ec:7a:63:1c:34:5e:c3:6c:11:97:f6:e9:4f:
                    9c:73:33:02:69:3f:fb:03:6a:df:05:8d:f3:e9:59:
                    a2:45:03:cd:cf:55:ac:23:dd:99:1e:53:55:50:66:
                    fd:23:ec:ca:94:50:98:65:c3:aa:1c:e6:31:db:f1:
                    6d:d5:42:8d:8d:39:da:ed:fd:2e:bf:99:fa:45:d1:
                    c6:65:b8:e8:34:c5:de:23:c4:ff:4a:37:af:dc:6d:
                    16:a2:8b:b7:b3:64:5d:24:24:11:ca:ea:78:ba:b1:
                    38:2c:0d:f6:33:a0:37:bc:c6:bd:fb:e8:54:85:25:
                    f3:25:9d:1f:55:4d:fe:0f:54:1d:e3:81:0e:a9:f1:
                    04:41:72:9c:7f:51:b9:87:be:36:e5:2b:3e:41:0b:
                    09:0c:66:96:66:61:0c:ab:8d:33:4d:3c:18:b8:38:
                    9c:88:d9:c8:8b:d8:55:74:1b:54:5c:99:5d:f4:dc:
                    a8:00:46:b1:e4:1e:5d:95:f8:42:14:be:76:62:b4:
                    f2:f0:35:30:68:df:10:29:60:1a:80:92:3b:ed:50:
                    d2:f4:3d:7c:84:c1:c4:78:5f:49:63:89:73:65:df:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:33:0D:D8:59:5B:3E:A6:34:87:FF:AC:00:2C:93:34:1F:C1:08
            X509v3 Authority Key Identifier:
                keyid:A1:45:24:1D:98:30:AF:24:A7:15:67:35:12:55:EC:8E:7E:D5:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/oUUkHZgwrySnFWc1ElXsjn7VPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUUkHZgwrySnFWc1ElXsjn7VPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/71E5D8BE59F211F0B4FAE95FC4F9AE02/C24679DC741211F0808A8240C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:a0:84:0b:19:fe:71:3e:8f:06:72:bf:7f:15:cc:0f:7d:46:
         aa:4b:ab:76:bd:f3:f4:be:cf:19:c7:0a:fa:b9:d2:31:3f:e4:
         0b:ba:d7:46:0a:13:20:fc:71:7d:a6:04:6d:10:a3:e6:02:25:
         03:34:c2:c4:a8:37:5b:12:80:9c:90:e6:4c:a7:14:18:54:fa:
         08:51:7c:78:0c:a8:73:74:ed:2a:aa:9e:d3:ce:fd:46:40:38:
         26:35:f9:a6:c3:74:5b:70:6b:fd:d7:83:27:27:25:3c:55:3c:
         ec:e0:35:7b:ec:3f:19:db:fb:ff:76:f5:a0:7b:8c:d2:2c:15:
         78:99:62:cc:95:81:b6:83:3f:94:2f:aa:8a:ca:e2:ce:d1:f1:
         42:5e:ef:93:48:e8:69:ba:72:be:21:d3:a2:e0:02:5f:c6:02:
         c2:af:cf:e6:38:a6:86:bb:63:51:85:7f:be:a8:f6:42:b1:74:
         f7:45:3e:62:d9:45:f9:f7:ac:99:f8:d5:df:cc:9b:59:6b:ef:
         31:02:5a:e2:9c:b7:83:23:0f:de:2a:68:26:12:67:6c:ba:9a:
         87:51:fb:03:09:36:79:c5:4b:bc:65:cb:76:d8:7e:19:7b:53:
         65:58:82:8f:a3:e7:1f:bd:5b:21:c0:47:0c:4e:14:b9:c3:a4:
         af:43:45:5d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM1QkMxMTAvBgNVBAUTKEExNDUyNDFEOTgzMEFGMjRBNzE1NjczNTEyNTVFQzhF
N0VENTNFRkUwHhcNMjUwODA4MDQ0NzE3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjczMy0zN2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkedwbdIweWsjXEouIzhxJiChi50vmD/fzgDui6HAKOx6Yxw0XsNsEZf26U+c
czMCaT/7A2rfBY3z6VmiRQPNz1WsI92ZHlNVUGb9I+zKlFCYZcOqHOYx2/Ft1UKN
jTna7f0uv5n6RdHGZbjoNMXeI8T/Sjev3G0Woou3s2RdJCQRyup4urE4LA32M6A3
vMa9++hUhSXzJZ0fVU3+D1Qd44EOqfEEQXKcf1G5h7425Ss+QQsJDGaWZmEMq40z
TTwYuDiciNnIi9hVdBtUXJld9NyoAEax5B5dlfhCFL52YrTy8DUwaN8QKWAagJI7
7VDS9D18hMHEeF9JY4lzZd/sLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIjAMw3Y
WVs+pjSH/6wALJM0H8EIMB8GA1UdIwQYMBaAFKFFJB2YMK8kpxVnNRJV7I5+1T7+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzVCQy83MUU1RDhCRTU5
RjIxMUYwQjRGQUU5NUZDNEY5QUUwMi9vVVVrSFpnd3J5U25GV2MxRWxYc2puN1ZQ
djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29VVWtIWmd3cnlTbkZXYzFFbFhzam43VlB2NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUM1QkMvNzFFNUQ4QkU1OUYyMTFGMEI0RkFFOTVGQzRGOUFFMDIvQzI0Njc5REM3
NDEyMTFGMDgwOEE4MjQwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo99IMA0GCSqGSIb3DQEBCwUAA4IBAQCMoIQLGf5xPo8Gcr9/FcwP
fUaqS6t2vfP0vs8Zxwr6udIxP+QLutdGChMg/HF9pgRtEKPmAiUDNMLEqDdbEoCc
kOZMpxQYVPoIUXx4DKhzdO0qqp7Tzv1GQDgmNfmmw3RbcGv914MnJyU8VTzs4DV7
7D8Z2/v/dvWge4zSLBV4mWLMlYG2gz+UL6qKyuLO0fFCXu+TSOhpunK+IdOi4AJf
xgLCr8/mOKaGu2NRhX++qPZCsXT3RT5i2UX596yZ+NXfzJtZa+8xAlrinLeDIw/e
KmgmEmdsupqHUfsDCTZ5xUu8Zct22H4Ze1NlWIKPo+cfvVshwEcMThS5w6SvQ0Vd
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:52:13 2026 by rpki-client