Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/5905CBAEDFE111F083058845556F56BC.roa
File:                     5905CBAEDFE111F083058845556F56BC.roa (raw, json)
Hash identifier:          Ep0ZjILGTIRguDCqf/7ebqhYEj4n0HP0tW0NEv654xk=
Subject key identifier:   B8:D8:26:EC:05:6E:6F:40:90:20:82:11:29:BA:75:A9:36:6A:40:7E
Certificate issuer:       /CN=A91B8070/serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
Certificate serial:       D4
Authority key identifier: 4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/5905CBAEDFE111F083058845556F56BC.roa
Signing time:             Thu 09 Apr 2026 06:42:19 +0000
ROA not before:           Thu 09 Apr 2026 06:42:19 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     216411
IP address blocks:        163.223.38.0/23 maxlen: 23
                          163.223.38.0/24 maxlen: 24
                          163.223.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl
                          rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8070, serialNumber=4EFB93B49BF1BA56008DFC60608B5216AEC99AC6
        Validity
            Not Before: Apr  9 06:42:19 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d74a4b-977f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6a:3b:9b:f7:38:cd:4d:65:c4:87:57:bc:d4:
                    d8:20:c6:ed:cd:ec:82:9b:78:f7:1b:7d:e9:86:aa:
                    90:8c:bd:43:39:c0:9f:d0:ef:3c:11:fd:3f:71:1e:
                    9d:60:6a:52:5e:f7:43:54:bb:61:0a:56:40:56:fb:
                    eb:0c:b2:7d:38:62:4b:5e:2c:c2:a0:51:85:75:ed:
                    a0:12:bc:e8:9b:1f:99:91:c9:c7:c8:bc:54:9e:31:
                    91:28:6e:ee:f9:a4:da:ba:e5:dc:08:bd:2d:94:2f:
                    2c:b1:1a:a4:17:db:c9:40:23:14:58:8a:6a:9e:75:
                    63:b1:e0:53:3f:74:b8:34:8c:2e:89:b3:12:e5:a5:
                    96:28:91:c6:49:4d:fd:e9:4a:94:50:9f:e8:3e:7b:
                    50:fe:ee:75:2e:e4:c3:6d:25:34:9d:c7:21:cb:9d:
                    25:b7:fa:cd:48:94:b5:67:d6:cd:85:e5:b2:58:cd:
                    94:03:fc:67:79:94:55:41:87:47:64:e2:8f:9a:f4:
                    5e:7f:84:80:5b:57:b5:f9:a2:cb:0f:91:e7:35:35:
                    3f:3e:75:d9:f3:e9:12:e3:43:d0:a2:54:70:ba:75:
                    2d:fc:af:8d:e0:c8:38:d0:e2:2c:17:d7:f7:5c:c3:
                    42:3f:f0:93:e1:ab:27:3a:b3:5f:98:32:96:e2:17:
                    63:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:26:EC:05:6E:6F:40:90:20:82:11:29:BA:75:A9:36:6A:40:7E
            X509v3 Authority Key Identifier:
                keyid:4E:FB:93:B4:9B:F1:BA:56:00:8D:FC:60:60:8B:52:16:AE:C9:9A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/TvuTtJvxulYAjfxgYItSFq7JmsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TvuTtJvxulYAjfxgYItSFq7JmsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8070/AE364696138411F0BC5F4547C4F9AE02/5905CBAEDFE111F083058845556F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:90:dc:23:0f:4c:5e:aa:14:59:51:24:92:ca:41:b0:cf:
         3a:05:d9:ed:2a:c7:51:29:9e:4c:44:e6:39:90:97:82:fa:f8:
         64:c7:2e:3c:37:5e:29:10:08:04:a8:f7:43:46:62:a4:cd:94:
         83:b9:1f:a7:4c:bb:4f:c2:81:13:1d:5d:e6:a7:81:69:2d:d2:
         65:24:06:f0:32:34:45:3e:c6:ed:18:57:3f:b1:7d:c2:20:c9:
         af:22:be:19:07:8e:04:ea:72:1e:a0:c9:3e:18:02:90:7f:a9:
         a4:ec:ab:ff:8b:66:e7:42:9e:16:5b:a7:f3:91:11:c3:22:94:
         6d:fc:5c:94:7f:2c:e1:66:83:b8:45:7d:98:5f:b6:d5:a9:99:
         27:6c:14:c1:81:00:8d:16:4d:81:62:43:cb:d2:75:c9:d4:4e:
         fb:8f:17:27:ac:9a:92:2f:32:3d:58:cf:b6:e7:6f:c2:e4:90:
         9c:b6:96:60:15:b1:9a:da:bf:e7:bd:1e:ee:26:1b:16:49:eb:
         3f:05:c1:d6:98:f3:17:ed:02:4f:9e:64:92:05:9a:40:2a:11:
         c6:b7:41:7a:90:c6:07:cc:d3:6f:a0:9f:47:eb:f7:8d:2c:8c:
         46:61:f6:cc:6c:11:4e:0f:a5:2b:20:87:33:0d:8b:1a:48:53:
         3f:fd:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:35 2026 by rpki-client