Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/AF69D6BA4C0311F08D3CD93AC4F9AE02.roa
File:                     AF69D6BA4C0311F08D3CD93AC4F9AE02.roa (raw, json)
Hash identifier:          PTHb8KOhzoM5eTge4HROU2y+Kqm/UI2CnopwB3CICmY=
Subject key identifier:   B3:AC:AC:3B:E7:6F:8B:A1:30:F2:76:16:0B:0F:EC:DE:FB:9C:D7:F7
Certificate issuer:       /CN=A91D17E6/serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
Certificate serial:       A3
Authority key identifier: 16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/AF69D6BA4C0311F08D3CD93AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:07:28 +0000
ROA not before:           Wed 18 Jun 2025 05:18:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     17660
IP address blocks:        163.227.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl
                          rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D17E6, serialNumber=162CCE86E2A3697E918B7CB5D56DA0A002C79371
        Validity
            Not Before: Jun 18 05:18:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f3c0-9a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:87:44:f4:6b:0f:1a:87:52:df:85:68:a8:04:
                    d7:33:ca:7d:47:b9:d3:8e:df:a8:3d:eb:5b:0d:0d:
                    76:27:59:ad:b8:0f:21:83:91:05:dc:36:d4:d4:65:
                    31:d5:0f:5b:fe:c2:17:70:c0:9c:74:df:14:d7:c3:
                    75:4d:98:02:89:09:0a:06:54:7f:9c:0c:db:f5:00:
                    86:57:24:a2:c0:7a:bb:72:83:4f:61:e7:26:7d:6a:
                    54:33:30:a4:9b:8f:ea:25:98:b6:92:d9:39:56:78:
                    1e:4b:3e:49:2b:79:3a:e3:05:d3:aa:0a:37:0e:5b:
                    31:67:7b:9c:6b:e4:b5:e3:d5:02:b7:26:66:e5:fb:
                    2a:e1:6d:ed:71:76:68:df:8d:6d:62:5a:9e:db:17:
                    50:81:7b:55:f1:77:32:bd:6f:13:fb:ef:60:fe:47:
                    a6:4b:00:8b:68:7b:52:f9:e6:f6:d6:38:4f:15:f9:
                    4f:23:53:c5:89:a1:95:4b:8c:ae:5d:11:33:38:0c:
                    33:e1:67:3b:ef:b6:52:d0:ad:9e:af:83:00:78:88:
                    d8:e7:2f:1e:15:e6:75:ab:f5:03:1c:59:b1:09:17:
                    ef:a5:05:46:06:82:de:3b:44:ba:dc:2f:2b:04:41:
                    0d:73:be:e6:57:95:83:a1:4b:72:7f:3a:46:aa:d4:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:AC:AC:3B:E7:6F:8B:A1:30:F2:76:16:0B:0F:EC:DE:FB:9C:D7:F7
            X509v3 Authority Key Identifier:
                keyid:16:2C:CE:86:E2:A3:69:7E:91:8B:7C:B5:D5:6D:A0:A0:02:C7:93:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/FizOhuKjaX6Ri3y11W2goALHk3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FizOhuKjaX6Ri3y11W2goALHk3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E6/0594FAE21E5F11F09518664DC4F9AE02/AF69D6BA4C0311F08D3CD93AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:ac:64:e1:ce:c6:c3:2a:58:0f:cf:a6:41:20:90:df:fd:05:
         1e:b0:34:4a:51:27:6c:5d:53:d6:8d:e7:78:af:19:24:44:21:
         a9:bf:8a:4d:76:ca:bf:f5:67:72:a0:c0:a3:5a:c4:4b:9e:e3:
         90:34:8e:03:d1:1e:31:7e:e9:c9:b7:e1:ab:7e:29:85:16:99:
         ad:c5:7c:e7:42:34:30:d0:fe:47:24:ea:78:9c:a0:eb:10:e3:
         86:c0:28:9f:cd:6d:81:37:fb:7d:86:2c:82:0b:cf:fa:ec:0f:
         c1:a1:74:d6:97:62:ba:1b:61:16:ee:26:61:9b:8a:5c:bd:f1:
         63:9f:8a:2b:b9:bc:c4:db:d3:d1:00:61:f5:3e:5a:f1:01:d6:
         88:1a:db:50:31:95:fc:3c:b6:8b:b3:0f:25:50:b9:99:d3:60:
         3e:60:71:09:ca:f8:41:26:21:49:2c:87:cf:74:1c:c1:6d:44:
         c6:58:25:5c:3d:93:94:7e:be:a6:05:45:94:29:c3:da:11:de:
         95:90:4e:6e:d2:44:aa:71:eb:a5:22:25:50:d6:4d:0a:c9:a8:
         2f:03:34:b9:1b:3d:fb:60:83:83:88:2b:b1:b5:26:f6:2d:23:
         bb:5a:f3:04:ed:ac:59:13:39:10:cd:3f:b1:cd:ac:74:90:92:
         11:af:f6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:11 2026 by rpki-client