Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/9EA99558465511F08EDD9E3EC4F9AE02.roa
File:                     9EA99558465511F08EDD9E3EC4F9AE02.roa (raw, json)
Hash identifier:          ud8rGygKTNA59+PxsSfe95V/l89q+3sD2+Ze4hyyf7M=
Subject key identifier:   DF:BE:7A:7C:DE:84:A9:06:47:43:CD:3C:32:23:3E:E4:6F:65:DF:5F
Certificate issuer:       /CN=A91D22E7/serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
Certificate serial:       89
Authority key identifier: EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/9EA99558465511F08EDD9E3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:10:04 +0000
ROA not before:           Tue 10 Jun 2025 23:49:59 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153855
IP address blocks:        163.227.244.0/23 maxlen: 24
                          2402:760::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl
                          rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D22E7, serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021
        Validity
            Not Before: Jun 10 23:49:59 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3f45b-bdd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:22:22:df:45:36:73:e9:08:66:3a:62:5f:
                    56:ed:a9:49:57:1b:59:2e:cb:d7:5d:11:22:32:4d:
                    65:da:36:b7:83:59:2a:a2:e5:de:d6:9f:52:a6:ac:
                    49:b9:0c:84:7f:9e:be:58:4d:b1:a4:d8:bf:25:af:
                    e1:3f:77:56:24:17:44:37:d0:5a:44:d4:58:eb:ed:
                    10:b4:92:bc:d9:3a:ef:0a:85:64:11:75:15:ca:91:
                    db:6d:c1:85:b5:c1:f9:fc:ca:73:03:12:69:cb:8a:
                    13:4c:71:90:80:8f:0c:dd:b3:aa:3f:f6:7a:b1:ee:
                    ff:d9:7c:73:ad:dd:f6:1c:b1:87:74:05:82:f6:c7:
                    0d:6b:2e:e6:55:aa:ab:88:66:62:e5:ca:ad:54:72:
                    ec:c7:08:7e:c4:2a:1c:a3:c4:73:23:c5:f5:f2:dc:
                    4b:68:8d:c2:1f:af:52:e8:e2:10:c2:47:94:1e:8c:
                    ff:a1:89:67:e7:7a:c2:53:a1:37:dd:f7:54:b9:de:
                    6b:66:37:dc:ff:cd:88:af:a5:09:b6:b0:3a:b8:6b:
                    32:3c:7b:03:0c:88:bf:54:b8:37:7d:90:6c:8a:a6:
                    e3:07:94:7f:a4:d7:de:67:8a:2c:4e:d1:68:d1:db:
                    49:81:f8:71:36:7d:16:7e:ea:1d:96:6d:b8:96:bc:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:7A:7C:DE:84:A9:06:47:43:CD:3C:32:23:3E:E4:6F:65:DF:5F
            X509v3 Authority Key Identifier:
                keyid:EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/9EA99558465511F08EDD9E3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.244.0/23
                IPv6:
                  2402:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:b2:1a:d3:38:c2:dd:da:6a:18:15:fa:87:96:58:8e:87:c0:
         10:0a:7d:56:f4:e8:e9:31:8a:46:13:77:e2:c9:d7:a5:00:33:
         5b:9a:1f:a2:e8:7b:85:13:f2:27:14:64:e5:5f:5b:a0:04:80:
         71:0d:69:af:da:70:8b:67:7b:3b:4b:33:fe:54:91:08:99:49:
         cf:ba:62:f0:09:b2:30:fd:15:53:de:23:75:44:c7:d7:57:a8:
         31:81:16:9b:2f:ca:f0:4d:1e:83:24:80:57:24:0f:30:cb:39:
         67:c9:61:da:dd:d5:91:5d:15:38:d3:4f:25:08:fc:0b:98:3e:
         d7:eb:52:3b:d3:53:4c:df:30:a3:bb:df:f5:48:90:d3:dc:55:
         31:e7:6a:aa:f3:3d:f4:68:29:f1:25:85:2b:7c:09:e1:c9:8b:
         43:dc:f9:85:c1:2c:10:f1:85:85:e0:d3:d4:5e:f4:f5:2b:e7:
         f4:77:9c:20:2b:a2:20:15:28:fb:45:e8:50:23:8a:a6:9f:70:
         2c:5c:3e:44:11:45:bd:b5:87:b2:51:fd:35:f2:4c:f3:3f:5e:
         00:af:f2:b7:98:13:f1:1e:a2:6f:e2:bd:ff:6d:dc:6e:45:58:
         51:79:75:ee:9c:89:60:1b:91:21:66:ea:88:52:36:d3:cd:8e:
         42:7c:8f:76
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDIyRTcxMTAvBgNVBAUTKEVBQTgxNDdCQ0Q3RTU4NDQ0RUZCNjNGQzJBQzdENUE5
MUNCRkEwMjEwHhcNMjUwNjEwMjM0OTU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZjQ1Yi1iZGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtAciIt9FNnPpCGY6Yl9W7alJVxtZLsvXXREiMk1l2ja3g1kqouXe1p9SpqxJ
uQyEf56+WE2xpNi/Ja/hP3dWJBdEN9BaRNRY6+0QtJK82TrvCoVkEXUVypHbbcGF
tcH5/MpzAxJpy4oTTHGQgI8M3bOqP/Z6se7/2Xxzrd32HLGHdAWC9scNay7mVaqr
iGZi5cqtVHLsxwh+xCoco8RzI8X18txLaI3CH69S6OIQwkeUHoz/oYln53rCU6E3
3fdUud5rZjfc/82Ir6UJtrA6uGsyPHsDDIi/VLg3fZBsiqbjB5R/pNfeZ4osTtFo
0dtJgfhxNn0Wfuodlm24lrwVuQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFN++enze
hKkGR0PNPDIjPuRvZd9fMB8GA1UdIwQYMBaAFOqoFHvNflhETvtj/CrH1akcv6Ah
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjJFNy8xMDNDOEExNDQ2
NTUxMUYwQjdDQzFDM0FDNEY5QUUwMi82cWdVZTgxLVdFUk8tMlA4S3NmVnFSeV9v
Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZxZ1VlODEtV0VSTy0yUDhLc2ZWcVJ5X29DRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDIyRTcvMTAzQzhBMTQ0NjU1MTFGMEI3Q0MxQzNBQzRGOUFFMDIvOUVBOTk1NTg0
NjU1MTFGMDhFREQ5RTNFQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM
BAIAATAGAwQBo+P0MA0EAgACMAcDBQAkAgdgMA0GCSqGSIb3DQEBCwUAA4IBAQBf
shrTOMLd2moYFfqHlliOh8AQCn1W9OjpMYpGE3fiydelADNbmh+i6HuFE/InFGTl
X1ugBIBxDWmv2nCLZ3s7SzP+VJEImUnPumLwCbIw/RVT3iN1RMfXV6gxgRabL8rw
TR6DJIBXJA8wyzlnyWHa3dWRXRU4008lCPwLmD7X61I701NM3zCju9/1SJDT3FUx
52qq8z30aCnxJYUrfAnhyYtD3PmFwSwQ8YWF4NPUXvT1K+f0d5wgK6IgFSj7RehQ
I4qmn3AsXD5EEUW9tYeyUf018kzzP14Ar/K3mBPxHqJv4r3/bdxuRVhReXXunIlg
G5EhZuqIUjbTzY5CfI92
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:49:10 2026 by rpki-client