Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/DA700744185511F09304D972C4F9AE02.roa
File:                     DA700744185511F09304D972C4F9AE02.roa (raw, json)
Hash identifier:          esj/3vUrMHPqtCAfRwLH6nR9IZBIZp4+dFrygvFkia0=
Subject key identifier:   7A:5F:35:05:28:49:B9:29:15:09:C0:EF:41:6E:58:62:FA:4F:50:63
Certificate issuer:       /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial:       BC
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/DA700744185511F09304D972C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:24:37 +0000
ROA not before:           Tue 17 Jun 2025 04:49:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     151964
IP address blocks:        163.223.216.0/24 maxlen: 24
                          163.223.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
        Validity
            Not Before: Jun 17 04:49:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a45a35-c8ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9c:f3:e3:0e:6f:b7:0e:84:da:a7:eb:87:35:
                    18:e7:e9:3e:96:f3:7b:33:25:55:50:5a:55:05:88:
                    be:05:34:2f:3a:6e:3b:72:ef:cd:3f:0e:c9:2b:5f:
                    aa:36:04:96:d4:2a:75:c0:68:57:91:d5:cb:04:1d:
                    29:6f:d3:de:d0:9e:ee:f7:8d:0f:47:f2:a7:93:1f:
                    8d:a7:a1:0a:93:df:49:0e:6b:9c:4e:b6:af:73:d0:
                    52:0e:a4:34:45:13:ff:89:8a:a2:1b:1d:30:0e:96:
                    ea:7b:72:29:d6:bc:b1:47:4a:d7:9f:b5:31:86:ed:
                    07:3a:c8:44:c1:2e:92:fa:32:ba:36:c3:4b:58:7e:
                    1b:03:1e:fa:77:53:e4:9e:42:8a:ef:af:39:95:e0:
                    be:a5:94:63:82:1b:2e:eb:97:6f:a1:3b:7d:b4:7f:
                    46:fd:6f:53:68:40:9e:24:b7:61:7e:58:f3:27:77:
                    20:f5:c8:e3:57:6b:b8:44:f7:cf:9a:91:7d:54:3b:
                    e3:d8:4f:a8:d4:c4:cb:6c:de:68:d2:49:71:23:10:
                    75:cf:45:d2:9d:dd:03:08:5c:a7:49:f6:54:98:3d:
                    c7:89:f8:c5:9b:3a:65:6d:0e:7c:3d:f9:c0:d0:cc:
                    3e:05:c2:55:35:db:94:4e:7d:65:20:db:31:1e:23:
                    a7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5F:35:05:28:49:B9:29:15:09:C0:EF:41:6E:58:62:FA:4F:50:63
            X509v3 Authority Key Identifier:
                keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/DA700744185511F09304D972C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:37:f9:68:22:68:d3:b4:05:5d:5c:18:19:73:8d:f9:92:7d:
         37:0c:a7:6c:16:17:77:39:5f:a7:45:fa:17:45:4d:35:59:88:
         57:19:7f:90:0f:ef:99:ae:d9:95:48:b3:02:42:98:94:67:0d:
         1c:37:75:44:9a:8d:3c:13:29:8b:01:01:77:c6:3f:44:aa:e7:
         c2:da:e2:bc:0b:cd:76:70:25:dd:a1:77:59:9a:2c:78:68:43:
         2a:e4:bc:9d:b7:98:42:3f:b9:28:a9:c6:c7:cd:3a:87:09:39:
         0d:72:d8:2a:07:5f:61:66:65:da:85:7b:c0:37:7b:04:e1:7c:
         8b:42:9f:a4:53:be:9d:f5:ac:a7:40:b7:f8:2d:b2:2e:b6:ac:
         41:fe:e3:d4:a8:44:88:1e:45:72:02:bf:ae:89:b3:82:16:ab:
         bc:98:ff:d2:a4:31:ca:04:31:d3:11:ad:06:f5:fb:a5:f9:7e:
         27:e5:b0:30:77:67:a6:39:53:91:87:64:06:79:43:af:7e:f2:
         14:48:0d:af:ad:9d:24:18:a4:d6:c5:a5:54:42:d3:a8:e8:cc:
         a1:77:5f:da:a0:ec:1a:d2:2c:fe:d3:cf:52:f7:4f:ab:54:be:
         31:b9:2e:e9:a7:ac:21:83:3d:7e:d8:b8:8a:8f:4a:73:a9:11:
         a1:cd:27:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:21:36 2026 by rpki-client