Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/E658E72CB4A611F08CEAB576C4F9AE02.roa
File:                     E658E72CB4A611F08CEAB576C4F9AE02.roa (raw, json)
Hash identifier:          LB1cMpp6lgRAraUuswM5qd18Dx/7M0dNMmnPvZo4tAw=
Subject key identifier:   9A:BA:92:FE:2A:F9:60:0C:6F:F0:90:0E:36:59:C8:BC:A4:44:B9:4A
Certificate issuer:       /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial:       DA
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/E658E72CB4A611F08CEAB576C4F9AE02.roa
Signing time:             Mon 13 Apr 2026 06:41:01 +0000
ROA not before:           Mon 13 Apr 2026 06:41:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     46559
IP address blocks:        163.223.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218 (0xda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
        Validity
            Not Before: Apr 13 06:41:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69dc8ffd-4c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:f4:ef:ff:ac:bc:35:79:76:7b:51:a2:6b:
                    57:7f:17:59:30:c7:af:c2:eb:12:84:04:d6:58:28:
                    8e:0c:d7:53:9b:b9:0e:cd:b6:0e:93:ee:aa:91:61:
                    b5:f1:87:19:07:3f:31:f6:84:b6:42:d0:9b:fc:49:
                    a9:c5:d2:b1:36:1b:21:f3:e8:ad:a4:1b:b2:3b:88:
                    cf:1a:4a:2d:02:c7:25:e3:8b:fe:fb:4b:af:20:9e:
                    9a:80:ee:62:4b:16:38:d0:7f:7b:e4:57:ce:0c:e0:
                    20:c0:4d:25:52:4f:88:ba:1e:19:af:a3:3b:d6:6a:
                    7d:ff:94:9d:76:2c:bb:f2:b3:dd:46:bc:83:27:73:
                    12:ef:75:9a:ae:bf:4d:e9:a9:6f:95:04:cc:64:6a:
                    38:55:0c:c8:03:b1:13:51:b0:a4:7d:11:9b:6b:19:
                    fe:fa:6b:a2:0e:63:df:28:30:49:64:7d:59:ad:68:
                    26:64:4e:25:27:57:59:8e:79:96:44:df:9a:b1:bc:
                    6e:c7:40:e1:7f:76:b1:4c:bf:88:cc:55:3a:f5:a5:
                    62:5a:1a:d0:cf:77:6e:b6:22:db:d2:c9:78:49:61:
                    d7:62:3e:21:ad:e2:1a:28:ab:c5:30:03:66:1b:7a:
                    3e:d6:7f:b6:3c:6d:6a:43:57:9f:2b:5c:30:e7:26:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BA:92:FE:2A:F9:60:0C:6F:F0:90:0E:36:59:C8:BC:A4:44:B9:4A
            X509v3 Authority Key Identifier:
                keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/E658E72CB4A611F08CEAB576C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:2d:74:6a:03:93:e2:19:c6:be:af:e6:49:94:dc:22:5e:ec:
         2c:b8:45:0c:1d:21:33:5e:91:b0:b4:bb:29:46:38:3b:98:14:
         3e:ba:84:5e:3e:e4:b3:73:08:f0:d1:db:c3:21:77:b7:91:ee:
         89:ab:c4:99:d9:0b:93:ce:b8:e8:d7:3e:95:9a:9d:09:76:f7:
         d5:45:0a:d6:a1:ab:f3:b9:74:fd:26:69:2f:ce:1a:c2:d1:0c:
         8f:cf:29:fa:5a:ee:5f:90:7a:da:ff:2c:16:9a:c4:a6:ea:30:
         1c:96:3d:07:94:c3:ce:9b:bb:76:bd:45:7b:88:63:d4:ad:55:
         7f:1b:4b:77:60:07:66:ca:de:91:12:9b:69:7a:e6:ac:90:15:
         f4:80:e2:83:91:49:7f:43:ef:fc:13:ac:eb:01:14:22:96:3d:
         07:39:72:2b:55:45:41:2e:93:29:96:85:69:0d:db:77:2a:ac:
         7f:17:ce:38:98:43:1f:fe:d7:06:e6:29:3d:14:74:de:3c:38:
         53:dd:c4:2b:84:e9:47:3c:a1:21:a5:f8:f9:3f:17:ee:2e:56:
         dd:6a:44:33:cf:98:85:ec:03:b9:b3:5c:6e:a9:b8:7c:e5:63:
         aa:b6:75:c2:aa:bd:b5:d8:08:34:1d:2a:a6:ce:21:d1:fa:ad:
         00:99:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:54:15 2026 by rpki-client