Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/EB551A522F0311F19C1B78ED96833773.roa
File:                     EB551A522F0311F19C1B78ED96833773.roa (raw, json)
Hash identifier:          wGOSXhgMacHwlXGnpL8wWQQ1qcnmdzrNpMqajib3dOE=
Subject key identifier:   FF:8F:CD:38:63:77:AB:CE:D1:66:E4:4E:F1:46:A7:F5:5F:C8:E7:07
Certificate issuer:       /CN=A91263B8/serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
Certificate serial:       03
Authority key identifier: 87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/EB551A522F0311F19C1B78ED96833773.roa
Signing time:             Fri 03 Apr 2026 02:22:11 +0000
ROA not before:           Fri 03 Apr 2026 02:22:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     398478
IP address blocks:        163.128.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl
                          rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91263B8, serialNumber=87A9F2312B68BE555FFCE6E239F7621DC3E74BCC
        Validity
            Not Before: Apr  3 02:22:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69cf2452-038e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9f:2f:b7:fd:59:e0:1f:fe:8d:f1:b3:37:b3:
                    c1:ac:a4:23:d9:07:bb:02:5c:ba:6f:a1:32:9f:d4:
                    03:92:cf:12:ac:83:85:0b:f2:e4:0f:ad:50:72:17:
                    a9:4e:09:8a:ab:f1:4b:aa:84:f2:bf:ff:a9:a6:1c:
                    b7:29:5e:99:52:9d:5a:2d:6f:ca:5c:c9:07:0b:b8:
                    22:51:98:51:8c:ce:e2:e0:a2:e8:f7:3a:9a:f3:a4:
                    1f:d4:fb:30:00:c8:32:e8:a5:8d:dd:cc:ff:cd:db:
                    fa:f2:cc:18:f6:38:27:2a:a6:2b:7a:74:51:ca:8f:
                    86:6c:82:51:9b:ac:de:53:2d:61:bf:f8:33:b4:cb:
                    2b:0f:a3:c3:7a:72:bc:bf:fb:3a:a5:07:aa:10:b7:
                    3f:4a:b4:3f:b8:af:ae:e2:ff:99:7a:53:e6:57:8e:
                    60:1b:9c:f5:5e:b9:6e:9c:16:58:08:19:40:73:f9:
                    32:68:6e:70:ec:e6:4e:3a:fe:46:b2:80:09:c1:02:
                    74:5e:5f:18:c4:be:1d:e8:72:ea:94:73:5d:1c:24:
                    5b:50:0f:2f:94:7b:e0:b8:cf:c3:c5:f1:97:a9:37:
                    4f:85:41:3e:1b:aa:61:62:0f:02:7e:9f:e5:2c:03:
                    b2:e6:5a:e1:85:99:f2:0a:9c:64:05:0d:f2:f0:b5:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:CD:38:63:77:AB:CE:D1:66:E4:4E:F1:46:A7:F5:5F:C8:E7:07
            X509v3 Authority Key Identifier:
                keyid:87:A9:F2:31:2B:68:BE:55:5F:FC:E6:E2:39:F7:62:1D:C3:E7:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/h6nyMStovlVf_ObiOfdiHcPnS8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6nyMStovlVf_ObiOfdiHcPnS8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91263B8/CF87A7DC2F0211F1B23DA39D95833773/EB551A522F0311F19C1B78ED96833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:bf:3e:95:9e:c2:f9:c0:ab:7e:83:3c:19:8f:3f:bb:bb:ea:
         6c:63:fb:29:2c:dc:90:1f:a8:88:f4:0d:02:14:4c:2f:b2:4c:
         d5:64:8b:c0:8c:cd:6e:3f:22:6b:e5:c8:b9:3d:5f:21:f5:92:
         85:73:f2:7a:3d:63:d5:f6:ba:26:6f:c8:b3:b5:d9:fa:b3:4e:
         9d:90:d6:39:13:7a:e1:5e:79:7a:48:e9:cd:43:6e:7c:26:d6:
         06:e9:ea:4c:1c:73:88:78:78:3a:64:4c:f4:be:b5:b9:42:f7:
         f0:75:d6:d1:84:56:2f:77:4f:a3:e6:26:96:bc:92:bb:76:d8:
         ff:28:33:fd:dd:6b:e6:dd:83:48:8b:d5:bf:ed:ab:26:a2:07:
         29:ec:b1:31:82:eb:17:f8:7e:61:b6:7a:a7:1c:99:66:5b:c0:
         f5:cf:97:11:c5:3a:60:44:3e:f4:98:e4:26:09:58:0b:8c:fd:
         91:3d:24:4d:c9:be:f8:b5:08:cf:4f:31:3f:ea:06:82:29:1c:
         fc:e3:ba:7e:aa:d7:6c:f1:6f:54:ee:30:32:a6:3b:a4:47:46:
         d4:49:a7:cc:47:6a:5c:91:25:08:00:77:7f:d4:c7:8a:e1:35:
         43:ea:f0:3d:41:02:ee:4d:d4:ae:94:07:56:2b:d5:b5:43:a6:
         5c:e8:10:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:13 2026 by rpki-client