Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/1A9D81EE6C4C11F090EC8B16C4F9AE02.roa
File:                     1A9D81EE6C4C11F090EC8B16C4F9AE02.roa (raw, json)
Hash identifier:          ayCsjbd4UKNtqqdScOxxnYzoy9WBOiohJZOuSOw1kYI=
Subject key identifier:   AE:F5:58:84:78:5D:71:C5:11:67:61:E9:6F:A4:D7:29:56:64:67:79
Certificate issuer:       /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial:       C4
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/1A9D81EE6C4C11F090EC8B16C4F9AE02.roa
Signing time:             Thu 25 Jun 2026 08:39:45 +0000
ROA not before:           Thu 25 Jun 2026 08:39:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        163.227.202.0/24 maxlen: 24
                          163.227.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
                          rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
        Validity
            Not Before: Jun 25 08:39:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3ce951-16ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f0:31:8c:ef:7c:09:72:05:c8:c5:d9:1a:72:
                    b5:ae:cd:8e:de:7c:94:df:9a:03:bd:43:d2:d2:02:
                    5f:e0:5d:19:3f:7a:75:e4:58:ee:b0:6f:44:a2:32:
                    79:75:25:3a:e7:84:b1:8c:4b:47:c5:68:61:c6:c3:
                    7e:d0:f8:1e:d6:d4:94:95:75:d1:2e:4e:f3:c1:9c:
                    a4:01:a4:15:49:2f:ec:89:92:47:6e:67:e0:bb:39:
                    87:ea:eb:7e:06:10:01:cf:fb:fe:7c:e1:64:f6:a7:
                    8c:17:6e:09:9c:26:b4:eb:aa:30:ee:0d:0c:66:c6:
                    e2:31:43:57:98:33:57:e8:0c:6c:14:2c:9a:98:b5:
                    5e:76:01:ce:43:35:9b:db:4a:00:35:af:c9:cf:6a:
                    6f:7a:ef:ee:e5:0a:45:fb:b1:01:61:ca:38:eb:90:
                    79:7f:a6:2a:91:22:b6:3e:c4:27:94:ec:87:6f:48:
                    21:25:9b:2b:74:ed:76:66:52:67:58:5a:34:31:2b:
                    9c:13:9f:89:2c:12:94:4e:ff:a5:b6:09:34:b3:df:
                    0a:15:c8:d1:52:bb:3f:b0:c2:ce:cc:0f:95:4d:b4:
                    f1:5a:75:32:6c:c8:2c:59:14:e3:93:2f:92:0e:ca:
                    df:3e:4e:40:66:82:b4:c2:1f:f6:f8:11:a0:ff:73:
                    2d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F5:58:84:78:5D:71:C5:11:67:61:E9:6F:A4:D7:29:56:64:67:79
            X509v3 Authority Key Identifier:
                keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/1A9D81EE6C4C11F090EC8B16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:c8:ee:ae:1f:55:86:5d:10:33:32:bb:6a:e4:c8:2c:4c:dd:
         50:9b:4a:5a:08:28:52:39:71:fa:83:d7:44:64:36:78:f9:8f:
         c1:54:3c:67:bc:0f:e1:53:c8:7f:39:65:d9:a5:69:18:78:44:
         b4:1e:9a:9b:7d:52:01:f4:d4:22:28:eb:69:82:ab:a5:32:f4:
         12:83:69:30:18:20:f6:03:fc:80:05:5b:d8:13:61:68:ec:51:
         12:ee:4e:17:85:a3:1b:5c:b8:9a:0f:d8:c1:70:dc:f9:2a:d4:
         ed:6b:c0:d0:fc:b9:df:65:12:5d:58:23:f7:08:0e:2e:93:29:
         62:ca:7f:44:65:a3:74:36:b9:fb:69:50:55:6e:ee:79:c1:bc:
         3d:69:6d:52:0b:bf:e1:fd:46:ec:ca:6d:d7:01:7b:c2:52:78:
         86:8b:1c:c9:45:ca:02:6e:cd:a9:69:80:18:62:aa:ce:e8:da:
         3a:d1:25:78:13:3c:0b:23:da:4a:0f:e0:04:1e:14:68:e5:e9:
         87:68:b8:05:87:d0:9f:b0:0a:69:5e:ac:bd:f1:17:e9:e3:0a:
         c4:ba:cd:97:32:a4:0b:3f:5b:0d:d5:b8:df:35:3d:30:e8:c9:
         2a:14:06:a2:07:5b:46:3f:b0:f3:74:13:3a:cc:3a:ff:ec:75:
         17:81:1b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:07 2026 by rpki-client