Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0454654BDD411F0A7E8443AC4F9AE02.roa
File:                     A0454654BDD411F0A7E8443AC4F9AE02.roa (raw, json)
Hash identifier:          ybDLI9nURCUR4dl7RpNKuM+NwvLjLSe6o/NQjHI5zQs=
Subject key identifier:   37:40:59:57:16:53:D1:5C:F5:CE:E3:25:6D:9A:8B:0B:F4:AB:B2:8E
Certificate issuer:       /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial:       C5
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0454654BDD411F0A7E8443AC4F9AE02.roa
Signing time:             Thu 25 Jun 2026 08:39:47 +0000
ROA not before:           Thu 25 Jun 2026 08:39:47 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     23532
IP address blocks:        163.227.202.0/24 maxlen: 24
                          163.227.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
                          rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
        Validity
            Not Before: Jun 25 08:39:47 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3ce953-6a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:84:30:b7:4d:36:57:94:ee:0f:9a:71:ca:
                    18:87:be:f9:79:58:c8:c0:3e:7b:71:18:97:1a:10:
                    fb:ec:24:07:c8:9b:ab:98:04:4e:e6:e0:15:d7:3e:
                    61:c7:92:75:ab:b0:be:78:65:6d:59:96:59:f6:89:
                    a3:40:af:93:84:41:ef:9f:73:7b:07:46:f8:b2:4b:
                    24:b9:80:a6:35:35:10:a5:49:d5:f6:07:e8:b4:f5:
                    9d:fe:7c:74:19:2b:16:da:bb:1e:3d:a1:9e:8f:14:
                    92:77:2d:e1:50:95:1a:de:cb:d4:a6:30:b6:cf:c5:
                    7e:c0:b4:46:36:e0:20:33:81:38:81:88:58:8e:45:
                    a5:96:c2:7b:02:16:f1:da:e6:55:5b:10:9e:2d:c0:
                    74:f6:c0:f8:07:3d:ca:6b:cc:a5:ba:ce:1f:25:5a:
                    0c:d6:1b:50:8c:5d:90:95:8d:1c:42:02:42:62:40:
                    4b:1a:f9:8a:eb:c2:d0:79:68:d9:8e:ed:50:51:f8:
                    34:b8:30:06:26:34:82:8a:fb:a3:52:99:61:f7:7d:
                    67:13:0c:63:1b:77:20:2c:72:7d:56:ed:40:5e:aa:
                    48:5a:ea:20:58:39:f6:04:c4:ce:c5:04:d9:f7:25:
                    87:e3:21:54:8b:2b:a1:ba:1d:12:16:a8:62:f1:7b:
                    d5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:40:59:57:16:53:D1:5C:F5:CE:E3:25:6D:9A:8B:0B:F4:AB:B2:8E
            X509v3 Authority Key Identifier:
                keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/A0454654BDD411F0A7E8443AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:cd:7d:52:95:de:29:1d:01:12:c4:c9:37:8b:e6:d6:0a:75:
         8b:15:5b:21:49:10:69:88:3d:75:1a:0a:f3:2e:f9:26:ae:2b:
         04:bd:3c:e6:60:5e:1f:28:ba:e7:55:b2:14:ce:65:de:f5:e1:
         aa:3c:26:fa:a9:5c:a3:d8:66:73:88:91:02:72:28:84:7c:c8:
         ee:b0:9a:c5:a9:76:6e:7a:d5:6c:d0:2c:f2:db:2c:f5:ee:61:
         52:ed:e3:31:1d:b4:47:51:cf:08:f8:d3:10:01:f2:0d:9c:15:
         b1:f1:60:f2:6d:a6:b0:29:51:d7:4e:07:56:41:45:81:cc:26:
         95:70:a3:89:a0:84:f3:bb:62:fc:81:d0:27:49:7a:74:ee:ee:
         cf:1f:2c:33:a2:d9:e1:8e:ad:79:51:c1:db:0a:d9:1c:37:9d:
         31:c3:b3:27:55:14:b1:5b:69:52:18:46:1a:05:e2:d2:1c:e9:
         2f:d0:47:f2:67:a3:2d:78:72:43:f5:75:c6:5c:fd:6f:1c:6b:
         b0:ec:b4:85:d4:ea:2f:66:cf:ae:01:9d:68:b2:d3:1d:bf:6c:
         8d:df:25:f9:b3:12:f2:88:a9:ac:e2:65:74:6c:52:86:b9:ff:
         51:80:5f:72:4b:dc:a3:5c:34:a8:bd:42:6f:dd:d9:db:5c:cf:
         f6:df:28:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:46:55 2026 by rpki-client