Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/D11E6E8224CB11F1A3AB4FF6A7833773.roa
File:                     D11E6E8224CB11F1A3AB4FF6A7833773.roa (raw, json)
Hash identifier:          x6uhNShvVOgmcKuVqlrOttACB4glBVZA83SSQpSH+7A=
Subject key identifier:   98:04:FD:47:6F:BE:F1:36:F9:43:A8:81:0C:CF:49:F7:51:F9:11:69
Certificate issuer:       /CN=A914D3D0/serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
Certificate serial:       0C
Authority key identifier: 4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/D11E6E8224CB11F1A3AB4FF6A7833773.roa
Signing time:             Fri 03 Apr 2026 09:43:44 +0000
ROA not before:           Fri 03 Apr 2026 09:43:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153760
IP address blocks:        163.223.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl
                          rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3D0, serialNumber=4A245BF0FE75DAA1114ABC50E6B99ED436C32C69
        Validity
            Not Before: Apr  3 09:43:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69cf8bcf-b6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f3:d3:ee:77:05:26:0f:be:79:7a:21:6b:33:
                    31:7d:9a:77:d1:e5:e5:ae:f0:5b:12:a1:98:5c:21:
                    ab:df:51:f9:bf:ef:82:c7:0a:77:42:25:4a:c3:c0:
                    da:05:db:b9:07:09:4c:2e:ae:a1:54:08:ee:46:87:
                    78:af:01:aa:9c:f3:b1:b8:ae:b0:9c:08:bd:8f:1f:
                    c7:ca:ba:ae:66:6b:6c:0c:31:b6:af:be:b2:e4:0b:
                    0c:a1:28:e0:1c:d2:33:a4:08:dd:69:67:1d:9f:e9:
                    fb:85:90:32:3d:00:8a:fd:bf:cb:5a:23:ef:50:aa:
                    3d:39:d4:3d:d1:12:c6:06:50:77:9c:24:28:b1:7b:
                    c5:22:b3:3c:ea:35:5f:f8:5d:bc:a1:e5:2b:e4:35:
                    dd:b2:c8:38:46:a2:ee:14:65:d6:e0:8b:c9:17:73:
                    dc:7e:2d:62:fd:b0:26:81:d5:82:58:b8:e5:a7:1c:
                    fe:35:da:05:14:9e:e6:fc:90:76:0d:07:32:94:c9:
                    94:b6:89:79:e3:e6:97:c2:18:52:9b:ed:69:ae:8f:
                    2f:3e:40:35:5a:b2:25:b5:f8:1e:b7:f7:be:4b:95:
                    67:5e:24:50:62:da:e4:16:91:09:9d:34:e2:30:f7:
                    f6:8c:c3:71:46:2a:1c:b0:07:16:01:ed:d0:66:30:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:04:FD:47:6F:BE:F1:36:F9:43:A8:81:0C:CF:49:F7:51:F9:11:69
            X509v3 Authority Key Identifier:
                keyid:4A:24:5B:F0:FE:75:DA:A1:11:4A:BC:50:E6:B9:9E:D4:36:C3:2C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/SiRb8P512qERSrxQ5rme1DbDLGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SiRb8P512qERSrxQ5rme1DbDLGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3D0/B672EFA224C811F1A37FB7A7A6833773/D11E6E8224CB11F1A3AB4FF6A7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:65:3f:9c:25:12:f5:fd:e9:fd:d8:6e:c7:0a:2e:5b:b2:33:
         d1:da:a3:fc:a7:fc:2f:31:ca:e6:65:36:6c:5a:c8:19:69:d9:
         37:6c:87:bd:52:84:6c:33:4c:96:76:03:ba:e7:70:57:e2:44:
         ad:80:9d:14:46:f1:11:c4:37:a9:38:9a:17:b1:11:ad:27:56:
         6a:ed:89:11:71:33:64:9b:cc:b1:f9:7c:f8:e8:8a:2b:f8:ef:
         8b:86:af:df:a8:a6:70:d2:4e:a3:fe:99:c2:78:0a:4c:18:df:
         18:ae:f7:df:fc:3e:6f:fa:29:51:08:bf:de:6a:46:01:31:cc:
         56:8d:1a:0b:00:05:2e:0a:a9:d2:f4:f9:fe:35:e6:cb:8b:4e:
         ea:81:35:85:00:cd:01:34:10:36:49:12:ae:c3:4b:05:50:44:
         75:ba:cd:b0:c6:85:a8:70:84:56:87:e2:be:6d:7a:5d:70:6e:
         e2:d6:3e:81:6d:36:aa:11:58:63:d7:ca:86:03:c3:d6:ed:17:
         e0:2a:99:e2:ba:86:58:2a:a8:fe:d1:d2:91:8c:de:a1:f3:7c:
         12:fa:75:2c:c4:21:fc:3b:8e:2c:d6:4b:95:bd:25:71:58:80:
         64:42:31:a6:95:60:19:bc:5f:47:f8:f7:37:2d:f6:05:e7:40:
         3c:13:83:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:22:53 2026 by rpki-client