Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/8494A0A8202211F091667E59C4F9AE02.roa
File:                     8494A0A8202211F091667E59C4F9AE02.roa (raw, json)
Hash identifier:          ml9eZMoCrbUvniuXOhI4m1pjlqUXyD03RRKqBcpZ4dU=
Subject key identifier:   B9:9A:3C:4D:ED:F3:10:CB:56:27:72:4D:D5:EF:B4:AF:59:B2:EE:B0
Certificate issuer:       /CN=A911465D/serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D
Certificate serial:       CC
Authority key identifier: 45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/8494A0A8202211F091667E59C4F9AE02.roa
Signing time:             Wed 13 May 2026 07:39:40 +0000
ROA not before:           Wed 13 May 2026 07:39:40 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     16276
IP address blocks:        163.223.88.0/24 maxlen: 24
                          163.223.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.crl
                          rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911465D, serialNumber=45E0C2CE1460334374FC15B37045D76A34DDEE5D
        Validity
            Not Before: May 13 07:39:40 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a042abc-3840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:7a:e4:bc:ba:2e:f7:bc:71:71:78:56:ed:
                    d1:7c:35:15:ec:e6:cd:e6:a1:eb:f6:c1:a7:13:ab:
                    38:eb:29:db:5f:ac:5e:7b:77:9e:7f:80:16:d3:70:
                    fc:22:e1:de:bc:80:6b:73:9e:d1:44:c7:5f:90:3d:
                    1f:72:e8:b5:e7:0f:cb:c7:9e:a5:a2:f2:a0:d1:01:
                    96:ff:84:cd:3e:51:f5:48:b5:ee:64:65:f4:89:b4:
                    f5:25:01:9e:36:ce:bf:d3:2c:6b:ec:52:c9:f6:57:
                    9c:79:20:39:16:86:68:6c:0b:0d:03:b6:eb:0f:42:
                    d7:34:2f:cb:ae:59:f7:fa:06:7f:fc:fc:37:de:7b:
                    67:ee:2e:3e:bb:d4:01:95:c5:47:27:6a:96:8a:7d:
                    9d:30:c9:82:77:1c:e9:b6:a0:a9:9c:b5:cf:f6:2d:
                    24:3f:33:4a:e0:ba:48:c0:38:67:52:23:be:13:e3:
                    a7:1e:e5:6c:d2:1a:e4:fc:38:b9:79:53:42:9d:d0:
                    15:6b:4a:50:d5:f5:b2:2d:46:07:03:ab:a0:17:89:
                    03:8b:f6:bb:6e:e7:8e:b6:8b:9a:e1:0f:08:e5:c7:
                    b3:da:16:96:59:f8:cc:c2:87:b1:6b:ae:f6:0d:4a:
                    ef:a6:0a:73:bf:97:21:92:f1:9e:d3:65:30:80:4f:
                    37:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9A:3C:4D:ED:F3:10:CB:56:27:72:4D:D5:EF:B4:AF:59:B2:EE:B0
            X509v3 Authority Key Identifier:
                keyid:45:E0:C2:CE:14:60:33:43:74:FC:15:B3:70:45:D7:6A:34:DD:EE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/ReDCzhRgM0N0_BWzcEXXajTd7l0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ReDCzhRgM0N0_BWzcEXXajTd7l0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911465D/D419DC4A201A11F0A402F63BC4F9AE02/8494A0A8202211F091667E59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:23:18:f7:f1:d0:9a:30:84:b4:89:e7:72:65:10:d5:6c:e8:
         c3:09:ed:16:ee:1f:81:aa:27:b8:e8:9a:8f:be:e6:d2:ae:c4:
         2c:0a:27:ce:bf:d2:10:6e:2f:c0:de:66:cb:d1:7a:b7:21:08:
         60:69:3b:ce:b2:f4:9d:5c:1d:f7:90:5f:db:5a:6c:1c:32:51:
         37:b3:5b:03:ef:79:e0:b3:ba:b6:1c:b7:12:3a:94:4c:2d:09:
         7a:9f:bf:d2:83:59:9b:83:8e:65:1d:9e:38:55:2d:c1:28:e4:
         ab:57:7c:85:74:98:80:bf:dc:83:df:b5:f1:d0:b2:a9:ea:51:
         da:60:77:e9:b7:29:4d:f8:af:ea:1b:c6:a2:6f:52:fa:a1:fd:
         ca:cd:55:b1:d1:04:c4:45:61:90:a3:6d:f8:85:4c:0b:e5:6b:
         55:3f:62:9e:47:de:77:16:e6:78:34:e2:8b:02:5b:99:23:59:
         51:df:8c:8b:f0:ab:f1:bc:bb:f7:6b:39:96:c4:d9:83:b2:4b:
         a0:cd:b6:3c:d9:53:d0:b9:61:4d:f8:91:b6:c0:7b:10:b3:a5:
         96:49:d1:1a:07:86:a2:f4:11:37:ca:e2:0c:c7:a3:85:a9:4a:
         d6:67:77:19:f1:94:e4:d7:fd:d4:55:94:b1:65:3b:e2:93:ad:
         3e:39:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:04:13 2026 by rpki-client