Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/F1940290212911F087425013C4F9AE02.roa
File:                     F1940290212911F087425013C4F9AE02.roa (raw, json)
Hash identifier:          NSP5l5+eNpdcnjjUfE6okCursO8SeCUkkL+HJPhpBAg=
Subject key identifier:   D9:CF:FF:70:9A:DA:15:19:F1:E6:20:DF:D2:CE:E5:20:62:14:08:23
Certificate issuer:       /CN=A911AA05/serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
Certificate serial:       DF
Authority key identifier: DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/F1940290212911F087425013C4F9AE02.roa
Signing time:             Wed 01 Jul 2026 08:34:22 +0000
ROA not before:           Wed 01 Jul 2026 08:34:22 +0000
ROA not after:            Fri 30 Oct 2026 00:00:00 +0000
asID:                     153800
IP address blocks:        163.227.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl
                          rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AA05, serialNumber=DF187311FA09C779B8B15D947A46D4F4EDCC5053
        Validity
            Not Before: Jul  1 08:34:22 2026 GMT
            Not After : Oct 30 00:00:00 2026 GMT
        Subject: CN=6a44d10d-20e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:27:7a:78:fa:4d:2a:f4:17:a1:12:19:26:
                    59:88:c8:25:89:24:b8:e5:34:56:8e:1a:6f:87:90:
                    e2:55:3d:76:b8:a0:a0:6d:f7:db:ed:df:1e:8c:8b:
                    e3:64:42:18:58:0e:02:bf:e0:48:8e:59:b1:87:f5:
                    8a:b5:18:69:c4:8d:ac:13:47:95:7d:2f:17:a7:99:
                    00:23:4a:b0:6d:7c:11:e5:a6:32:df:a5:3e:0a:45:
                    17:8d:a7:07:be:f6:77:f9:96:b7:33:b0:b1:1f:9c:
                    8d:2e:7d:69:36:26:f3:d6:5f:f5:9a:f1:a6:de:a4:
                    b8:c9:07:c0:f3:73:54:30:b5:91:5c:ac:12:4d:e5:
                    28:60:a4:c6:a7:56:29:72:2d:68:d2:6d:97:9f:cd:
                    02:46:3e:27:7a:4d:aa:79:88:6a:f9:a1:c9:1c:53:
                    80:a3:2e:e3:68:10:8f:e7:78:d6:c9:67:1b:02:c3:
                    ab:9a:db:17:a2:c1:1f:cf:05:dc:f9:65:89:e6:be:
                    57:08:b6:0b:a0:1d:38:80:23:4e:ad:32:ad:97:1d:
                    a0:57:69:4b:22:0a:99:1b:d7:9a:76:a0:f9:cb:35:
                    e4:6d:3e:1c:a9:fe:f7:eb:8c:b5:29:8f:a5:5e:60:
                    d6:ff:c2:c1:e2:73:d4:32:53:2d:02:70:ee:73:50:
                    f3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:FF:70:9A:DA:15:19:F1:E6:20:DF:D2:CE:E5:20:62:14:08:23
            X509v3 Authority Key Identifier:
                keyid:DF:18:73:11:FA:09:C7:79:B8:B1:5D:94:7A:46:D4:F4:ED:CC:50:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/3xhzEfoJx3m4sV2UekbU9O3MUFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3xhzEfoJx3m4sV2UekbU9O3MUFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911AA05/4DC1D926212911F0A66A4972C4F9AE02/F1940290212911F087425013C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:90:cc:b8:86:e8:b8:8a:ff:4f:3f:35:f8:69:14:59:2b:fb:
         1a:69:75:cf:ce:aa:af:c0:2d:f0:02:ea:85:52:36:b3:df:a2:
         69:e7:2f:12:c2:8e:b9:69:65:6b:59:c5:f5:91:49:f9:f6:62:
         74:23:15:7e:d3:41:8c:f1:2f:d9:04:ad:14:3a:a6:fb:a1:25:
         7b:fb:8d:e3:ea:38:f7:07:72:87:da:12:cb:25:b2:75:5a:3d:
         05:e1:6e:6b:68:5f:59:7b:1a:36:3d:8b:7c:4a:95:af:e2:ee:
         45:e5:bf:2d:5c:92:f0:ed:3b:e8:b8:87:a5:2f:d7:73:bd:09:
         88:da:2a:01:be:80:b2:6c:90:ff:be:59:e6:02:c2:cc:45:65:
         4e:62:0a:f9:e6:35:2c:da:c4:36:66:c0:ec:d2:31:4d:d1:ca:
         13:a3:46:75:c6:ca:c2:6d:e0:8d:36:4e:00:3c:1f:7d:d6:23:
         bc:ee:2e:00:e4:3d:67:8b:4a:1d:8f:3f:5b:48:4c:e7:fe:64:
         27:55:49:af:b3:67:7f:3a:85:c5:86:8e:42:42:5e:fc:22:7c:
         5c:46:e5:f8:88:9a:7f:f7:48:28:fa:d8:a8:58:73:10:24:69:
         e6:e8:21:65:df:a6:45:8a:b6:d4:06:1f:1e:48:56:2c:0f:bd:
         ae:81:fd:f0
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUFBMDUxMTAvBgNVBAUTKERGMTg3MzExRkEwOUM3NzlCOEIxNUQ5NDdBNDZENEY0
RURDQzUwNTMwHhcNMjYwNzAxMDgzNDIyWhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQ0ZDEwZC0yMGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Ecnenj6TSr0F6ESGSZZiMgliSS45TRWjhpvh5DiVT12uKCgbffb7d8ejIvj
ZEIYWA4Cv+BIjlmxh/WKtRhpxI2sE0eVfS8Xp5kAI0qwbXwR5aYy36U+CkUXjacH
vvZ3+Za3M7CxH5yNLn1pNibz1l/1mvGm3qS4yQfA83NUMLWRXKwSTeUoYKTGp1Yp
ci1o0m2Xn80CRj4nek2qeYhq+aHJHFOAoy7jaBCP53jWyWcbAsOrmtsXosEfzwXc
+WWJ5r5XCLYLoB04gCNOrTKtlx2gV2lLIgqZG9eadqD5yzXkbT4cqf7364y1KY+l
XmDW/8LB4nPUMlMtAnDuc1DzRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNnP/3Ca
2hUZ8eYg39LO5SBiFAgjMB8GA1UdIwQYMBaAFN8YcxH6Ccd5uLFdlHpG1PTtzFBT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQUEwNS80REMxRDkyNjIx
MjkxMUYwQTY2QTQ5NzJDNEY5QUUwMi8zeGh6RWZvSngzbTRzVjJVZWtiVTlPM01V
Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzN4aHpFZm9KeDNtNHNWMlVla2JVOU8zTVVGTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUFBMDUvNERDMUQ5MjYyMTI5MTFGMEE2NkE0OTcyQzRGOUFFMDIvRjE5NDAyOTAy
MTI5MTFGMDg3NDI1MDEzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBo+NyMA0GCSqGSIb3DQEBCwUAA4IBAQAZkMy4hui4iv9PPzX4aRRZ
K/saaXXPzqqvwC3wAuqFUjaz36Jp5y8Swo65aWVrWcX1kUn59mJ0IxV+00GM8S/Z
BK0UOqb7oSV7+43j6jj3B3KH2hLLJbJ1Wj0F4W5raF9Zexo2PYt8SpWv4u5F5b8t
XJLw7TvouIelL9dzvQmI2ioBvoCybJD/vlnmAsLMRWVOYgr55jUs2sQ2ZsDs0jFN
0coTo0Z1xsrCbeCNNk4APB991iO87i4A5D1ni0odjz9bSEzn/mQnVUmvs2d/OoXF
ho5CQl78InxcRuX4iJp/90go+tioWHMQJGnm6CFl36ZFirbUBh8eSFYsD72ugf3w
-----END CERTIFICATE-----
Generated at Sat Jul 18 07:12:05 2026 by rpki-client