Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa
File:                     C7A29726A65311F091E2CF10C4F9AE02.roa (raw, json)
Hash identifier:          emjXyY15wJLHzjU6zt0lF1rFFBq+bRVvM3T/XvGCGss=
Subject key identifier:   64:D0:CB:6E:D0:EF:2E:AD:0A:20:01:10:29:49:81:BF:DD:03:F8:2F
Certificate issuer:       /CN=A9142F59/serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
Certificate serial:       A7
Authority key identifier: 1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa
Signing time:             Sat 25 Apr 2026 07:43:01 +0000
ROA not before:           Sat 25 Apr 2026 07:43:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153689
IP address blocks:        163.223.80.0/23 maxlen: 23
                          163.223.80.0/24 maxlen: 24
                          163.223.81.0/24 maxlen: 24
                          2001:df5:3840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl
                          rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142F59, serialNumber=1CA36DCFC3C04333F883B835F2C8DDD025D54106
        Validity
            Not Before: Apr 25 07:43:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ec7085-e66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:1f:b7:00:26:e6:12:74:88:83:94:75:32:
                    1d:d2:fc:c9:c9:fa:47:b0:63:1e:78:08:ae:24:1a:
                    b9:eb:ee:7f:cb:b3:ce:dc:52:a6:9a:ae:63:ef:ae:
                    59:42:79:d8:47:92:74:56:1b:9c:08:de:c1:83:7b:
                    ea:d5:94:51:2a:89:12:6b:09:76:f9:79:5e:c3:ce:
                    ce:dc:f7:e6:f9:1c:03:5e:fa:25:4d:77:51:87:a4:
                    72:a6:2f:3c:ce:07:b8:35:ca:58:68:b2:40:65:ab:
                    1f:8e:a3:bf:00:85:62:72:1e:77:d2:d4:fb:9b:46:
                    0d:fa:99:62:20:e5:38:14:27:3a:89:41:0c:94:da:
                    99:da:93:5c:26:74:7e:19:30:9e:1f:b9:ad:33:01:
                    f5:a5:e2:19:38:ba:ea:b5:dc:0e:a4:49:45:5c:9b:
                    2c:a9:2f:14:b1:d5:35:82:b8:4b:a6:93:1d:6c:bc:
                    84:6d:1f:d3:82:bd:77:84:17:ca:4e:73:41:8f:3c:
                    d0:9f:8f:07:cf:4d:6f:86:a3:f5:6a:31:88:70:dd:
                    ed:39:c6:7a:61:0e:3c:80:c1:ee:ed:04:f7:23:df:
                    38:81:de:46:ed:83:10:69:3e:04:aa:89:6c:bb:cd:
                    8d:69:26:d4:bd:e7:46:ed:e9:38:8a:5b:7f:cc:f0:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D0:CB:6E:D0:EF:2E:AD:0A:20:01:10:29:49:81:BF:DD:03:F8:2F
            X509v3 Authority Key Identifier:
                keyid:1C:A3:6D:CF:C3:C0:43:33:F8:83:B8:35:F2:C8:DD:D0:25:D5:41:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/HKNtz8PAQzP4g7g18sjd0CXVQQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HKNtz8PAQzP4g7g18sjd0CXVQQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142F59/0526D62E623011F0A0207630C4F9AE02/C7A29726A65311F091E2CF10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.80.0/23
                IPv6:
                  2001:df5:3840::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:18:db:c7:17:cb:73:fb:d7:d2:26:34:bd:94:42:bb:10:
         f0:9a:1c:b1:ab:41:0b:b4:ca:34:d9:16:09:a5:6c:ed:c9:a4:
         21:24:38:4c:cf:e6:7b:5f:b2:4c:83:8b:a4:db:11:93:11:db:
         14:d9:44:c1:81:da:c9:29:80:aa:d9:ca:ee:c9:e6:0e:9e:49:
         79:b9:54:e7:48:c6:75:f3:b1:8b:4e:45:77:79:34:74:ce:b9:
         47:61:1f:c2:50:23:61:ae:f8:00:ee:09:24:12:de:a0:a8:95:
         90:c8:49:20:06:3e:af:3d:4d:f6:ef:12:31:ef:1b:39:96:9b:
         6d:a9:ff:f1:0c:51:f0:04:4b:62:2a:e5:6c:c8:c7:30:10:90:
         50:f1:fa:ba:76:2c:aa:b0:b4:58:fa:36:d7:26:7a:79:4b:a4:
         2f:ba:35:b9:5d:81:3a:f4:d2:37:b2:8c:c1:7f:99:da:99:e4:
         71:47:8c:d8:d1:e8:95:0d:84:fa:33:55:76:1a:1f:bc:bb:29:
         d4:be:4f:0c:76:2b:83:bd:06:ca:c5:03:de:81:fd:94:0a:df:
         5a:74:0c:42:f2:9a:4f:61:e6:ac:e7:ac:b8:cf:cf:3b:13:55:
         27:ff:15:88:05:c1:db:00:28:1d:db:bc:ab:2e:a9:31:54:37:
         a7:10:ca:f3
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDJGNTkxMTAvBgNVBAUTKDFDQTM2RENGQzNDMDQzMzNGODgzQjgzNUYyQzhEREQw
MjVENTQxMDYwHhcNMjYwNDI1MDc0MzAxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWVjNzA4NS1lNjZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHQftwAm5hJ0iIOUdTId0vzJyfpHsGMeeAiuJBq56+5/y7PO3FKmmq5j765Z
QnnYR5J0VhucCN7Bg3vq1ZRRKokSawl2+Xlew87O3Pfm+RwDXvolTXdRh6Rypi88
zge4NcpYaLJAZasfjqO/AIVich530tT7m0YN+pliIOU4FCc6iUEMlNqZ2pNcJnR+
GTCeH7mtMwH1peIZOLrqtdwOpElFXJssqS8UsdU1grhLppMdbLyEbR/Tgr13hBfK
TnNBjzzQn48Hz01vhqP1ajGIcN3tOcZ6YQ48gMHu7QT3I984gd5G7YMQaT4Eqols
u82NaSbUvedG7ek4ilt/zPDqawIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGTQy27Q
7y6tCiABEClJgb/dA/gvMB8GA1UdIwQYMBaAFByjbc/DwEMz+IO4NfLI3dAl1UEG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkY1OS8wNTI2RDYyRTYy
MzAxMUYwQTAyMDc2MzBDNEY5QUUwMi9IS050ejhQQVF6UDRnN2cxOHNqZDBDWFZR
UVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0hLTnR6OFBBUXpQNGc3ZzE4c2pkMENYVlFRWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDJGNTkvMDUyNkQ2MkU2MjMwMTFGMEEwMjA3NjMwQzRGOUFFMDIvQzdBMjk3MjZB
NjUzMTFGMDkxRTJDRjEwQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBo99QMA8EAgACMAkDBwAgAQ31OEAwDQYJKoZIhvcNAQELBQADggEB
ABGmGNvHF8tz+9fSJjS9lEK7EPCaHLGrQQu0yjTZFgmlbO3JpCEkOEzP5ntfskyD
i6TbEZMR2xTZRMGB2skpgKrZyu7J5g6eSXm5VOdIxnXzsYtORXd5NHTOuUdhH8JQ
I2Gu+ADuCSQS3qColZDISSAGPq89TfbvEjHvGzmWm22p//EMUfAES2Iq5WzIxzAQ
kFDx+rp2LKqwtFj6NtcmenlLpC+6NbldgTr00jeyjMF/mdqZ5HFHjNjR6JUNhPoz
VXYaH7y7KdS+Twx2K4O9BsrFA96B/ZQK31p0DELymk9h5qznrLjPzzsTVSf/FYgF
wdsAKB3bvKsuqTFUN6cQyvM=
-----END CERTIFICATE-----
Generated at Thu May 21 11:27:10 2026 by rpki-client