Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/69256D56A5CE11F1B7F696C43311F970.roa
File:                     69256D56A5CE11F1B7F696C43311F970.roa (raw, json)
Hash identifier:          /e2obZnz7lTAWQN8h91CnRwcbpCZDmbystqGc2so0qI=
Subject key identifier:   0E:8B:89:C2:DF:B9:C7:4A:C5:B0:B9:A5:32:2C:B4:CB:35:75:29:33
Certificate issuer:       /CN=A9146A69/serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
Certificate serial:       EB
Authority key identifier: 3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/69256D56A5CE11F1B7F696C43311F970.roa
Signing time:             Tue 01 Sep 2026 06:28:57 +0000
ROA not before:           Tue 01 Sep 2026 06:28:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     6939
IP address blocks:        163.227.202.0/24 maxlen: 24
                          163.227.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl
                          rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 13:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146A69, serialNumber=3AA5D74A49FEDE081766CDAC3BF7DDD036BBF901
        Validity
            Not Before: Sep  1 06:28:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a9670a9-4ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:c9:9c:7f:4d:e8:7c:54:c7:40:04:4c:d4:
                    16:b0:a5:47:4a:53:d9:0c:66:49:b7:70:b6:de:7e:
                    ab:03:70:9c:08:1f:12:bb:dd:b4:2b:f2:7d:0b:eb:
                    cb:a3:40:ad:05:3a:84:0f:ec:76:27:e1:e4:1f:c8:
                    e1:df:a1:f6:cf:08:b0:33:27:ea:a3:71:ac:23:c3:
                    a8:ac:77:9e:2a:05:d7:9f:92:c6:bb:bd:73:d1:e6:
                    ba:b8:ee:76:16:1f:78:27:9c:59:23:1c:e2:37:f9:
                    e0:19:b4:43:0f:00:da:d1:34:3c:02:db:ce:08:37:
                    c6:36:c5:d2:c8:b6:40:ae:24:c3:ad:ba:58:40:14:
                    f7:5b:52:4e:d0:a3:d8:47:83:0f:0d:ae:c1:a7:7d:
                    b1:92:94:30:99:0a:5f:ee:32:fa:8f:af:9f:aa:4d:
                    fe:b7:37:98:ff:d4:ae:3e:24:f8:f8:c3:c2:2d:71:
                    33:f3:3e:04:41:bc:40:ee:2f:e3:db:ab:f7:0a:64:
                    2f:b9:ed:fb:e6:c4:6a:4a:1d:c0:5b:1c:ea:7c:6c:
                    0e:89:50:60:1a:e1:ea:3d:3a:2a:97:2e:b8:d5:80:
                    e3:7d:28:8f:b8:cf:cc:a8:3a:8d:5c:3c:9b:0d:37:
                    c1:b7:88:cf:23:e8:4a:00:15:ab:dd:6b:17:9f:16:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8B:89:C2:DF:B9:C7:4A:C5:B0:B9:A5:32:2C:B4:CB:35:75:29:33
            X509v3 Authority Key Identifier:
                keyid:3A:A5:D7:4A:49:FE:DE:08:17:66:CD:AC:3B:F7:DD:D0:36:BB:F9:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/OqXXSkn-3ggXZs2sO_fd0Da7-QE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OqXXSkn-3ggXZs2sO_fd0Da7-QE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A69/CB1CFE846C4A11F098731D13C4F9AE02/69256D56A5CE11F1B7F696C43311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:20:26:32:32:ac:20:1a:96:3a:11:6e:0f:6f:e9:99:08:81:
         cd:81:da:e6:22:b9:3d:9d:9b:2d:4f:60:be:fa:81:cb:0c:0d:
         32:03:d1:85:44:b3:10:77:58:ce:c9:dc:0b:e0:2b:fb:c0:f8:
         bd:e8:32:39:0d:e3:30:7e:a0:20:1c:b4:14:21:c0:f6:48:5a:
         2d:c1:91:38:87:c6:d9:89:cf:06:54:78:70:e5:e5:c6:d5:7c:
         2b:be:99:9f:5c:01:80:5e:65:6b:e0:24:f7:59:34:2a:83:96:
         8d:10:d4:c4:21:35:ab:8a:ab:dc:73:08:32:a1:a8:0b:45:be:
         5d:fc:c2:a7:05:ad:48:50:f6:2a:c3:38:f0:75:3f:f9:d2:69:
         f4:03:56:bd:45:88:85:78:a9:26:ac:22:90:5f:60:7d:a5:ce:
         12:a7:d7:30:b9:68:f7:ec:e1:04:bf:7d:77:93:15:c4:78:df:
         b7:38:51:89:b7:75:65:a6:7d:22:de:7c:87:e4:87:80:68:61:
         d3:81:f0:0d:6c:37:c4:c2:28:2d:bf:fe:1c:35:30:b8:a6:16:
         dd:fa:c4:d8:0d:77:f7:f5:03:bc:8c:7d:03:c2:94:55:62:a3:
         15:04:ef:e9:75:db:59:96:54:16:78:4a:ee:cb:34:ef:f7:25:
         e6:0e:d6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:28:58 2026 by rpki-client