Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/F2364AB42E9811F1AF05F936B4833773.roa
File:                     F2364AB42E9811F1AF05F936B4833773.roa (raw, json)
Hash identifier:          b6aOPDCn0jkzvk/wtvvTjLnGnv+9R/k9OUIex4MpeQQ=
Subject key identifier:   16:49:42:6F:4F:F7:DC:EF:FE:80:11:49:D5:99:7E:24:1C:E3:A1:31
Certificate issuer:       /CN=A914F112/serialNumber=8F92588620CE230E60904C2EFC0FA52D22735D1A
Certificate serial:       30
Authority key identifier: 8F:92:58:86:20:CE:23:0E:60:90:4C:2E:FC:0F:A5:2D:22:73:5D:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5JYhiDOIw5gkEwu_A-lLSJzXRo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/F2364AB42E9811F1AF05F936B4833773.roa
Signing time:             Tue 30 Jun 2026 09:45:28 +0000
ROA not before:           Tue 30 Jun 2026 09:45:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154580
IP address blocks:        163.128.150.0/23 maxlen: 23
                          163.128.150.0/24 maxlen: 24
                          163.128.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/j5JYhiDOIw5gkEwu_A-lLSJzXRo.crl
                          rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/j5JYhiDOIw5gkEwu_A-lLSJzXRo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5JYhiDOIw5gkEwu_A-lLSJzXRo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 Oct 2026 08:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F112, serialNumber=8F92588620CE230E60904C2EFC0FA52D22735D1A
        Validity
            Not Before: Jun 30 09:45:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a439038-c93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:2d:b7:a8:74:46:46:47:da:32:57:da:27:
                    b5:e2:61:9e:36:7c:f1:0a:96:ba:28:98:8b:3a:a8:
                    a7:80:a4:e8:1a:21:3c:8c:0a:7f:8b:c0:4d:09:e6:
                    f8:0a:34:a7:7a:a7:d5:e1:51:c3:69:d5:b1:bc:bd:
                    5d:f6:dc:ee:21:77:6d:01:02:87:25:22:e7:b4:b4:
                    48:c5:27:de:a9:b3:82:42:90:70:3c:ae:cb:10:a9:
                    e2:10:52:30:3b:3b:fe:3e:d6:ad:60:49:92:26:d9:
                    54:e9:78:a2:69:5d:19:81:44:a4:b3:1c:f5:87:9f:
                    5b:fe:38:f7:5d:e4:a0:fe:d6:18:2c:71:b5:82:07:
                    9c:fb:c6:ff:f4:a0:3f:0b:2f:fd:2b:5c:4c:0b:80:
                    b5:19:60:30:2c:73:e1:32:c3:6b:94:05:e5:82:66:
                    93:b9:f9:9d:fe:4d:59:0d:1f:83:21:b5:c1:96:67:
                    6f:46:a2:c3:f7:d7:cb:66:e0:b0:80:c1:31:ce:3b:
                    e9:2c:e7:00:30:00:ac:25:a9:c1:31:6c:96:5e:20:
                    6f:50:6a:43:22:23:32:f8:e7:58:4a:3b:7b:41:cd:
                    97:05:d8:8c:51:42:01:67:68:1d:57:3a:67:6b:59:
                    0a:6a:4d:77:49:53:7b:0f:1b:27:3c:b8:4b:fe:99:
                    5b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:49:42:6F:4F:F7:DC:EF:FE:80:11:49:D5:99:7E:24:1C:E3:A1:31
            X509v3 Authority Key Identifier:
                keyid:8F:92:58:86:20:CE:23:0E:60:90:4C:2E:FC:0F:A5:2D:22:73:5D:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/j5JYhiDOIw5gkEwu_A-lLSJzXRo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5JYhiDOIw5gkEwu_A-lLSJzXRo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F112/B68FB67A2E9411F1948A2D2FB2833773/F2364AB42E9811F1AF05F936B4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:46:14:62:bb:5e:5c:51:f6:bc:5b:68:b9:8f:95:b5:c0:
         8b:73:69:c5:dc:89:1f:23:3d:e1:21:bb:9c:9e:1c:06:21:59:
         84:d3:d8:4c:7f:6f:85:19:2c:f7:9e:09:9e:06:60:4d:8f:7f:
         69:7b:55:a8:a8:9f:91:0f:a0:63:f2:d6:01:56:30:9e:fa:12:
         67:ae:b1:ad:35:1b:63:86:ae:dc:9c:24:0d:7b:3a:00:2f:68:
         0f:62:26:6c:73:94:1e:23:98:6f:cb:36:81:94:1a:3f:00:39:
         85:3f:6b:39:57:fa:f5:29:84:e3:08:f1:85:19:e4:3a:64:a0:
         1c:58:5e:83:a4:73:c3:48:15:d7:b3:33:29:9a:78:0f:40:be:
         a4:2f:aa:94:4e:c6:14:9f:97:f9:69:34:bc:d6:34:cd:8e:e0:
         51:19:6a:da:ca:18:61:4a:df:61:44:3d:ea:24:30:a0:16:72:
         1c:96:92:8b:fd:a8:b6:16:50:8a:3f:85:e0:83:60:40:10:17:
         77:4f:ca:a5:c9:bc:82:1c:d0:9d:fb:d9:92:91:26:33:09:e0:
         71:05:eb:6c:b1:22:e3:e4:35:8e:83:01:b8:ae:67:31:fd:24:
         33:83:ee:b3:f8:a1:09:84:71:b6:3e:24:3b:dd:88:4f:fa:4d:
         72:ad:67:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:03:10 2026 by rpki-client