Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/7434E1F4967011F0A5651266C4F9AE02.roa
File:                     7434E1F4967011F0A5651266C4F9AE02.roa (raw, json)
Hash identifier:          gciNcDUVUCgw2qH2N78KovAnzOQWySARLNLA0rYt0Qc=
Subject key identifier:   37:76:E8:B9:B5:82:3D:8D:98:33:E7:FE:A5:00:29:F6:1E:82:81:DE
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       F1
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/7434E1F4967011F0A5651266C4F9AE02.roa
Signing time:             Thu 11 Jun 2026 09:37:15 +0000
ROA not before:           Thu 11 Jun 2026 09:37:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152900
IP address blocks:        163.227.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Jun 11 09:37:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a81cb-fc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:19:9d:f3:3c:63:ac:26:43:15:0e:27:a2:
                    c2:1a:98:6c:42:fb:27:53:04:7c:5b:1b:7b:58:70:
                    8a:34:a0:5b:f7:4c:ec:db:43:d3:dc:8f:67:e5:e9:
                    50:cf:cb:57:61:19:79:95:5e:c5:10:11:28:a3:43:
                    66:5a:ba:14:6b:15:2c:f0:8f:9e:74:89:09:9c:09:
                    4f:8c:7e:d7:7b:e8:68:13:f8:df:6a:82:a4:e1:6c:
                    10:af:a1:3a:9a:58:e2:8c:f1:15:f9:db:39:34:f6:
                    3c:20:53:23:28:ad:e6:c2:9b:95:07:55:db:b8:6a:
                    64:77:c5:0e:c5:53:d0:c4:ee:f8:07:e1:d0:71:b4:
                    bc:0b:83:b6:f3:65:be:7a:29:6d:32:30:e3:4d:93:
                    21:2d:86:b0:00:6a:75:c8:eb:0d:eb:58:77:7a:16:
                    c1:8a:68:bd:7e:79:27:1f:05:b0:64:9e:35:e3:c6:
                    23:b7:1f:c4:1e:10:10:ce:64:8b:8b:90:cb:9d:3d:
                    67:36:0e:d9:e8:0f:79:28:2d:9c:3c:4d:d8:31:11:
                    40:75:2e:fd:94:78:15:30:8c:9b:4e:1b:ae:0b:99:
                    35:ab:15:5d:f8:10:68:19:f9:63:fc:c2:c2:a3:f1:
                    8b:ff:26:23:39:2f:c0:6a:24:07:14:2a:21:92:08:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:76:E8:B9:B5:82:3D:8D:98:33:E7:FE:A5:00:29:F6:1E:82:81:DE
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/7434E1F4967011F0A5651266C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:27:b9:ff:ac:76:38:ab:00:23:f7:25:de:eb:07:72:c6:31:
         c1:1e:3d:e8:61:b0:f7:8e:36:1a:1d:d1:ba:1b:86:a3:28:b3:
         0d:46:22:bd:72:1a:8b:73:8a:e5:2a:9b:1e:7a:ef:0f:63:2b:
         1d:a3:4f:f8:2e:33:3a:ef:87:60:53:6c:01:30:3c:e1:f1:b7:
         b1:64:63:f1:9b:17:13:2e:7b:4f:96:fc:50:21:02:3b:45:94:
         bb:99:c0:9a:a1:91:38:49:0a:93:bb:c5:47:a7:5a:20:5b:75:
         6f:15:1c:32:7b:87:16:a1:46:e9:3f:12:89:b6:dc:13:db:2e:
         10:5d:f9:a5:47:c5:a8:ea:2e:21:fe:87:3a:da:4d:67:c0:fa:
         ce:c1:91:36:d4:83:8a:b8:0a:2b:d2:63:d6:64:81:f3:c7:6e:
         45:3c:6d:17:c8:5d:80:8e:1b:ac:43:fc:34:a4:ee:f9:fd:bb:
         03:d4:9f:42:78:a8:c9:69:9e:98:10:63:0a:14:c0:71:b0:3b:
         ee:3f:12:dd:5a:0e:02:a5:9e:c0:2c:c9:4c:3f:82:55:bb:ec:
         6f:d2:b3:cb:27:c0:60:72:b4:8a:0c:91:fa:76:f7:ef:c5:d9:
         7d:31:2a:08:28:18:8e:e7:d5:93:a9:2c:f3:6f:b7:88:7f:98:
         cf:c4:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:52:14 2026 by rpki-client