Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/F04F38FE301011F18102B6AEAD833773.roa
File:                     F04F38FE301011F18102B6AEAD833773.roa (raw, json)
Hash identifier:          RWHhNkGDjuTODyyfxHEdTol0hSXHwexIrOkgDCgZlwY=
Subject key identifier:   7E:67:54:C7:F5:9B:38:E1:2C:0F:DF:69:AA:3B:8F:E5:AB:FB:EA:9D
Certificate issuer:       /CN=A9155ECF/serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
Certificate serial:       C8
Authority key identifier: DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/F04F38FE301011F18102B6AEAD833773.roa
Signing time:             Sat 04 Apr 2026 10:27:53 +0000
ROA not before:           Sat 04 Apr 2026 10:27:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152698
IP address blocks:        163.227.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl
                          rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155ECF, serialNumber=DF31CF185090E154965EFFFBC664BDD721D8075F
        Validity
            Not Before: Apr  4 10:27:53 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69d0e7a9-be5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:19:6c:83:d9:19:f9:c4:c0:93:2d:b3:d3:71:
                    45:8c:f8:44:c7:e2:74:26:04:3f:30:6c:3c:38:b9:
                    9b:e5:2a:cd:7c:2f:ed:3d:4e:4b:b0:7e:e0:48:e0:
                    fe:5c:a2:73:dc:8d:a9:48:87:3d:b3:8d:ce:c3:3e:
                    60:0e:f5:c0:3e:81:ac:12:8e:91:3f:c5:7b:8d:05:
                    37:3e:77:8b:57:9f:85:14:f5:3a:dd:8c:18:bf:e7:
                    ee:fe:66:c2:87:0a:08:a5:99:3d:13:c5:22:45:68:
                    7e:09:11:a0:a3:1b:a9:ce:17:1b:ea:68:10:ff:c0:
                    91:ae:2c:08:67:92:fc:92:e3:7a:bc:6d:6c:a2:a5:
                    c4:cd:ca:8f:d5:b2:ef:74:70:d6:37:d7:d7:e0:ec:
                    d7:7d:05:d9:5a:66:c7:35:62:33:27:e9:2c:cf:5d:
                    8a:4b:38:78:6d:82:36:66:ca:fb:ea:63:ad:f9:3e:
                    9f:1a:c0:df:32:9b:f3:ae:c1:5a:dc:7f:c0:4d:d4:
                    97:f9:b7:26:fd:fb:1d:1a:e9:86:12:8a:b3:44:71:
                    64:3f:67:83:3f:5d:50:7a:53:41:66:10:78:be:5b:
                    55:90:56:a0:83:92:c8:77:26:f4:a6:48:14:bb:9c:
                    61:19:4e:c8:b6:b9:27:f9:ad:a2:ab:09:51:82:79:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:67:54:C7:F5:9B:38:E1:2C:0F:DF:69:AA:3B:8F:E5:AB:FB:EA:9D
            X509v3 Authority Key Identifier:
                keyid:DF:31:CF:18:50:90:E1:54:96:5E:FF:FB:C6:64:BD:D7:21:D8:07:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/3zHPGFCQ4VSWXv_7xmS91yHYB18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3zHPGFCQ4VSWXv_7xmS91yHYB18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155ECF/EF6B905C25F511F08BEFDA49C4F9AE02/F04F38FE301011F18102B6AEAD833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:f1:08:5d:6e:3a:72:0f:0a:9a:0e:81:67:a4:8e:bd:2a:
         c3:a0:fa:8e:e5:84:bb:02:82:16:fe:ee:b0:55:1f:dd:31:b9:
         ed:06:12:f6:1b:8d:b6:bc:d0:79:fa:48:38:03:df:9d:f9:7f:
         d2:56:9b:a7:6d:92:cd:e1:22:0a:f1:f0:3d:c0:72:a3:1c:98:
         09:09:35:1a:f4:92:a9:4f:08:ee:06:cc:a6:6c:74:20:b0:0d:
         da:ca:39:d8:20:61:c6:8f:79:7d:6f:30:a6:7c:83:2c:00:1d:
         75:18:9c:d4:ce:3c:82:4a:a9:52:e1:75:0b:37:55:73:53:83:
         92:ce:a1:41:0a:90:ae:f5:c9:79:e6:16:99:db:ab:8b:4d:30:
         2d:08:c1:9b:6a:fb:84:e6:7f:90:11:b8:98:79:62:3f:4c:af:
         b7:9e:ae:63:82:f2:65:cd:7b:63:9d:20:cd:a4:ed:3e:94:81:
         1d:26:aa:f0:bd:db:56:d1:02:55:c2:c4:41:16:04:24:c6:0d:
         66:67:a8:17:81:aa:83:96:0a:d0:3f:f0:0a:b3:ea:ae:4d:ba:
         60:bc:70:9a:84:fd:ad:66:d9:2e:3c:8f:27:6a:cd:12:0f:5b:
         69:50:ef:1b:72:2c:66:4b:33:05:cf:64:16:2f:5e:1e:19:d1:
         df:8b:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:49:21 2026 by rpki-client