Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/F31C1B909D3C11F097272925C4F9AE02.roa
File:                     F31C1B909D3C11F097272925C4F9AE02.roa (raw, json)
Hash identifier:          Ni+hssO04KnuyQQOCmsSYv4XdgiF8EO+5YTPtvzp6Vo=
Subject key identifier:   A5:84:D3:95:F2:69:2C:65:91:0D:2C:D0:77:88:71:F1:DF:12:62:93
Certificate issuer:       /CN=A9170927/serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
Certificate serial:       C6
Authority key identifier: 27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/F31C1B909D3C11F097272925C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:45:16 +0000
ROA not before:           Mon 29 Sep 2025 14:02:35 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140641
IP address blocks:        163.223.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl
                          rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 05:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170927, serialNumber=279C9D79824BA2046F138AF6CDB8A3B08F03BEB3
        Validity
            Not Before: Sep 29 14:02:35 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a5865c-1490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:7e:40:fe:9e:43:d7:f7:c8:62:2d:17:18:
                    36:6b:20:f2:db:0d:e9:5b:08:20:94:d7:cd:9e:fd:
                    2b:a1:16:ad:64:2d:ee:a5:8a:8a:87:cb:5a:c6:fa:
                    8e:eb:f4:43:4c:73:b8:80:77:ab:3f:e4:61:d9:04:
                    ca:90:45:11:da:c0:7b:ac:46:96:df:63:d8:d6:c1:
                    05:dd:97:5e:69:82:13:9d:df:d5:94:2b:a1:48:b8:
                    eb:1d:f1:31:63:8c:b3:d1:c7:78:95:7a:6a:e2:f8:
                    72:7e:1b:bb:4c:20:99:e0:f4:28:34:b4:c0:4f:8d:
                    7f:3c:58:91:cf:f2:e0:ef:f1:c2:8b:dd:81:48:d8:
                    4d:7a:d9:1c:69:58:20:9a:7d:89:17:ac:d0:f0:c4:
                    ff:2a:fb:d7:f6:24:98:19:39:fa:82:ce:ec:c4:ac:
                    7c:b7:de:9b:1a:a7:a9:a5:d0:4f:2c:c5:12:49:7b:
                    71:a7:86:18:11:74:89:cf:d3:e3:b4:84:bd:14:38:
                    fd:04:b8:5e:77:cd:34:68:e9:86:f8:db:62:b2:57:
                    9e:32:ba:03:86:19:fc:5a:4b:66:b9:05:d6:f1:c0:
                    b3:2a:d7:66:13:4b:1f:85:ed:12:f1:9c:77:ed:2d:
                    99:6e:57:ba:cd:d1:08:ce:ce:71:8b:64:e5:1d:49:
                    30:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:84:D3:95:F2:69:2C:65:91:0D:2C:D0:77:88:71:F1:DF:12:62:93
            X509v3 Authority Key Identifier:
                keyid:27:9C:9D:79:82:4B:A2:04:6F:13:8A:F6:CD:B8:A3:B0:8F:03:BE:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/J5ydeYJLogRvE4r2zbijsI8DvrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J5ydeYJLogRvE4r2zbijsI8DvrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170927/C106D33C04DC11F0B6B25A43C4F9AE02/F31C1B909D3C11F097272925C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:64:e1:ea:e7:3c:5c:10:96:db:59:37:e9:77:1e:4d:2c:28:
         e1:58:4f:6f:98:76:ed:4a:c4:06:18:ac:3d:e2:0d:d8:8f:9f:
         45:64:0b:4f:2d:3c:a6:59:18:fc:43:b4:a8:32:4a:65:a2:e8:
         2c:95:c5:71:5d:75:84:af:ea:49:7f:1a:a4:24:93:4f:93:e8:
         69:0a:73:e8:f0:4e:d8:9d:4b:99:20:5b:dc:40:49:76:5c:45:
         3d:02:f6:77:81:00:31:b8:94:df:e0:ed:11:2b:76:fa:0e:c7:
         66:c7:46:b7:2a:33:8c:55:20:70:01:81:93:9a:df:1e:e0:cb:
         76:85:8f:bb:45:be:92:a1:fd:a6:ac:89:93:97:4c:3b:58:e5:
         40:7a:3a:a5:83:91:c0:37:c1:ec:f1:2b:ff:fd:26:70:27:1d:
         88:ef:4b:e3:c7:dd:69:b4:81:72:97:e3:ad:ab:ed:75:44:3a:
         95:4b:27:49:fd:e6:88:3b:61:d2:c6:25:3f:cf:0f:ee:50:8f:
         23:e9:c8:30:f9:61:b4:c1:0e:78:7a:2b:c7:c3:93:0c:7f:5d:
         1c:c4:38:95:f5:fe:8b:00:69:3a:13:ff:7f:da:5e:e4:0f:13:
         04:94:c7:f0:6a:9d:8d:f4:96:d5:eb:17:d0:fb:aa:c7:bb:df:
         fa:f9:6c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:31:06 2026 by rpki-client