Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
File:                     51B36E9EF52911F0B0B7B3125D6F56BC.roa (raw, json)
Hash identifier:          +YeqTwufzvgzhnkt/mIw5JG1iBbYnBY3vNzMAfLJODo=
Subject key identifier:   80:5A:76:07:1E:6D:10:4F:E2:03:52:29:F8:D5:AD:C0:5C:25:2D:BE
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       D6
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa
Signing time:             Sun 29 Mar 2026 06:42:04 +0000
ROA not before:           Sun 29 Mar 2026 06:42:04 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     10075
IP address blocks:        163.223.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:18:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Mar 29 06:42:04 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69c8c9bc-4be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:81:08:a4:20:cc:35:3b:7b:84:f2:bf:b3:
                    5b:e2:7e:13:14:b8:c6:ee:47:22:84:8e:ba:52:02:
                    a1:71:3f:4f:2e:ec:1b:8b:b4:70:6b:91:ef:81:c3:
                    f5:43:c6:10:a8:16:38:0e:df:83:5b:43:cd:26:b1:
                    fe:7f:82:f0:24:a4:16:7a:1a:c5:a7:72:0c:08:25:
                    a2:09:b0:3f:d5:05:ce:33:94:5a:30:9c:de:ce:02:
                    33:65:ed:5a:ec:62:93:ee:7d:bc:85:97:ca:78:5c:
                    a1:17:46:a7:79:41:ff:65:01:92:4f:6d:38:63:07:
                    e5:d9:d3:1d:14:86:df:65:5c:d4:23:d1:e4:4e:58:
                    25:2a:74:15:f9:68:24:25:ae:a2:a1:ae:19:3f:8e:
                    62:b5:4b:e2:29:9c:dc:9d:16:7c:7c:c7:8a:5e:81:
                    e7:b3:ba:ad:85:93:f4:d4:fc:99:16:f3:dc:19:e7:
                    ed:25:10:73:08:62:e4:c3:7b:59:98:86:af:c9:49:
                    fe:89:b9:dd:25:7f:fb:68:57:9a:6a:80:1e:49:30:
                    92:bd:99:d9:63:45:d6:1d:7e:d1:da:c9:28:8d:17:
                    11:67:b0:8d:94:5a:cb:ba:34:27:a9:45:af:63:4b:
                    2d:f4:75:8a:0b:c1:ff:72:d0:55:ba:c7:76:16:de:
                    31:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5A:76:07:1E:6D:10:4F:E2:03:52:29:F8:D5:AD:C0:5C:25:2D:BE
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/51B36E9EF52911F0B0B7B3125D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:53:ab:83:80:0b:d0:ad:01:7f:89:48:1e:db:1e:6f:1d:
         ab:f1:cb:98:66:d6:df:69:5f:4b:6d:b3:29:6a:96:a9:93:aa:
         3e:d0:b5:90:3c:5f:2a:56:3a:56:fe:26:92:a4:15:7c:00:67:
         fd:63:f5:dd:bb:5f:f5:31:d6:28:84:7f:49:8e:ad:46:05:05:
         c9:f9:9c:c7:0d:8d:20:2c:0c:4f:4c:9e:7d:a8:93:a8:03:9f:
         de:16:05:d4:c8:1e:d9:37:3e:b7:f6:05:31:7d:33:3b:98:3c:
         e1:63:93:a6:33:c5:fc:f3:fa:b9:b3:d1:1d:72:2f:6d:b0:79:
         8d:6c:45:87:67:21:d5:d4:2e:11:9a:04:7a:b4:94:06:2f:64:
         6e:3c:8a:a4:b4:6f:74:0d:25:81:d5:53:cd:a3:5c:58:40:03:
         b2:19:b0:f0:ea:f5:c3:f9:b9:40:89:6e:29:38:a1:8a:78:41:
         ea:04:3d:de:1d:09:0a:50:bf:d2:cf:c2:27:38:f1:0c:b9:15:
         f8:fa:80:23:15:f1:21:fd:9b:48:68:e9:ef:0b:49:c6:25:b0:
         8b:8c:5c:89:4c:cc:3c:5d:d4:3a:2b:e7:eb:ed:fe:0f:5d:d0:
         e3:70:ae:f0:9d:ce:eb:f2:f5:c4:54:a9:08:a8:17:e4:1a:5e:
         d5:44:1d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:27:10 2026 by rpki-client