Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/E55629C4DFEF11F083E035D2586F56BC.roa
File:                     E55629C4DFEF11F083E035D2586F56BC.roa (raw, json)
Hash identifier:          SBvL8BPaJLUxY6UhRZ+sX6nLEtB24b/i3LiwKLOJt90=
Subject key identifier:   49:39:F3:DC:76:F0:4D:A7:C6:BB:65:74:9E:75:22:8E:3E:32:9C:4E
Certificate issuer:       /CN=A91886AB/serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
Certificate serial:       96
Authority key identifier: 27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/E55629C4DFEF11F083E035D2586F56BC.roa
Signing time:             Tue 23 Dec 2025 11:09:49 +0000
ROA not before:           Tue 23 Dec 2025 11:09:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153396
IP address blocks:        163.227.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl
                          rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 05:42:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886AB, serialNumber=27EB592C9F7CF212725C7A000E2F6D0D96CA5235
        Validity
            Not Before: Dec 23 11:09:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=694a787c-f68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c0:c8:f0:a7:a1:af:c3:39:ea:3a:34:5d:90:
                    6c:ae:f6:f6:3d:f8:e6:c5:99:a0:b3:39:2b:a5:ae:
                    0e:ef:5b:a9:a3:ae:33:a4:b8:c2:d1:4a:d1:ae:5b:
                    43:46:94:0d:51:31:22:18:3f:cf:a9:e2:9c:47:05:
                    e1:26:dd:1a:5f:1b:b0:a1:ef:18:e5:97:e5:25:34:
                    12:ef:63:5d:0d:fa:29:ef:1f:9d:5c:8e:9c:88:30:
                    aa:53:1c:07:63:1a:a8:0d:bc:18:e9:70:19:ae:ab:
                    eb:09:45:fd:d0:ce:48:21:0e:27:23:22:9c:82:ca:
                    45:24:74:5e:d9:10:87:5c:39:c6:71:66:2f:d4:b2:
                    81:3d:9f:cf:8d:77:75:4f:35:07:04:e7:bb:e9:88:
                    b1:2d:77:63:da:5b:61:78:01:a7:f9:3e:cb:55:20:
                    f7:40:25:59:bb:94:4b:4d:a4:06:d3:c2:f5:27:6c:
                    03:a0:d6:8e:8a:bc:0a:48:93:93:de:98:92:0c:ae:
                    64:b5:41:18:8b:68:01:78:d0:81:8c:cc:81:aa:16:
                    83:24:01:e0:70:ba:10:a8:a3:c4:5c:2a:34:c3:f4:
                    79:56:49:7d:d7:55:d8:b5:8f:80:9e:29:20:d6:6d:
                    5c:b0:b9:45:d7:dc:0c:86:7b:45:3a:a1:fb:81:04:
                    98:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:39:F3:DC:76:F0:4D:A7:C6:BB:65:74:9E:75:22:8E:3E:32:9C:4E
            X509v3 Authority Key Identifier:
                keyid:27:EB:59:2C:9F:7C:F2:12:72:5C:7A:00:0E:2F:6D:0D:96:CA:52:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/J-tZLJ988hJyXHoADi9tDZbKUjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-tZLJ988hJyXHoADi9tDZbKUjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886AB/758102321C5811F08C4E974DC4F9AE02/E55629C4DFEF11F083E035D2586F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ad:f0:67:c2:4e:8c:9c:e4:92:f4:84:e0:f0:f7:65:19:7b:
         d4:5c:a1:86:56:e2:55:2a:c7:4d:b4:cd:32:9e:23:17:2f:a0:
         f7:28:de:a6:01:5f:4b:97:8e:60:eb:cd:f6:14:10:18:00:e7:
         93:de:07:7d:d8:95:e2:3d:41:01:d7:c5:48:75:dd:77:49:f6:
         04:2c:94:b1:27:a4:37:e7:91:b7:5f:7a:6f:88:2c:7f:15:5a:
         3d:70:cb:71:4d:f0:59:ef:3b:df:f5:f5:cf:f1:db:8d:af:0e:
         b7:7f:73:01:d3:80:36:14:f4:1c:c6:7f:6b:96:6a:fe:3d:43:
         94:ba:32:80:0b:c9:c4:a9:44:d7:c3:93:d6:f8:21:57:24:3d:
         85:a9:9e:34:81:7a:3e:93:52:69:6d:3b:34:7d:75:79:b1:d6:
         d8:88:73:f9:1a:a4:c9:94:19:38:99:ea:d9:20:19:1a:b0:41:
         da:f0:47:cb:1f:2e:04:a3:88:b5:a9:f5:cf:1b:9c:52:0e:fc:
         1f:7f:e9:c6:5a:fa:90:33:3d:bd:db:d9:8a:de:0d:f1:11:b9:
         fb:da:59:5c:69:f2:75:39:f3:e7:e4:5d:bc:93:58:00:d9:6d:
         c8:a6:c8:e4:2c:4f:db:59:63:68:b2:72:84:0e:3b:1e:cd:1a:
         64:13:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 21:23:01 2026 by rpki-client