Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
File:                     C865C1BC8D2E11F0A977AE41C4F9AE02.roa (raw, json)
Hash identifier:          z/pF1TiSSvu2UaCDjXshPW7+WO39dYPms0u7Umk74/0=
Subject key identifier:   00:DE:ED:44:EF:77:5F:8E:E3:8E:F9:85:D3:F0:79:50:36:2E:57:F7
Certificate issuer:       /CN=A9189D9B/serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
Certificate serial:       EA
Authority key identifier: 7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa
Signing time:             Sat 27 Jun 2026 07:42:26 +0000
ROA not before:           Sat 27 Jun 2026 07:42:26 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153836
IP address blocks:        163.227.185.0/24 maxlen: 24
                          2001:df5:77c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl
                          rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Jul 2026 08:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189D9B, serialNumber=7F0397C6A94E525976834BBFD5802F15B795FB8E
        Validity
            Not Before: Jun 27 07:42:26 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a3f7ee1-d283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7c:e3:fb:86:e0:0c:88:d9:ad:54:c3:43:da:
                    1f:86:a3:49:fd:7b:42:e8:b3:b7:18:c1:ed:bc:da:
                    2f:53:ab:f5:bd:1c:dc:23:00:63:3f:64:79:2c:94:
                    03:c6:c5:bc:4d:b1:c1:2d:93:99:c1:f2:27:41:06:
                    ab:7a:3b:cf:f0:5f:1d:1e:d4:4b:19:3e:ed:07:ec:
                    33:8d:bb:1f:4d:05:ec:c5:22:4e:5c:10:96:a4:b7:
                    2c:db:ff:a1:c9:08:e1:4d:7e:55:e2:32:21:68:03:
                    ac:b4:2d:47:dd:d0:43:1f:98:99:e8:ba:a3:a7:80:
                    f0:77:f7:22:e3:5a:88:69:f5:95:67:ce:ea:38:74:
                    64:6e:56:fd:36:f8:a0:c3:8d:f7:fa:ce:0d:17:34:
                    13:3f:ad:59:56:9d:c6:58:c6:07:c4:88:59:18:22:
                    cc:4e:b0:1b:ee:ad:be:0c:ac:b7:46:21:a4:36:08:
                    7f:a0:99:6a:ea:6d:3a:6b:3f:5f:77:d5:90:71:5b:
                    f4:dd:fb:fa:e0:85:d7:55:5e:5c:ef:20:b3:04:f7:
                    64:2d:63:1a:6d:ba:a0:98:49:c4:59:2d:46:8f:1d:
                    b7:b3:dc:8f:07:f5:ec:1e:c7:fd:0a:f8:f1:6d:d3:
                    18:9b:cb:b5:2f:c6:b2:b8:93:97:44:39:7c:4a:86:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DE:ED:44:EF:77:5F:8E:E3:8E:F9:85:D3:F0:79:50:36:2E:57:F7
            X509v3 Authority Key Identifier:
                keyid:7F:03:97:C6:A9:4E:52:59:76:83:4B:BF:D5:80:2F:15:B7:95:FB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/fwOXxqlOUll2g0u_1YAvFbeV-44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fwOXxqlOUll2g0u_1YAvFbeV-44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189D9B/B2A577C2274511F0AED2B469C4F9AE02/C865C1BC8D2E11F0A977AE41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.185.0/24
                IPv6:
                  2001:df5:77c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:a4:83:f1:b3:0c:eb:81:af:af:db:7b:d7:15:40:08:6f:a2:
         63:b9:ed:83:b2:01:00:7c:98:d8:ac:f3:f6:91:a2:f6:44:ac:
         28:36:c5:f7:4d:d5:24:bd:43:cc:73:3b:ea:aa:2a:94:88:fe:
         52:aa:c8:90:19:9c:d1:1f:5b:75:41:3d:57:be:55:74:06:71:
         af:7f:ad:44:18:13:6c:82:51:07:0e:5d:8b:b8:1a:17:76:9e:
         3f:20:5e:95:81:09:f0:71:4d:91:89:ce:50:9f:7c:ed:ff:87:
         5e:7f:a2:ae:8c:b4:0a:73:51:3c:1f:17:39:29:12:45:d6:64:
         88:31:94:7f:1e:bd:46:80:79:32:e2:15:35:6e:a8:c6:cc:b3:
         bd:51:ed:57:29:a8:c1:be:8b:43:39:5d:04:84:72:c4:5c:05:
         79:7a:44:93:f6:dd:86:96:26:42:dd:a0:17:cf:65:2f:16:5e:
         5d:87:8f:f2:8f:84:88:eb:83:af:96:ce:e3:be:8c:f2:25:4a:
         22:4a:46:8a:75:82:27:1b:76:6a:1a:bb:51:42:de:3a:ef:ec:
         fe:ae:c4:53:cb:c1:97:19:77:9e:14:97:41:09:6e:84:51:d3:
         69:8e:a6:f4:47:96:cb:7a:f9:2e:ad:14:ff:50:36:21:75:85:
         8c:c2:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 06:46:29 2026 by rpki-client