Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/54994112205211F0953F2A63C4F9AE02.roa
File:                     54994112205211F0953F2A63C4F9AE02.roa (raw, json)
Hash identifier:          nm96b6i92qA7qEGdNR3AePXqeyUotK/C2igP2vekEIw=
Subject key identifier:   D9:91:7F:53:8C:3A:CF:AC:3D:1C:0E:E8:5D:5B:51:29:89:B5:09:4E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EC8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/54994112205211F0953F2A63C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:19:41 +0000
ROA not before:           Thu 28 Aug 2025 14:56:37 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153651
IP address blocks:        163.223.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24264 (0x5ec8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:37 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cfd-d5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:15:ae:7f:eb:21:97:fb:6a:09:2d:ef:25:
                    b4:45:86:81:fa:da:ec:9b:4d:bb:08:4c:28:63:d9:
                    10:03:6a:24:be:65:ad:34:23:68:66:6c:cc:d4:b2:
                    67:45:c8:e3:40:42:ab:62:b3:dc:68:2e:0d:00:7f:
                    09:2c:a3:b9:45:26:a7:0e:9c:71:cf:be:9c:5a:b7:
                    76:d5:82:50:7f:30:f5:ed:ff:89:24:5b:f4:ed:62:
                    bb:36:08:22:a1:f0:d0:df:0e:06:e7:bf:b7:3a:7f:
                    67:39:33:1d:55:84:db:c6:0e:7e:b1:bf:47:f8:8f:
                    d6:21:c6:1f:d9:42:2c:13:d9:db:a9:5c:74:9d:51:
                    a1:ae:5b:77:e0:20:fd:e2:bb:1d:63:0e:29:0e:b2:
                    a7:cb:7e:44:fd:e2:38:8a:f8:4f:34:62:21:d2:31:
                    c0:1c:dc:44:23:e0:6d:18:e5:67:55:46:29:a0:ff:
                    e5:1b:fc:b8:fc:e1:70:f4:d6:e5:2e:7c:0f:b4:0a:
                    3f:5b:3b:92:c8:c3:4d:be:dd:d1:7a:d1:2b:4d:f2:
                    69:c2:c2:fb:04:5e:79:91:02:3f:a0:a8:26:f4:2f:
                    d3:32:23:00:56:2d:27:d8:3f:fb:b1:81:b2:98:4d:
                    e0:f7:68:a0:f0:92:15:ab:51:03:b7:f8:9a:39:3e:
                    28:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:7F:53:8C:3A:CF:AC:3D:1C:0E:E8:5D:5B:51:29:89:B5:09:4E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/54994112205211F0953F2A63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:0c:6b:a4:2e:32:68:62:13:5a:e1:5e:ce:94:cf:65:46:
         60:45:a2:98:d1:38:b4:e3:ea:85:9a:e6:46:d5:6f:5a:f1:bf:
         65:2f:af:8b:31:58:9d:4a:39:34:9f:28:21:e1:0c:1a:66:fa:
         0f:30:30:00:3a:1e:21:6f:17:3b:2f:86:d9:94:f6:33:d2:f6:
         e1:0e:8d:e6:9e:b0:25:7a:58:4d:01:23:b2:67:77:e9:31:bb:
         f2:06:50:5d:29:2c:5a:ee:31:60:82:28:5d:f9:b3:5a:93:b8:
         dc:bc:23:1a:85:f2:3d:76:30:be:2e:cc:e8:27:f2:a9:7b:7c:
         68:c5:48:82:2c:e6:df:8d:c4:45:99:3a:01:66:c3:e9:5d:a1:
         50:e6:51:3a:65:37:10:7d:86:03:ce:e1:11:fb:5a:76:ea:1a:
         6f:7b:93:e9:97:ae:c8:d3:7b:da:0c:40:b1:e6:b0:26:b3:c7:
         d9:45:63:ce:0f:76:db:f2:f7:a2:ec:a9:10:b4:41:5b:ef:85:
         4d:f9:fb:0e:08:49:26:40:bd:c5:16:21:7b:5c:2d:e6:b7:38:
         7f:1c:6a:be:13:6a:c7:7c:ce:3e:25:bc:e1:d8:69:21:c5:96:
         cb:ea:16:db:72:de:f3:ec:2a:f7:30:de:2f:a3:53:10:7c:bf:
         3e:c6:85:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:59 2026 by rpki-client