Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED7A421422AE11F181DB3A14B7833773.roa
File:                     ED7A421422AE11F181DB3A14B7833773.roa (raw, json)
Hash identifier:          RDS70HT3+CCmxswDuXn8ce2jUMt77xJNoGj51qJ5KHw=
Subject key identifier:   0A:A6:A0:29:76:CD:EF:1E:C7:EE:DF:D4:3F:F7:B6:FB:6D:89:AC:AB
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E14
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED7A421422AE11F181DB3A14B7833773.roa
Signing time:             Fri 02 Oct 2026 15:27:04 +0000
ROA not before:           Fri 02 Oct 2026 15:27:04 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     142211
IP address blocks:        163.227.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28180 (0x6e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:04 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd48-4b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:19:cf:76:ba:9d:25:d7:e2:a7:37:9f:bb:
                    4a:d9:47:ec:bf:88:01:94:b7:e3:0c:d5:08:3e:a1:
                    6f:80:a1:c9:9c:2c:13:7a:3e:3a:d5:44:b3:c9:92:
                    8a:88:b0:99:3d:66:e0:56:ee:73:8e:78:01:fc:99:
                    e8:69:08:fd:bd:ba:7c:98:af:80:dc:84:9c:09:10:
                    e4:75:55:6d:fb:d7:1a:b6:7a:57:bd:4b:b1:4a:52:
                    8f:eb:84:62:30:4c:d1:d6:5b:ae:8e:ac:0b:ac:31:
                    85:eb:79:d3:3a:7d:d4:12:28:0a:82:d5:c1:f8:1e:
                    1b:a9:6d:01:40:81:c8:b5:77:a3:1d:7b:8e:e5:aa:
                    65:b3:c3:98:45:45:d3:29:2b:d0:41:81:47:31:8e:
                    f0:b8:1a:31:e8:f9:74:2e:84:02:c5:fd:86:3b:2d:
                    45:28:c4:6f:6f:53:18:b8:7d:4f:e4:fe:bb:00:60:
                    64:61:1d:bf:f2:ca:19:e5:ca:e8:46:ad:0a:6d:41:
                    78:80:44:d4:eb:87:f1:e7:89:93:78:54:f5:cb:da:
                    11:de:71:86:d8:95:41:c0:d7:fb:33:f1:b0:13:b2:
                    ca:7f:e1:cf:d2:50:dc:8e:f3:71:6f:9a:16:3c:7e:
                    15:6b:c2:ab:ce:91:86:2a:a6:fe:9c:73:d3:1b:ab:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A6:A0:29:76:CD:EF:1E:C7:EE:DF:D4:3F:F7:B6:FB:6D:89:AC:AB
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED7A421422AE11F181DB3A14B7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:31:5a:de:cd:fe:82:7f:e1:cd:53:36:e3:75:57:a7:95:19:
         85:a4:be:bc:d3:db:bf:f3:3a:87:91:e3:e0:74:99:82:07:34:
         90:c2:42:d0:c8:fb:d8:18:d4:df:43:fb:53:42:99:a9:18:a2:
         90:39:06:1e:e6:5a:89:27:d3:6b:95:ea:78:82:20:f7:ae:4e:
         24:6a:05:01:b5:e7:bf:92:cd:bb:79:8e:c3:16:46:93:25:8c:
         14:a5:8a:63:f2:bd:69:80:a2:dc:11:88:17:bd:2f:39:4a:3b:
         f9:f8:88:95:7c:d5:aa:76:74:f7:ac:31:02:05:b8:34:58:a9:
         ed:5d:b8:bc:83:3a:48:97:c3:33:17:84:6a:e2:36:77:0b:e0:
         b1:8f:b5:de:f6:37:bc:53:a6:8c:87:4c:ca:bb:cf:14:d5:fe:
         9b:e5:0b:34:83:9f:5f:71:37:11:5f:c2:c3:0e:5e:e2:11:22:
         63:8e:12:0d:3c:09:bd:28:3a:8e:dc:94:48:49:c7:01:42:22:
         3a:98:5f:29:25:c5:fb:7d:98:b0:d4:47:04:f2:be:f7:33:83:
         15:df:39:ce:37:1d:42:3a:c9:0c:5f:52:00:a9:73:98:f5:2d:
         27:50:1a:49:6b:6c:87:85:6e:de:57:f6:75:57:48:52:3c:12:
         1f:13:cc:65
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICbhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUyNzA0WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2Q0OC00YjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArqoZz3a6nSXX4qc3n7tK2Ufsv4gBlLfjDNUIPqFvgKHJnCwTej461USzyZKK
iLCZPWbgVu5zjngB/JnoaQj9vbp8mK+A3IScCRDkdVVt+9catnpXvUuxSlKP64Ri
MEzR1luujqwLrDGF63nTOn3UEigKgtXB+B4bqW0BQIHItXejHXuO5apls8OYRUXT
KSvQQYFHMY7wuBox6Pl0LoQCxf2GOy1FKMRvb1MYuH1P5P67AGBkYR2/8soZ5cro
Rq0KbUF4gETU64fx54mTeFT1y9oR3nGG2JVBwNf7M/GwE7LKf+HP0lDcjvNxb5oW
PH4Va8KrzpGGKqb+nHPTG6uYsQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAqmoCl2
ze8ex+7f1D/3tvttiayrMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUQ3QTQyMTQy
MkFFMTFGMTgxREIzQTE0Qjc4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAo+PlMA0GCSqGSIb3DQEBCwUAA4IBAQDBMVrezf6Cf+HNUzbjdVen
lRmFpL6809u/8zqHkePgdJmCBzSQwkLQyPvYGNTfQ/tTQpmpGKKQOQYe5lqJJ9Nr
lep4giD3rk4kagUBtee/ks27eY7DFkaTJYwUpYpj8r1pgKLcEYgXvS85Sjv5+IiV
fNWqdnT3rDECBbg0WKntXbi8gzpIl8MzF4Rq4jZ3C+Cxj7Xe9je8U6aMh0zKu88U
1f6b5Qs0g59fcTcRX8LDDl7iESJjjhINPAm9KDqO3JRISccBQiI6mF8pJcX7fZiw
1EcE8r73M4MV3znONx1COskMX1IAqXOY9S0nUBpJa2yHhW7eV/Z1V0hSPBIfE8xl
-----END CERTIFICATE-----
Generated at Sat Oct 24 16:36:24 2026 by rpki-client