Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/C317D9BA341A11F0B6835730C4F9AE02.roa
File:                     C317D9BA341A11F0B6835730C4F9AE02.roa (raw, json)
Hash identifier:          Itw7i5+3Ys3+W27Y/T74jWFCuSjUgD4+TPQJCWUevdM=
Subject key identifier:   9F:CE:DA:00:B0:C2:4D:E4:54:55:2D:37:00:53:3D:38:26:8B:2E:87
Certificate issuer:       /CN=A91A839E/serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
Certificate serial:       CE
Authority key identifier: C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/C317D9BA341A11F0B6835730C4F9AE02.roa
Signing time:             Wed 17 Jun 2026 07:37:15 +0000
ROA not before:           Wed 17 Jun 2026 07:37:15 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     397032
IP address blocks:        163.227.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl
                          rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A839E, serialNumber=C12109F55C55873A41C3778372FB09A0B740D2CD
        Validity
            Not Before: Jun 17 07:37:15 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a324eab-032b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c7:4e:39:f9:ab:5c:19:48:4e:28:71:15:37:
                    69:cb:30:05:57:bd:f0:6a:b9:ae:bb:bc:53:13:c9:
                    7a:5b:3b:07:02:f9:e1:03:e0:c7:34:38:95:68:04:
                    75:4c:80:1c:e5:2c:01:c4:92:87:82:f2:ff:c1:41:
                    33:9d:d3:90:4b:ea:25:92:1f:ff:0e:4e:ea:74:fa:
                    80:84:87:7b:cf:77:0c:75:cf:0c:73:0e:69:2e:a1:
                    1f:09:a7:0e:e8:42:fb:63:78:48:2f:da:eb:f3:bc:
                    13:3a:9d:f2:53:d2:92:fa:dd:79:61:29:5f:e7:99:
                    b7:25:a3:b7:e4:85:3a:bf:76:f6:0f:5c:d1:ec:c5:
                    82:91:6f:5f:f9:02:15:04:4e:d8:82:72:59:b4:c1:
                    41:ec:8d:08:4b:74:92:7c:70:1b:92:4e:9e:49:a2:
                    75:12:19:8e:65:7c:e7:7b:66:28:fb:00:32:80:28:
                    87:0c:e3:02:f5:df:40:a8:b5:0d:3e:4b:13:75:6f:
                    78:2f:9a:2f:52:51:26:c4:1d:89:2e:ff:5d:c6:e2:
                    e0:78:4d:f8:6f:91:08:97:79:d4:5b:7b:2a:2e:59:
                    51:f4:66:89:08:97:3d:b7:4c:23:15:e9:5f:15:17:
                    76:92:2f:eb:fe:29:98:50:9a:ee:1d:10:ee:68:2d:
                    81:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CE:DA:00:B0:C2:4D:E4:54:55:2D:37:00:53:3D:38:26:8B:2E:87
            X509v3 Authority Key Identifier:
                keyid:C1:21:09:F5:5C:55:87:3A:41:C3:77:83:72:FB:09:A0:B7:40:D2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wSEJ9VxVhzpBw3eDcvsJoLdA0s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A839E/345D0586336811F0B1B56D6CC4F9AE02/C317D9BA341A11F0B6835730C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:cb:f2:83:a5:a6:d9:c3:49:f2:9a:11:2e:60:47:8a:cd:e6:
         84:e9:46:fc:7e:17:56:79:c0:67:ad:c1:81:51:71:a1:ed:81:
         b9:26:a1:f4:1c:dd:50:d6:69:27:3b:69:05:5f:b2:7c:92:1b:
         a3:b8:af:b3:54:7e:06:51:05:22:50:e9:b8:48:2d:60:9d:cc:
         a1:3e:76:26:9d:08:bd:93:4d:d2:36:02:be:5c:7d:8d:71:8f:
         c1:5a:9c:dd:82:ab:1c:37:43:44:a0:3b:13:29:b6:e7:d5:84:
         43:e5:d4:c0:e0:92:37:b7:b9:fb:8b:ff:cd:32:aa:97:6e:db:
         bf:83:23:be:be:07:4b:32:d8:32:c3:c7:b0:f5:6b:45:c0:21:
         08:4c:6e:cd:87:cf:71:8f:2f:e1:5b:94:91:1c:46:a9:0e:0b:
         e7:db:ad:4c:88:9d:ce:f7:be:1f:02:46:f1:be:73:96:bb:ba:
         c5:af:c0:89:e2:d2:cd:f5:cb:bf:cc:ff:fb:51:cc:db:48:a1:
         29:83:7d:c0:57:8c:ad:45:59:ea:d3:d1:ea:5c:a6:f8:bc:17:
         06:f9:3f:34:61:a3:7c:23:8e:08:cd:fd:89:f0:d5:8f:20:fe:
         f4:b6:33:03:c3:b5:2b:e5:a4:8a:e1:5a:9d:d6:de:b2:32:e7:
         c3:42:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 06:18:57 2026 by rpki-client