Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/4B37D9B48BB611F190813B556911F970.roa
File:                     4B37D9B48BB611F190813B556911F970.roa (raw, json)
Hash identifier:          NbVYNYHmcKXHODbzAJrn4RRs0xKrWFstWN1jI5S2y6s=
Subject key identifier:   A9:85:3B:C6:D6:3B:16:C3:D3:06:4B:7A:B4:DA:32:FE:09:EC:8E:CA
Certificate issuer:       /CN=A91D5ECA/serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
Certificate serial:       06CA
Authority key identifier: FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/4B37D9B48BB611F190813B556911F970.roa
Signing time:             Thu 30 Jul 2026 01:30:49 +0000
ROA not before:           Thu 30 Jul 2026 01:30:49 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     9420
IP address blocks:        163.223.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl
                          rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 22:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1738 (0x6ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5ECA, serialNumber=FB805D5379CB07D52A411EFFFD0491CA39B7BF27
        Validity
            Not Before: Jul 30 01:30:49 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a6aa949-ac6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1c:2b:71:60:5e:3e:99:77:ab:0f:d3:e8:8a:
                    c6:49:44:76:0b:a9:74:e6:36:23:1e:eb:61:c2:97:
                    6f:4d:e5:89:f1:46:75:e0:3f:52:08:08:fa:a1:d5:
                    70:46:79:29:78:29:ec:41:c9:f3:67:dc:fb:52:d2:
                    3c:30:be:5e:05:4c:db:01:58:4c:99:50:b9:18:c7:
                    57:d9:4b:87:b0:7d:19:ef:e2:17:77:9b:3d:51:82:
                    21:05:bf:b9:74:9c:69:ac:bc:b1:da:42:c0:ae:02:
                    c6:f1:9a:b4:74:1f:e2:c1:79:e6:19:e0:69:23:28:
                    d7:40:63:67:df:2a:7a:1c:90:52:e2:d2:e3:d3:26:
                    5f:cd:fa:77:95:be:a8:fa:20:cf:ad:b0:99:3e:15:
                    af:2d:22:ff:c6:e8:9a:58:6c:3f:6b:a8:15:68:30:
                    ef:82:d9:bb:6d:0e:9e:81:16:fd:a2:7f:a9:02:44:
                    b6:e0:7c:e3:65:72:3a:2c:46:b8:ad:74:4a:29:fc:
                    95:94:b2:68:35:36:2c:c5:ee:eb:9b:23:c0:cc:09:
                    ea:d5:de:20:12:d4:cc:72:70:59:6d:b8:15:f5:d5:
                    9a:54:06:80:99:f1:8d:a6:cb:a5:0b:31:52:92:03:
                    8e:3e:82:13:68:a4:f4:c8:80:f0:b6:8f:c3:20:2b:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:85:3B:C6:D6:3B:16:C3:D3:06:4B:7A:B4:DA:32:FE:09:EC:8E:CA
            X509v3 Authority Key Identifier:
                keyid:FB:80:5D:53:79:CB:07:D5:2A:41:1E:FF:FD:04:91:CA:39:B7:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/-4BdU3nLB9UqQR7__QSRyjm3vyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4BdU3nLB9UqQR7__QSRyjm3vyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5ECA/BFD23206B92511EBB0E2CB82C4F9AE02/4B37D9B48BB611F190813B556911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:5c:ca:bb:3b:1c:8d:58:88:c4:e6:65:77:35:7a:98:a3:
         ce:a7:e7:ba:dd:36:d0:f5:ca:92:52:32:55:9c:81:7a:fd:f9:
         94:fe:4c:db:78:66:2e:5b:a3:2b:91:ff:24:8f:fa:ca:ce:c9:
         5e:e8:ce:bb:ae:2d:f6:9f:95:15:50:8e:c5:d5:62:58:96:b2:
         df:eb:35:ee:03:84:9e:6f:a2:9d:c6:df:99:b9:52:3d:58:80:
         b8:48:e0:b8:1f:7c:a5:df:0e:a2:38:bf:15:c8:d4:f1:11:9d:
         9b:e9:45:e4:cf:23:c5:dd:05:3e:6a:54:66:c5:63:7e:e9:54:
         08:54:a5:85:88:7c:f1:c4:43:ae:f3:48:a9:58:ae:4b:c3:7e:
         ec:de:a5:e9:3d:b7:8c:21:fd:0f:fb:dd:d4:4a:67:cf:0e:0e:
         e5:51:ee:86:6b:58:99:bc:ee:2a:6e:5c:41:17:ad:00:c9:a9:
         37:d4:ff:fe:73:24:d8:3a:ee:1d:5a:9f:b3:f1:54:94:d0:ba:
         25:4b:fe:3f:e2:29:8e:ad:b4:db:d4:34:65:0b:ea:ee:f5:2c:
         57:ad:20:dc:e7:66:d0:a5:9a:17:7f:be:61:4b:f6:74:c7:d1:
         db:42:08:54:e9:b4:df:30:8d:a9:b0:98:14:26:16:e7:d3:5c:
         7a:6a:52:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:06:42 2026 by rpki-client