Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/C511A0AC8B1211F1A6305EFC3311F970.roa
File:                     C511A0AC8B1211F1A6305EFC3311F970.roa (raw, json)
Hash identifier:          kN/ivaGsWqIUrlhkZSoC5N3qdIumYbcYX0mc+fcOaPs=
Subject key identifier:   E2:F5:18:A7:BD:81:4E:06:B3:7C:75:83:BC:2E:BF:C3:C9:06:33:1B
Certificate issuer:       /CN=A91FF5B9/serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
Certificate serial:       0112
Authority key identifier: 91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/C511A0AC8B1211F1A6305EFC3311F970.roa
Signing time:             Wed 29 Jul 2026 06:00:16 +0000
ROA not before:           Wed 29 Jul 2026 06:00:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     174
IP address blocks:        163.223.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl
                          rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 06:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF5B9, serialNumber=91176D169C42F03D95282BBBA204C4E44D31ED09
        Validity
            Not Before: Jul 29 06:00:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6996f0-7441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:15:77:ff:24:fe:42:43:1a:04:ce:c7:ff:
                    b5:73:c7:f6:86:57:fe:8f:be:32:9f:57:cd:9d:fd:
                    82:9f:11:69:aa:6f:7d:01:24:ac:d1:d5:7e:1b:5f:
                    ff:ac:0a:21:a8:1b:c0:75:40:d0:96:40:d0:6b:3a:
                    86:a3:9c:30:85:cc:6d:ea:d3:22:8c:66:13:1a:09:
                    d9:00:f4:e8:79:f1:d5:03:73:7b:72:63:0f:02:35:
                    b1:4a:e3:e8:da:4c:7e:7a:e2:91:29:20:57:b3:dd:
                    ae:a7:fa:d1:78:81:51:d9:9e:cb:1c:8d:f1:e0:03:
                    3d:15:80:27:6f:80:ba:4e:8d:34:d2:64:e8:6e:61:
                    8a:8b:63:f6:d6:c6:84:b2:c4:48:d4:f3:12:8c:66:
                    51:44:67:5e:59:97:48:bb:4f:9e:10:9d:48:e3:3e:
                    65:5a:26:3e:df:36:de:f8:a1:96:56:50:81:0c:ef:
                    b4:e6:a1:be:84:8e:e9:94:fd:33:38:89:4a:2f:e9:
                    2a:77:90:2d:32:99:c0:5a:80:10:74:e0:e9:07:cf:
                    d6:2f:65:23:2d:97:f4:9b:d6:c8:e1:57:05:75:5a:
                    4e:64:93:c1:fa:b7:af:b7:31:7c:f8:d7:77:c4:58:
                    76:7b:3e:77:b7:71:7a:4d:c0:86:29:30:53:b3:8d:
                    10:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F5:18:A7:BD:81:4E:06:B3:7C:75:83:BC:2E:BF:C3:C9:06:33:1B
            X509v3 Authority Key Identifier:
                keyid:91:17:6D:16:9C:42:F0:3D:95:28:2B:BB:A2:04:C4:E4:4D:31:ED:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kRdtFpxC8D2VKCu7ogTE5E0x7Qk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF5B9/5202D0280DF911F08E6E762AC4F9AE02/C511A0AC8B1211F1A6305EFC3311F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:05:f0:9c:c1:84:44:a1:84:8a:8d:55:1e:6d:07:a7:7f:d2:
         d0:3d:07:90:ec:a3:25:12:04:12:b1:bb:7a:0b:76:db:53:1c:
         61:4b:b6:3e:09:bc:57:03:01:e3:98:f6:81:59:87:86:25:69:
         d8:ad:00:f7:df:60:9e:51:e7:61:e4:cd:24:0d:bd:8c:b9:5d:
         70:d3:6f:9e:08:c5:f5:52:95:5c:56:b0:82:16:da:26:8e:64:
         61:75:2e:13:20:25:b6:03:e5:71:10:a2:42:dd:59:a3:ea:9b:
         1d:28:6b:ac:1e:7b:45:f1:49:49:0e:62:e6:47:6d:22:7f:0e:
         31:bd:f0:32:28:30:fb:eb:c8:b0:ab:30:1a:92:c9:86:0f:6f:
         66:62:27:d5:a0:1e:03:c0:d1:45:52:73:e9:28:7f:89:f2:b1:
         78:86:78:e2:3f:3a:5c:64:58:95:91:22:98:cc:18:e1:c8:93:
         6b:b8:81:13:61:5d:e3:7d:c7:53:0b:ca:0d:61:73:b9:57:e8:
         f6:09:9f:e5:49:83:3b:40:68:6f:42:42:f8:f7:c1:e9:84:48:
         fd:b9:da:75:ce:df:cc:de:34:d7:e9:23:3d:69:3e:a0:d9:5f:
         b7:a9:47:77:fc:5c:9e:9a:fd:08:ec:ae:c2:9a:31:c7:00:d2:
         8b:71:37:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 13:40:46 2026 by rpki-client