Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A2BB866CEC211F18ABC42160C66CEF9.roa
File:                     9A2BB866CEC211F18ABC42160C66CEF9.roa (raw, json)
Hash identifier:          F7TQT6bUcPmB5uRxlsU+rcK48ihVEPr5jyv7gwNpgyI=
Subject key identifier:   0C:CF:DB:1F:CD:B3:A0:F2:AE:01:7C:50:AF:59:E6:64:A1:24:03:7E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FEB3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A2BB866CEC211F18ABC42160C66CEF9.roa
Signing time:             Fri 23 Oct 2026 09:17:43 +0000
ROA not before:           Fri 23 Oct 2026 09:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154944
IP address blocks:        163.52.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65203 (0xfeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 23 09:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6adb2637-c6c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:85:97:66:5f:7d:47:9f:d8:7b:68:51:55:c8:
                    cd:d6:2b:c8:c2:43:7d:ca:a5:c7:b9:d6:c0:a1:60:
                    1a:1b:06:85:7e:bb:b4:2f:3a:ad:1d:f0:37:7a:92:
                    74:24:83:57:a7:fe:96:81:98:29:9e:54:c2:8d:31:
                    cc:64:4d:64:34:9b:35:8c:53:d7:e2:b6:a8:62:35:
                    ac:f4:7b:9f:86:e3:16:2a:b7:fd:1b:c9:38:79:35:
                    b4:17:be:da:91:24:5d:9f:bf:60:59:61:93:68:6c:
                    02:9a:d3:83:de:58:9a:64:ab:25:4d:6e:84:9c:82:
                    78:10:31:ad:31:27:6b:11:15:dd:1a:d7:dd:77:6a:
                    bc:9d:ba:c3:15:a5:e6:df:5e:b2:41:7a:46:ef:9d:
                    75:b0:f5:8f:06:d9:b6:c2:90:1c:41:88:8e:00:c4:
                    85:52:59:19:d1:09:97:9d:f9:6b:33:dc:81:71:04:
                    76:ce:fe:88:bf:7e:93:88:29:67:35:2b:d0:d4:5f:
                    59:0a:e7:75:50:82:83:e7:27:50:c7:43:8c:d8:72:
                    e6:f1:28:1a:27:75:09:03:a6:b9:9b:6f:34:02:b5:
                    50:1f:e8:b0:76:8e:70:29:d0:45:65:9f:fe:70:90:
                    fb:a6:53:74:81:1e:e6:c0:b3:3e:89:ad:b6:21:09:
                    01:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CF:DB:1F:CD:B3:A0:F2:AE:01:7C:50:AF:59:E6:64:A1:24:03:7E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A2BB866CEC211F18ABC42160C66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:8e:b4:56:ef:be:74:12:03:76:cc:1c:46:a0:90:06:c1:6e:
         66:d8:ec:0e:96:4c:86:c4:ce:8f:a3:75:ef:b4:50:ed:3c:66:
         0f:b4:18:3a:b1:af:b4:1f:3a:ac:63:0c:e6:61:80:3b:28:c5:
         63:9c:75:e0:28:f3:43:f7:18:8a:ac:4b:dc:30:8f:46:bc:e9:
         95:f9:a9:c9:c2:07:ef:a5:7f:29:6c:73:a6:34:a8:ee:77:ef:
         50:40:a0:a5:20:9e:3b:d1:73:95:b6:28:f2:4a:da:aa:08:1d:
         cd:26:3c:7c:22:56:de:79:48:dd:b5:9e:d7:90:eb:e8:6d:8a:
         2d:d0:08:c4:72:c7:75:dd:39:16:ff:b9:83:cd:10:5d:6b:fa:
         89:bd:6c:a4:0a:ea:5c:ab:c2:6e:f8:69:87:bc:52:9f:15:98:
         50:c0:67:b9:20:69:c6:90:be:3a:90:cb:99:5d:d0:b2:9d:c4:
         a5:05:3d:65:24:84:12:07:a3:4c:8c:3a:7a:8b:20:f4:68:f6:
         3a:ac:40:98:0c:c5:a4:43:cd:fc:b2:43:51:12:fc:1d:3f:40:
         2c:3b:9e:47:0c:85:7b:80:96:61:25:b6:c0:ab:dd:a3:36:86:
         b8:50:29:b8:e4:90:96:f1:be:07:7c:c1:56:da:6f:ab:26:9f:
         88:3a:01:4c
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAP6zMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MTAyMzA5MTc0M1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFkYjI2MzctYzZjMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ2Fl2ZffUef2HtoUVXIzdYryMJDfcqlx7nWwKFgGhsGhX67tC86rR3wN3qS
dCSDV6f+loGYKZ5Uwo0xzGRNZDSbNYxT1+K2qGI1rPR7n4bjFiq3/RvJOHk1tBe+
2pEkXZ+/YFlhk2hsAprTg95YmmSrJU1uhJyCeBAxrTEnaxEV3RrX3XdqvJ26wxWl
5t9eskF6Ru+ddbD1jwbZtsKQHEGIjgDEhVJZGdEJl535azPcgXEEds7+iL9+k4gp
ZzUr0NRfWQrndVCCg+cnUMdDjNhy5vEoGid1CQOmuZtvNAK1UB/osHaOcCnQRWWf
/nCQ+6ZTdIEe5sCzPomttiEJAXcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBQMz9sf
zbOg8q4BfFCvWeZkoSQDfjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzlBMkJCODY2
Q0VDMjExRjE4QUJDNDIxNjBDNjZDRUY5LnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKM0uDANBgkqhkiG9w0BAQsFAAOCAQEAOI60Vu++dBIDdswcRqCQ
BsFuZtjsDpZMhsTOj6N177RQ7TxmD7QYOrGvtB86rGMM5mGAOyjFY5x14CjzQ/cY
iqxL3DCPRrzplfmpycIH76V/KWxzpjSo7nfvUECgpSCeO9FzlbYo8kraqggdzSY8
fCJW3nlI3bWe15Dr6G2KLdAIxHLHdd05Fv+5g80QXWv6ib1spArqXKvCbvhph7xS
nxWYUMBnuSBpxpC+OpDLmV3Qsp3EpQU9ZSSEEgejTIw6eosg9Gj2OqxAmAzFpEPN
/LJDURL8HT9ALDueRwyFe4CWYSW2wKvdozaGuFApuOSQlvG+B3zBVtpvqyafiDoB
TA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:19 2026 by rpki-client