Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/FFAB3BEA093D11F09D0BF611C4F9AE02.roa
File:                     FFAB3BEA093D11F09D0BF611C4F9AE02.roa (raw, json)
Hash identifier:          vSPdGaPST6xml6nRxv2RNyGwqN0weyrJWxHHtfNZsKU=
Subject key identifier:   22:80:AB:C4:FC:49:D4:95:00:6C:4A:82:1E:0E:B9:48:0F:D3:4F:FF
Certificate issuer:       /CN=A918BAEC/serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
Certificate serial:       E6
Authority key identifier: 7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/FFAB3BEA093D11F09D0BF611C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:38:09 +0000
ROA not before:           Fri 05 Jun 2026 07:38:09 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     149024
IP address blocks:        163.223.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl
                          rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 06:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BAEC, serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
        Validity
            Not Before: Jun  5 07:38:09 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a227ce0-1ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:2c:be:36:60:91:a4:ae:8c:98:3d:14:f5:
                    a6:18:47:4f:1f:00:9c:a4:21:19:82:9c:10:48:c8:
                    63:eb:d9:3f:ec:96:63:b2:bc:d8:4a:89:c2:25:f7:
                    f3:d3:0e:ab:87:d7:c6:fc:2e:6e:68:f6:1e:8b:fe:
                    73:22:7c:07:30:42:61:84:56:5d:d1:22:07:72:f4:
                    0f:4d:e1:a0:85:21:ae:8e:16:12:bc:a4:92:d1:ab:
                    d5:6d:57:24:79:5a:1e:69:f7:2d:ed:ac:02:03:17:
                    71:0e:bb:31:07:86:d8:41:12:15:a7:77:cb:bb:b2:
                    23:0d:51:e8:c4:6a:c4:75:39:fb:b3:c9:ed:a7:1f:
                    3d:ef:49:21:ac:c0:22:9b:03:39:b3:74:f6:15:27:
                    b8:84:09:b3:08:0b:2d:9d:6f:4f:1e:dc:cf:1e:53:
                    ba:ef:95:3c:a1:d1:8a:b7:ae:6e:81:2e:ca:cf:66:
                    78:da:4b:1f:73:23:d0:61:15:9f:03:7a:88:84:45:
                    38:2c:44:36:b9:64:34:5a:58:05:22:3c:4a:0f:bd:
                    f6:c3:31:a5:24:49:fc:59:e6:1c:9e:31:e4:ec:d0:
                    f9:a9:ee:ea:19:2d:72:06:7f:c2:13:da:a7:ee:87:
                    43:ba:a2:5f:ea:d4:d0:70:35:b0:5f:e2:9b:7b:44:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:80:AB:C4:FC:49:D4:95:00:6C:4A:82:1E:0E:B9:48:0F:D3:4F:FF
            X509v3 Authority Key Identifier:
                keyid:7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/FFAB3BEA093D11F09D0BF611C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:99:7f:e0:eb:01:dc:38:9c:c2:32:49:d3:d7:06:25:e9:ec:
         ce:7d:b2:5d:fe:8a:99:7a:6c:7a:78:08:b3:15:93:d2:a9:3c:
         77:73:c6:21:dd:19:d6:59:88:61:2a:3a:e0:64:16:8b:60:3e:
         e0:99:b7:8f:67:a9:05:48:89:8d:77:fd:7b:bc:09:38:86:93:
         e2:6c:48:59:47:84:90:50:bc:76:12:b6:7c:1c:e0:e5:a8:a2:
         68:a9:33:50:19:e0:15:0a:59:be:78:23:17:bf:87:41:b1:f4:
         e5:5d:61:43:41:06:4c:2c:48:0b:c8:07:94:83:e6:48:a8:60:
         94:47:af:ad:0f:bc:4c:8e:52:6f:f9:be:17:91:63:db:7f:36:
         2b:56:6e:5e:0e:31:97:55:9e:df:68:c2:d0:47:ae:21:df:49:
         07:ba:5b:02:c8:76:85:3a:c4:22:a6:9c:50:31:4a:04:65:cf:
         82:8e:bc:a3:ab:78:d9:d3:96:4f:e5:a1:ef:d3:a1:fc:6d:c0:
         0c:94:43:6f:01:0b:70:a6:91:a0:a3:2a:04:c4:6c:f8:00:dc:
         75:82:6a:0e:d5:d7:99:a4:31:f8:b0:b4:1a:f1:01:22:8c:95:
         07:0f:16:70:48:7d:a2:93:09:7d:6f:12:77:ac:ac:45:22:7f:
         4a:78:29:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 12:33:40 2026 by rpki-client