Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05B634D62B0811F0AE750421C4F9AE02.roa
File:                     05B634D62B0811F0AE750421C4F9AE02.roa (raw, json)
Hash identifier:          GA7omHZIoieUz2Ike1ZkqeWXcASb9/TrByHLDlZGV/k=
Subject key identifier:   FE:C3:77:9A:C3:EE:FD:28:60:A3:79:A3:8E:85:90:BB:B4:97:4B:30
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA9F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05B634D62B0811F0AE750421C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:45:37 +0000
ROA not before:           Sun 31 May 2026 17:45:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153761
IP address blocks:        163.223.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60063 (0xea9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:45:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c73c0-d8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:f5:d3:b7:56:c0:9e:db:2a:70:d1:f5:3b:
                    14:6b:73:05:67:dc:1b:61:cd:75:1f:6b:69:f2:87:
                    9c:b4:49:ca:05:ce:51:a7:42:57:83:fb:a6:be:7f:
                    01:c5:9f:54:22:a0:e7:82:65:eb:4a:cb:52:04:39:
                    8e:1f:35:10:57:4a:e7:59:ba:6a:36:12:e2:f7:cc:
                    3b:12:c8:e8:d6:9f:56:51:fe:e9:75:5f:a0:76:2e:
                    ce:e4:5d:59:79:4d:3c:00:aa:10:0b:34:f5:14:7a:
                    ab:49:ff:19:fe:1c:52:59:df:4c:d8:d3:47:d7:09:
                    d4:55:e3:35:5f:c4:80:ea:91:1a:fe:90:87:62:2f:
                    e7:1a:66:fb:a1:c4:97:98:cf:8d:d2:a9:b0:65:e1:
                    74:e0:ec:f6:f8:d1:1e:98:20:43:e0:6e:4c:d9:98:
                    5c:93:0f:e2:c9:b3:8a:53:00:e4:f9:b1:ea:bf:07:
                    26:27:a2:70:a4:00:3b:76:ec:13:b6:e1:28:47:0e:
                    a4:c5:e1:7e:10:b3:08:61:2c:92:21:1f:a4:16:2e:
                    c2:c2:b1:5c:51:0c:53:2c:59:58:b8:ec:95:02:bc:
                    1c:4e:6d:e4:98:a7:d3:02:bf:7a:55:11:c3:8f:8f:
                    d3:c4:8f:b1:06:9a:0f:61:dd:a7:6d:f9:6a:a0:72:
                    5c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C3:77:9A:C3:EE:FD:28:60:A3:79:A3:8E:85:90:BB:B4:97:4B:30
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/05B634D62B0811F0AE750421C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:4b:f8:71:21:99:b4:fc:c6:63:70:68:2e:9f:89:ca:49:6e:
         8f:1d:c5:5f:9d:86:a6:fa:8a:7d:4f:53:e7:5b:cd:78:b3:c4:
         96:96:8d:f2:17:7b:74:46:df:f8:5b:17:f1:0f:8c:ee:c0:cd:
         cd:15:2d:94:87:94:73:87:c2:9d:8e:48:b8:7e:aa:15:f8:2f:
         3d:0d:7c:55:08:f7:db:40:2b:ba:5a:0c:44:9c:7a:c3:69:d2:
         fa:27:72:29:7b:4a:8d:fa:3e:68:3c:c3:75:45:f9:cd:ff:22:
         52:bd:6d:7a:43:a6:20:51:f9:23:53:ac:06:15:dc:3b:22:07:
         d6:fe:07:46:b7:d7:8b:68:a3:68:aa:46:dc:1b:89:5c:a9:c9:
         3b:47:c7:8d:7b:57:80:5a:aa:68:fc:f9:30:ce:45:69:23:7a:
         8f:2b:ac:5d:2d:71:81:bd:2a:ae:f2:8e:8b:c0:3f:fc:1d:cd:
         03:87:0a:dc:9f:b7:35:12:78:2e:d1:7f:6a:97:3d:d8:f1:ca:
         e3:e4:a6:7d:5b:b6:60:ab:a7:ed:2d:7b:4d:53:76:66:24:d2:
         c6:fa:b1:49:36:e4:aa:b9:6a:a9:74:83:82:51:4d:92:e8:d6:
         de:fc:1f:10:01:9a:a4:f8:d0:9b:75:45:a9:df:e4:c3:58:0a:
         12:06:6c:40
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOqfMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDUzN1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzczYzAtZDhmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJxY9dO3VsCe2ypw0fU7FGtzBWfcG2HNdR9rafKHnLRJygXOUadCV4P7pr5/
AcWfVCKg54Jl60rLUgQ5jh81EFdK51m6ajYS4vfMOxLI6NafVlH+6XVfoHYuzuRd
WXlNPACqEAs09RR6q0n/Gf4cUlnfTNjTR9cJ1FXjNV/EgOqRGv6Qh2Iv5xpm+6HE
l5jPjdKpsGXhdODs9vjRHpggQ+BuTNmYXJMP4smzilMA5Pmx6r8HJieicKQAO3bs
E7bhKEcOpMXhfhCzCGEskiEfpBYuwsKxXFEMUyxZWLjslQK8HE5t5Jin0wK/elUR
w4+P08SPsQaaD2Hdp235aqByXMkCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBT+w3ea
w+79KGCjeaOOhZC7tJdLMDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzA1QjYzNEQ2
MkIwODExRjBBRTc1MDQyMUM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAaPf9DANBgkqhkiG9w0BAQsFAAOCAQEAOUv4cSGZtPzGY3BoLp+J
yklujx3FX52GpvqKfU9T51vNeLPElpaN8hd7dEbf+FsX8Q+M7sDNzRUtlIeUc4fC
nY5IuH6qFfgvPQ18VQj320AruloMRJx6w2nS+idyKXtKjfo+aDzDdUX5zf8iUr1t
ekOmIFH5I1OsBhXcOyIH1v4HRrfXi2ijaKpG3BuJXKnJO0fHjXtXgFqqaPz5MM5F
aSN6jyusXS1xgb0qrvKOi8A//B3NA4cK3J+3NRJ4LtF/apc92PHK4+SmfVu2YKun
7S17TVN2ZiTSxvqxSTbkqrlqqXSDglFNkujW3vwfEAGapPjQm3VFqd/kw1gKEgZs
QA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:38 2026 by rpki-client