Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1462A1F2267D11F09FA53C27C4F9AE02.roa
File:                     1462A1F2267D11F09FA53C27C4F9AE02.roa (raw, json)
Hash identifier:          K4Jx2KqUuDVkF/zLYch2v6yAQnbjnq/ZvjlIu6lWjso=
Subject key identifier:   07:21:91:EA:98:65:1A:DA:1B:96:40:BF:ED:56:11:50:55:3E:E3:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFA8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1462A1F2267D11F09FA53C27C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:44:39 +0000
ROA not before:           Mon 06 Jul 2026 16:44:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135029
IP address blocks:        163.227.190.0/23 maxlen: 24
                          2001:df5:7940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61352 (0xefa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:44:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb76-ab18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f6:d6:47:61:b0:07:8d:34:59:18:4e:3e:9f:
                    6b:c2:d2:ae:5e:83:74:04:c2:5a:a1:37:88:48:13:
                    ca:bb:5b:f6:db:7a:f2:6e:8c:6e:e1:b7:82:f0:c3:
                    7a:96:6e:86:78:a8:13:d8:59:55:7e:43:61:08:c4:
                    a0:4d:2c:9b:93:9c:d8:e7:d2:1d:81:82:00:f6:d6:
                    44:1d:aa:16:32:a9:e8:32:bd:58:03:01:f3:ef:ea:
                    49:57:3f:ec:fa:57:90:69:cc:c6:46:3d:be:02:4a:
                    60:79:1f:07:22:14:e3:fb:07:dc:7f:3d:16:7c:b0:
                    07:01:32:4a:4a:aa:0f:3a:bd:d8:08:6c:9f:d7:ed:
                    b5:87:6b:5e:e2:10:d3:ce:5a:4e:0a:bb:a8:64:bc:
                    cf:b6:b6:bf:8e:22:4e:2d:59:70:5b:91:af:4c:bc:
                    f7:c3:5b:0f:2e:5a:54:f0:fe:c9:93:e2:e9:0c:60:
                    74:78:af:03:a2:b7:82:a2:fa:7c:2f:00:f2:d8:98:
                    8c:a5:5e:0d:65:e5:87:63:75:ce:d7:c5:4b:9d:ae:
                    59:6c:ff:5a:10:2b:82:d6:c6:26:d7:7d:8a:f2:45:
                    32:43:1a:e3:ac:9d:e5:45:92:74:b0:fb:1b:49:2f:
                    6d:3c:ab:12:6d:53:0c:96:53:a9:43:de:8e:e5:d6:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:91:EA:98:65:1A:DA:1B:96:40:BF:ED:56:11:50:55:3E:E3:AB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1462A1F2267D11F09FA53C27C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.190.0/23
                IPv6:
                  2001:df5:7940::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:71:f9:cb:1b:cf:f7:81:ec:67:ad:2c:5c:ae:97:19:1e:
         cc:f1:91:8e:01:7d:87:94:0f:ee:46:d4:08:cb:da:4e:28:64:
         c8:56:89:02:bc:24:bc:44:c6:f9:fc:f4:3b:00:ec:ab:ca:e5:
         a7:39:44:5e:50:35:93:c0:43:3f:d5:39:9b:7d:46:1b:51:08:
         19:3f:a8:44:37:ed:5b:06:d2:d4:c1:fa:14:3e:c5:31:6e:9a:
         d0:9a:a2:1c:35:8d:51:43:bd:b3:80:c1:1b:ab:1c:a9:2d:a8:
         9c:4c:47:0a:55:91:19:ff:6e:ad:2e:af:1a:db:68:c8:8b:31:
         3f:c4:92:81:0f:48:5c:57:d2:2d:fc:5b:4e:eb:fa:22:2c:3e:
         ca:06:96:21:ea:3e:fe:79:fc:d9:d7:15:b4:f6:0a:ea:68:e5:
         7a:07:87:64:81:29:00:40:dc:a9:d1:96:16:b8:22:f1:2b:b6:
         20:99:02:1d:89:85:1d:a4:ed:04:99:57:26:3e:cd:ba:4b:be:
         71:a2:53:f6:75:01:f0:43:0c:6d:a0:9a:2b:9b:95:74:d7:0e:
         f6:51:de:2a:68:be:48:5b:99:de:c6:46:0b:41:99:6d:2c:68:
         c0:76:bb:6b:36:2e:8c:d6:04:43:60:dd:fe:b3:fa:8b:11:d7:
         d7:97:b7:c9
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAO+oMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDQzOVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRiNzYtYWIxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJv21kdhsAeNNFkYTj6fa8LSrl6DdATCWqE3iEgTyrtb9tt68m6MbuG3gvDD
epZuhnioE9hZVX5DYQjEoE0sm5Oc2OfSHYGCAPbWRB2qFjKp6DK9WAMB8+/qSVc/
7PpXkGnMxkY9vgJKYHkfByIU4/sH3H89FnywBwEySkqqDzq92Ahsn9fttYdrXuIQ
085aTgq7qGS8z7a2v44iTi1ZcFuRr0y898NbDy5aVPD+yZPi6QxgdHivA6K3gqL6
fC8A8tiYjKVeDWXlh2N1ztfFS52uWWz/WhArgtbGJtd9ivJFMkMa46yd5UWSdLD7
G0kvbTyrEm1TDJZTqUPejuXWGAsCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQHIZHq
mGUa2huWQL/tVhFQVT7jqzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzE0NjJBMUYy
MjY3RDExRjA5RkE1M0MyN0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAaPjvjAPBAIAAjAJAwcAIAEN9XlAMA0GCSqGSIb3DQEBCwUAA4IB
AQBMbHH5yxvP94HsZ60sXK6XGR7M8ZGOAX2HlA/uRtQIy9pOKGTIVokCvCS8RMb5
/PQ7AOyryuWnOUReUDWTwEM/1TmbfUYbUQgZP6hEN+1bBtLUwfoUPsUxbprQmqIc
NY1RQ72zgMEbqxypLaicTEcKVZEZ/26tLq8a22jIizE/xJKBD0hcV9It/FtO6/oi
LD7KBpYh6j7+efzZ1xW09grqaOV6B4dkgSkAQNyp0ZYWuCLxK7YgmQIdiYUdpO0E
mVcmPs26S75xolP2dQHwQwxtoJorm5V01w72Ud4qaL5IW5nexkYLQZltLGjAdrtr
Ni6M1gRDYN3+s/qLEdfXl7fJ
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:56 2026 by rpki-client