Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544F250EF9F11F0B6BCB5FF676F56BC.roa
File:                     1544F250EF9F11F0B6BCB5FF676F56BC.roa (raw, json)
Hash identifier:          mFdW+uhjzv3T+xFaS11Kdwh6WyAybdmXXnPZbsPQiLw=
Subject key identifier:   1D:19:C7:FE:60:C5:A6:E4:92:D0:EC:D0:6D:8C:4B:90:EF:E2:57:B5
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E786
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544F250EF9F11F0B6BCB5FF676F56BC.roa
Signing time:             Sun 31 May 2026 17:19:35 +0000
ROA not before:           Sun 31 May 2026 17:19:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142154
IP address blocks:        163.223.254.0/24 maxlen: 24
                          163.223.255.0/24 maxlen: 24
                          2401:fb20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59270 (0xe786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:19:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6da7-5be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dd:61:6d:ab:56:40:ac:a7:0b:40:c0:9a:17:
                    00:05:49:cc:81:38:a0:51:02:c7:b3:1f:f4:6a:90:
                    dc:59:8e:9a:77:58:f1:1f:88:9e:95:a7:f2:49:75:
                    87:1f:ac:59:26:f0:68:35:d0:23:54:36:d1:cc:48:
                    e2:6d:a6:ab:ca:fe:b2:77:6f:6b:58:05:56:38:a7:
                    38:9c:aa:54:e0:36:d7:06:3f:ee:39:8c:20:38:3a:
                    05:e4:ec:21:0b:59:2e:bb:91:64:27:0a:14:9d:ff:
                    61:ad:7c:93:be:7d:b3:ad:14:8c:05:d1:eb:65:d7:
                    b4:bf:9c:b2:96:b3:d5:29:2d:7c:72:74:74:99:dc:
                    46:eb:2e:f7:cc:d8:df:2f:02:03:1e:57:a8:4c:a5:
                    be:1b:d3:57:8a:7a:fc:db:34:3c:98:97:7b:6c:92:
                    e4:56:10:b9:53:d2:33:f8:91:97:29:e6:4a:d0:f4:
                    37:13:3c:2a:d1:9d:04:3f:c0:ca:56:b0:d8:32:ad:
                    68:1a:d7:cc:a6:b9:5f:84:84:be:6e:33:db:59:ad:
                    40:5d:08:9e:8f:4c:79:54:2a:0f:7a:91:4c:a9:b9:
                    5d:be:f0:f7:c8:6c:50:de:a5:d8:57:2e:b3:f0:9b:
                    f3:66:cb:ef:89:0e:5b:68:3a:60:c7:00:76:24:d7:
                    10:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:19:C7:FE:60:C5:A6:E4:92:D0:EC:D0:6D:8C:4B:90:EF:E2:57:B5
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1544F250EF9F11F0B6BCB5FF676F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.254.0/23
                IPv6:
                  2401:fb20::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:1e:27:54:01:6b:81:5a:39:ed:92:59:5b:3a:75:04:2a:f6:
         6a:02:b6:19:6e:d2:f1:a1:94:e7:49:8b:03:84:87:e4:ce:02:
         af:99:35:2d:af:13:5b:46:45:61:7b:a3:45:e8:eb:8b:29:70:
         7f:29:e0:92:e5:24:b5:0b:c3:73:11:45:2b:f3:4d:48:12:28:
         42:95:fb:fb:db:bc:be:a1:8b:89:33:2e:94:7e:ce:e0:0b:ff:
         98:86:08:73:9f:95:3f:22:d5:7b:5b:7f:9f:c6:12:a6:80:20:
         d0:83:c2:49:d1:06:12:8c:61:86:51:08:b0:a3:9f:8e:36:35:
         0a:af:52:65:4f:10:62:39:aa:5c:95:ce:c9:6e:84:c7:60:88:
         e0:ad:5a:b3:cb:b7:e4:79:73:2e:e1:fd:7d:69:0f:2c:ff:26:
         bd:39:de:a6:64:bd:00:f9:f5:1c:94:6c:cc:78:f9:ff:3e:d6:
         1e:13:00:bf:78:92:1b:ac:69:45:3a:c1:c8:1d:8e:db:15:ce:
         25:f0:97:fe:b6:49:de:6e:d5:c8:16:8e:4f:46:4e:29:e0:61:
         d5:21:d3:31:33:e5:58:26:cf:d9:02:4b:79:b4:4b:93:33:58:
         71:7e:e2:6c:1e:7f:64:d5:77:e1:ed:2c:f6:81:cd:2a:4d:b4:
         84:22:2a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:56 2026 by rpki-client