Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17D3629C438A11F194A2EA1CC7833773.roa
File:                     17D3629C438A11F194A2EA1CC7833773.roa (raw, json)
Hash identifier:          0I3Ems3WXPlp79swEWd/1QQ/mPXYTA3gMCYiqE5lMjM=
Subject key identifier:   55:E5:4C:57:DA:72:C0:4E:50:98:89:0D:7A:3C:64:0B:39:6E:70:5A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F716
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17D3629C438A11F194A2EA1CC7833773.roa
Signing time:             Mon 06 Jul 2026 17:47:42 +0000
ROA not before:           Mon 06 Jul 2026 17:47:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154581
IP address blocks:        163.128.142.0/23 maxlen: 24
                          2001:df6:de40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63254 (0xf716)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:47:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea3e-6aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c2:81:24:07:2f:b6:b7:8e:eb:45:2b:de:65:
                    92:78:f8:54:59:13:45:96:ec:86:81:8f:eb:cb:8b:
                    42:14:d1:97:0b:58:23:88:a4:35:4e:92:77:c9:56:
                    f6:ae:41:0a:bf:80:8d:1e:b2:84:a5:17:d2:7a:1b:
                    5a:b6:9b:42:6a:4a:62:46:ef:34:42:01:7c:69:49:
                    6e:7a:11:03:f3:d7:26:5b:5e:d9:c9:02:09:0f:52:
                    b6:f8:52:4d:26:46:9d:f5:d6:2c:d7:17:54:7e:ee:
                    99:c9:87:20:bf:c8:b2:35:a0:7c:38:9d:e5:25:4d:
                    a2:7c:f3:e9:4e:e1:e0:98:77:79:b7:d4:e7:28:fa:
                    1d:45:92:02:7d:a8:21:e2:ff:d0:cf:83:e8:d0:ca:
                    d4:dd:8f:38:8c:db:fb:df:eb:4e:35:c4:fc:90:3b:
                    31:49:17:c4:0c:28:e3:c2:f4:f0:79:4a:ba:5d:db:
                    68:ed:f7:8d:3c:89:87:70:a6:36:3f:9f:f3:7d:9a:
                    23:8c:5f:7d:b5:a1:c8:27:da:1c:d1:b2:de:3c:a1:
                    8a:43:10:b4:09:83:4c:bf:14:6d:0c:56:34:88:5c:
                    8c:46:39:e4:01:ba:c3:8e:b2:b9:41:1d:8d:4b:b9:
                    b5:6a:13:bf:49:f8:bb:6f:5a:1c:c1:80:6d:ac:2d:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E5:4C:57:DA:72:C0:4E:50:98:89:0D:7A:3C:64:0B:39:6E:70:5A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/17D3629C438A11F194A2EA1CC7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.142.0/23
                IPv6:
                  2001:df6:de40::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:d3:c2:ec:e6:f8:a9:98:8e:e2:2f:72:75:61:7c:e2:b9:52:
         af:f4:18:9a:4a:c9:2a:6c:f2:0d:5d:e4:d3:48:45:24:a9:0d:
         d2:c0:9f:5e:a3:b1:40:14:4e:53:1d:be:5f:83:77:b4:49:cb:
         c7:a7:39:24:54:83:4d:1f:21:e1:8e:79:d0:ab:db:62:be:87:
         df:40:34:21:21:97:2e:7b:77:fb:45:ac:56:62:9b:74:31:c2:
         1a:6f:8b:dc:97:5b:84:53:8b:ee:97:99:fa:8b:03:dd:56:4f:
         dc:88:03:1d:94:40:67:9b:7a:95:27:c9:4c:64:5c:8b:31:8e:
         24:3d:0d:ca:a7:99:6b:52:2a:c4:94:b6:07:be:b3:c8:6c:21:
         40:4a:65:29:9d:23:4d:b5:2c:a9:70:b3:76:3b:be:b1:8a:60:
         84:02:6f:45:a9:6f:1d:b1:1f:2c:f1:54:bc:64:bc:06:d3:91:
         3a:23:8e:0e:81:db:38:1c:4f:2a:1d:06:18:f7:cd:85:e1:88:
         72:de:e8:8f:21:51:cd:ff:32:af:30:02:51:7d:05:db:31:34:
         ec:6c:8c:8d:55:8a:3a:23:16:23:69:5d:c6:09:db:15:6f:93:
         43:5c:ff:aa:9a:9f:52:8e:90:b3:4e:9f:0a:2e:57:ab:81:5b:
         14:da:77:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:24 2026 by rpki-client