Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BD213423CB011F1A12B5F9AAE833773.roa
File:                     1BD213423CB011F1A12B5F9AAE833773.roa (raw, json)
Hash identifier:          rmBun1OEcsJudosjy67GPjwKGyEpWgJP3goBSNUS/Xo=
Subject key identifier:   2F:8A:00:80:CC:E5:46:8D:8E:0B:37:0C:BA:BE:5C:33:F1:F0:3B:EE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F720
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BD213423CB011F1A12B5F9AAE833773.roa
Signing time:             Mon 06 Jul 2026 17:48:01 +0000
ROA not before:           Mon 06 Jul 2026 17:48:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154623
IP address blocks:        163.128.232.0/23 maxlen: 24
                          2402:57e0::/32 maxlen: 32
                          2402:57e0::/48 maxlen: 48
                          2402:57e0:1::/48 maxlen: 48
                          2402:57e0:2::/48 maxlen: 48
                          2402:57e0:3::/48 maxlen: 48
                          2402:57e0:4::/48 maxlen: 48
                          2402:57e0:5::/48 maxlen: 48
                          2402:57e0:6::/48 maxlen: 48
                          2402:57e0:7::/48 maxlen: 48
                          2402:57e0:8::/48 maxlen: 48
                          2402:57e0:9::/48 maxlen: 48
                          2402:57e0:a::/48 maxlen: 48
                          2402:57e0:b::/48 maxlen: 48
                          2402:57e0:c::/48 maxlen: 48
                          2402:57e0:d::/48 maxlen: 48
                          2402:57e0:e::/48 maxlen: 48
                          2402:57e0:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63264 (0xf720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:48:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea51-2dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:96:57:68:8b:d9:1c:e7:f2:e7:fc:ae:4a:01:
                    25:6b:35:c7:96:e7:7b:19:b7:e7:13:88:86:b3:9a:
                    6a:24:49:6d:01:0e:7c:f3:7d:24:32:4f:25:31:b5:
                    d8:49:ba:7c:e4:7d:a1:84:ce:b3:19:dd:e2:1f:3a:
                    c0:39:25:14:bf:a2:9e:00:c3:51:b9:8e:f1:97:d5:
                    a4:9a:72:06:5c:76:1f:f3:b1:68:7e:5a:6b:d0:8f:
                    19:9f:e3:a6:85:6c:4a:ad:b6:ff:32:47:a9:da:fe:
                    33:e7:35:24:42:70:c9:32:45:b8:ba:54:9d:0f:66:
                    66:ec:ea:d8:c4:3c:72:87:38:c2:5b:8d:a8:e7:33:
                    e7:04:f9:9f:99:c4:31:f3:12:43:a4:ae:2b:48:e8:
                    e8:aa:75:3f:a1:5e:43:2f:f5:b0:e6:7c:68:c2:52:
                    e8:39:7d:bd:62:be:7a:cd:3c:cf:47:66:cd:cf:74:
                    c7:b6:60:9c:bb:86:16:3c:34:43:9b:30:53:ea:25:
                    60:a3:d4:84:1d:05:9c:3b:39:e5:83:39:4c:c4:c9:
                    6b:4a:b8:cb:88:90:bb:b0:c3:f1:4e:3a:af:bd:61:
                    9b:da:b8:ad:da:14:83:0a:62:66:30:51:48:ea:c8:
                    c7:b5:ad:86:8b:b2:28:c8:f7:7b:c6:c1:a6:15:d3:
                    fa:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8A:00:80:CC:E5:46:8D:8E:0B:37:0C:BA:BE:5C:33:F1:F0:3B:EE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1BD213423CB011F1A12B5F9AAE833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.232.0/23
                IPv6:
                  2402:57e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:49:bf:10:3a:02:e7:10:3f:45:bc:4f:de:d4:89:c7:69:
         f9:06:8b:84:95:2a:a9:c1:e9:67:66:36:93:16:05:08:4f:2a:
         23:3e:a6:e2:92:28:fc:1c:97:a9:83:12:08:a3:ff:3c:ea:16:
         67:0f:1f:d5:9f:96:e7:f2:46:53:2d:32:b1:1b:d1:61:3d:ed:
         64:03:1c:7c:b6:0d:f5:40:a7:ff:33:da:47:55:cf:c2:0e:ff:
         89:fd:49:01:fb:c0:5b:28:1f:0e:d2:25:b4:ea:2b:85:8d:67:
         6d:2a:63:16:66:af:e1:86:14:e8:7b:75:cf:35:fc:49:b7:a3:
         57:03:10:75:a0:0b:b5:2f:5a:8d:de:c5:e7:fd:3e:21:08:2d:
         b7:84:b3:ea:60:bd:c8:9e:74:60:8e:92:ce:b5:81:50:68:35:
         d6:b8:1d:be:88:b0:c9:c2:35:e3:1a:2e:5f:50:df:a9:3d:a7:
         fe:06:93:b7:3c:c8:e0:c7:92:0e:63:fa:9f:fc:dc:09:2a:0d:
         ee:4f:de:2a:00:7d:ea:50:44:70:1f:93:17:a8:b5:c6:67:0e:
         ab:8e:e0:81:b0:bc:69:a0:d3:22:14:a2:d2:d7:61:af:2d:02:
         c4:ce:ca:fe:ae:7c:80:f7:b3:2f:ef:b6:05:7c:8d:0f:87:50:
         9b:09:ff:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:39 2026 by rpki-client