Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/263A708C36E311F0B095B458C4F9AE02.roa
File:                     263A708C36E311F0B095B458C4F9AE02.roa (raw, json)
Hash identifier:          4QEGdoG9WARGFW22+Ttcq7fJwcThh3qOg3oJkcnsclM=
Subject key identifier:   C9:10:9F:D0:B4:20:08:BF:92:42:AE:5C:84:B4:5A:49:24:0B:84:47
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAA9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/263A708C36E311F0B095B458C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:45:54 +0000
ROA not before:           Sun 31 May 2026 17:45:53 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153845
IP address blocks:        43.227.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60073 (0xeaa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:45:53 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c73d1-7b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:d6:68:1b:85:aa:a1:d1:dd:ea:97:cf:b6:
                    1b:93:4a:18:a6:81:bb:33:23:5f:1c:96:da:d3:f9:
                    08:21:8c:48:bd:51:9c:48:0a:6c:b0:ca:54:b8:da:
                    bc:f6:16:8d:73:54:9e:3f:ed:c4:37:4e:c8:f5:24:
                    2f:af:74:de:f0:3f:11:fe:50:f4:8d:38:c8:08:60:
                    39:7a:07:f9:fb:bb:96:ae:39:25:20:57:a5:ae:e6:
                    af:fb:fd:7d:cb:f6:a4:51:87:d3:c1:7c:38:b0:79:
                    e9:85:ab:aa:e9:05:7d:b2:ca:f0:a1:5c:6f:c5:90:
                    e3:d5:0f:9f:92:ef:9e:7c:cd:9c:7d:d2:b8:53:b2:
                    c8:ae:a5:da:ee:b9:95:d9:3b:67:4e:7e:4c:6f:ad:
                    5c:52:01:19:ad:d4:97:b5:d9:c0:4d:d5:4f:40:30:
                    74:0e:07:35:c9:cc:73:2d:2f:36:f8:9f:2e:38:b6:
                    a3:57:54:49:6e:a7:95:82:60:f6:f6:cf:65:ea:9e:
                    1a:94:68:2d:3a:c3:14:fe:1f:ab:d8:54:48:06:d2:
                    48:72:f3:e6:a8:20:8f:2a:67:7d:e2:4a:b1:de:f4:
                    34:91:20:49:a6:17:02:63:46:11:6e:1d:03:a9:12:
                    d6:54:4b:86:00:9e:67:56:42:10:aa:ab:18:a0:f5:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:10:9F:D0:B4:20:08:BF:92:42:AE:5C:84:B4:5A:49:24:0B:84:47
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/263A708C36E311F0B095B458C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:72:9b:ad:ca:d1:71:00:6f:86:3b:7e:83:e9:c2:bc:e0:
         1f:fa:fc:0a:2f:3a:82:07:c8:0b:d1:bf:94:96:58:72:c4:6e:
         63:c3:58:5c:26:74:d4:92:ce:88:2a:74:6d:34:94:51:cb:e7:
         66:06:43:70:9f:76:da:cf:b6:b1:d0:64:42:93:d8:9f:da:c4:
         c6:68:98:48:71:c5:7d:17:11:20:2f:63:0f:b7:2a:c0:88:73:
         92:56:c6:93:9d:c4:0e:48:a9:27:b0:2a:fb:b8:9f:66:19:04:
         00:71:4a:ff:54:6d:80:f5:23:03:c8:b9:75:a0:42:18:43:6d:
         a8:e6:32:8a:93:32:cf:d4:a9:3c:fd:1b:27:e6:2e:e0:de:6d:
         bf:ff:68:fb:f0:0a:0f:c3:46:ab:08:2e:f0:5e:ab:b3:d2:da:
         60:3f:15:d5:e6:f0:7b:0b:32:69:44:af:33:26:30:ce:89:6a:
         f3:ab:2b:2d:5a:f5:fb:1f:d6:7b:91:40:37:f8:ef:9c:76:fe:
         7b:4d:70:39:09:a6:1b:55:02:11:44:a8:85:11:fb:fe:f1:80:
         3a:65:6e:0a:e0:6f:a6:92:78:53:f1:dd:95:2d:df:d4:d1:d3:
         ba:39:79:d1:4d:d6:58:c4:61:b2:50:8e:82:85:87:b7:43:b4:
         8e:a5:39:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:44 2026 by rpki-client