Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52E691CC8E2411F0BE5CC417C4F9AE02.roa
File:                     52E691CC8E2411F0BE5CC417C4F9AE02.roa (raw, json)
Hash identifier:          RZI9vYQqmnxk1WEYYtx7mvH8RwjRXAV6RnZ9kmwxtxw=
Subject key identifier:   82:49:8D:B8:81:C6:12:13:58:E3:11:7B:0F:DF:AC:30:BB:3D:93:43
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6AD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52E691CC8E2411F0BE5CC417C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:44:01 +0000
ROA not before:           Mon 06 Jul 2026 17:44:01 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153678
IP address blocks:        163.223.52.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63149 (0xf6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:44:01 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be961-e0f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:eb:63:51:c7:f1:c2:00:4a:b6:2b:23:09:
                    7d:db:e6:5d:47:40:ab:95:19:29:f4:ea:5b:7f:7e:
                    d5:b9:63:b9:0c:7d:18:f8:f4:2d:9a:95:9b:2a:0d:
                    b6:d7:b2:d2:d7:e6:43:69:2b:04:f9:68:d1:53:45:
                    ad:35:d3:04:87:b6:d9:cf:6b:f4:c5:d2:1f:36:0e:
                    bd:e6:b2:5f:ce:02:32:5d:b5:64:61:d1:e1:47:a5:
                    68:91:ed:8e:6b:f5:4c:a1:3b:d8:d1:9b:07:30:91:
                    1a:c9:37:4d:b6:53:1f:57:29:cd:df:07:bc:2b:17:
                    ef:56:15:4d:cd:ac:a3:38:9f:0b:a5:00:c1:8d:39:
                    bd:23:1c:26:f9:fd:3d:60:b5:4a:58:d9:08:a6:9c:
                    79:c0:f7:30:63:b7:7f:ad:7d:43:ec:6f:99:5e:40:
                    67:70:3e:c2:18:86:67:8b:c2:8e:ef:53:7f:36:e9:
                    b7:ba:c8:4b:5e:75:60:8c:51:a0:74:24:66:87:39:
                    71:2f:93:08:66:59:06:d6:08:31:7a:b1:2e:08:72:
                    bf:d4:6a:4d:32:20:90:ea:52:d4:76:da:76:f4:d0:
                    66:44:01:22:4c:d8:e1:6b:96:6d:90:6b:e8:bc:2f:
                    cc:a2:37:28:3d:b7:7b:f3:b9:df:71:a1:e6:8f:84:
                    ac:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:49:8D:B8:81:C6:12:13:58:E3:11:7B:0F:DF:AC:30:BB:3D:93:43
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/52E691CC8E2411F0BE5CC417C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:81:ba:c0:72:35:44:fd:85:ed:7b:b0:48:aa:20:b5:fe:
         0d:9d:bc:93:90:39:7a:2a:1d:fb:8e:cf:6c:85:58:00:15:2d:
         8d:5f:a2:08:51:0f:21:5b:eb:3d:ad:bd:96:b7:7d:1a:bc:e5:
         68:d0:10:f6:57:3e:4d:f0:20:5b:09:9f:0e:2b:11:06:6c:9c:
         c2:9b:54:04:75:d1:10:04:ae:a8:ef:59:f9:e3:c8:1e:e1:c0:
         ee:ba:79:9c:1d:1b:b4:44:d8:61:e2:ce:c0:c6:06:43:0b:77:
         88:df:64:eb:19:82:0f:93:d4:07:21:8a:65:09:14:9e:c6:ea:
         68:ed:cd:89:0f:29:a7:6a:c2:ab:42:65:f1:f8:a8:32:5d:bc:
         2c:93:56:48:92:4c:67:e4:a6:2a:96:e9:c0:bd:9d:cb:13:c8:
         95:d5:97:4f:a4:38:75:70:28:cd:f6:d5:ad:7f:07:72:1d:89:
         02:40:9d:c7:c6:8d:44:8b:4f:2a:11:48:31:e3:82:0b:3b:ac:
         6d:c4:4c:61:af:44:cf:89:d1:c1:f0:58:4d:af:3d:2e:3a:6c:
         6c:71:07:0a:a8:2d:c5:cc:27:1f:1d:04:33:d2:46:7d:16:f7:
         05:98:d5:a9:c8:54:f9:d1:4f:33:7b:45:d1:35:71:cf:ae:a9:
         c6:06:3d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:27 2026 by rpki-client