Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56DD161E0F9611F083EA4F0DC4F9AE02.roa
File:                     56DD161E0F9611F083EA4F0DC4F9AE02.roa (raw, json)
Hash identifier:          KfvyfGkUZ8fw2PepxEcJ3kZhm+4Fu2ep7FYLMTGH/Po=
Subject key identifier:   92:B5:AB:17:F9:87:A6:0D:A2:57:80:52:E9:03:D0:24:98:60:20:28
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA8F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56DD161E0F9611F083EA4F0DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:45:08 +0000
ROA not before:           Sun 31 May 2026 17:45:08 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153700
IP address blocks:        163.223.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60047 (0xea8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:45:08 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c73a4-bd5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b9:dc:a1:20:df:e6:2e:42:78:13:9a:48:40:
                    dc:33:c0:4f:a2:8b:3d:72:c4:74:03:60:74:41:ea:
                    25:0f:a4:59:cd:54:e3:e0:eb:45:4d:f1:1c:5b:5a:
                    71:e4:eb:5f:2b:46:42:3f:a0:26:74:88:d5:b2:67:
                    78:29:13:3f:5d:63:1e:74:5f:b4:8b:95:09:76:88:
                    26:f2:06:c7:69:d8:ce:bc:b9:80:5a:e0:14:f9:cc:
                    c0:f2:18:21:09:f2:cd:9d:26:af:bf:bd:18:b2:b3:
                    c5:da:5c:ca:56:ba:73:81:c1:d1:4b:be:50:d1:ba:
                    24:1b:19:cd:e0:e1:ae:be:fc:16:0f:6d:81:32:90:
                    d0:20:43:22:e5:99:04:3b:2e:d5:89:36:90:f7:e7:
                    23:d6:ce:d1:57:8f:0b:85:00:40:f1:bd:21:1c:11:
                    74:2b:c6:0b:5e:c9:70:ec:2a:97:2f:e5:bc:11:c7:
                    9a:47:92:f9:07:95:5d:83:4e:36:64:b5:b5:4f:f4:
                    58:91:22:ca:d2:67:1e:f8:93:3d:60:77:91:cc:3e:
                    6c:6a:41:cb:1e:d1:56:9d:80:ac:25:15:da:ec:28:
                    51:53:1d:57:73:82:80:de:46:21:3a:dd:f8:fc:b7:
                    2d:88:86:0f:5f:d5:69:f7:07:f9:07:35:fe:70:64:
                    20:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:AB:17:F9:87:A6:0D:A2:57:80:52:E9:03:D0:24:98:60:20:28
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/56DD161E0F9611F083EA4F0DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:9b:50:0f:cf:fb:e3:f7:a5:21:29:bd:21:20:d7:4a:88:64:
         01:2c:2c:bf:b6:bc:4e:8b:c4:11:fd:77:3b:f1:33:b0:c3:85:
         ff:98:e8:06:a1:b7:be:00:88:21:d9:9e:e5:bc:4f:c8:d1:7a:
         79:a9:ad:db:3c:2b:45:3c:07:0c:ca:84:0d:39:72:bd:7b:43:
         bf:54:2e:b2:ab:88:9e:5c:11:f7:97:4d:f5:47:cf:53:0d:af:
         68:f0:22:8a:8b:bf:5c:24:1e:d4:9a:d9:d1:c5:03:38:d3:24:
         80:c6:51:56:08:1d:d5:78:be:0d:7f:ea:1e:68:c5:75:bd:e4:
         e0:85:e8:9b:36:b3:63:c0:fa:da:59:59:24:e7:50:7f:74:f4:
         9a:a4:c8:ca:a9:45:59:40:ed:62:ff:a9:1e:9c:d8:9e:ce:0d:
         fc:c1:d8:94:33:cf:b4:28:78:1d:8f:5b:79:69:ca:3f:a6:75:
         94:27:6a:65:7d:67:41:04:f2:86:64:5b:84:59:5a:19:4e:8c:
         8c:bf:6d:9f:71:27:96:d4:f7:46:76:7d:01:d9:01:a6:6f:83:
         bd:10:b0:28:36:7c:53:d7:9f:7e:68:36:02:72:36:a0:c2:bd:
         51:55:25:54:f1:c8:7c:42:02:0d:20:3d:af:60:79:94:69:7f:
         76:74:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:15 2026 by rpki-client