Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
File:                     63F5D1BE104B11F0B006D834C4F9AE02.roa (raw, json)
Hash identifier:          4CQxBBILwwY7eNZ/SvlMHHrM0APVbGkNbjnwMBC9TvI=
Subject key identifier:   88:B5:93:5B:01:4D:91:76:4D:34:95:9B:C2:DB:FE:F3:84:35:9A:1C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EC17
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 05:37:22 +0000
ROA not before:           Thu 04 Jun 2026 05:37:22 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133976
IP address blocks:        163.223.102.0/23 maxlen: 24
                          2401:f5a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60439 (0xec17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  4 05:37:22 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a210f12-a130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:0d:4b:08:a9:b9:0b:04:3a:92:7d:19:33:
                    0f:d2:a8:e9:b9:cc:70:96:d3:72:40:2a:e9:7c:98:
                    9c:ab:64:3b:20:97:a9:47:c7:36:c7:5e:59:5c:49:
                    07:2f:4a:16:28:8d:a5:2f:b6:99:65:c1:34:99:2b:
                    62:a0:2e:c5:02:8f:34:93:42:3f:da:0a:b1:a9:80:
                    7e:a6:6f:69:2d:42:cb:6b:cc:4e:e4:7f:35:da:e4:
                    ea:6c:ba:84:b0:5c:79:cc:05:fd:55:f6:71:8f:d3:
                    c2:02:40:cb:7f:22:f2:93:1b:37:c9:08:78:b4:1e:
                    8b:9a:62:97:6f:b9:d2:53:3c:f4:b2:2c:ca:fe:dd:
                    ff:a0:f4:50:df:a1:20:9b:6c:ef:57:03:82:b2:43:
                    49:67:8f:d0:49:13:ef:0f:86:46:d6:c7:47:3c:ea:
                    d0:37:14:6c:5e:56:04:88:db:b2:cd:5f:5e:e7:56:
                    31:e2:b1:ca:7d:33:63:70:02:34:e8:09:0f:1a:60:
                    84:4d:9a:68:63:8e:d8:c9:ee:e2:c1:84:e8:15:31:
                    6c:15:ab:4e:ea:97:13:8c:39:d8:a8:2c:98:67:93:
                    99:b7:4c:a6:cc:c5:ba:87:d0:6d:58:80:33:5f:8e:
                    4f:cb:59:3b:9f:0b:5e:ce:4c:75:de:95:0e:65:46:
                    02:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B5:93:5B:01:4D:91:76:4D:34:95:9B:C2:DB:FE:F3:84:35:9A:1C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.102.0/23
                IPv6:
                  2401:f5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:73:a2:64:12:6a:c7:d0:1a:ea:78:0b:11:42:a1:72:0a:
         e5:a3:77:63:9a:2f:92:00:d1:1c:3f:11:11:a1:c7:90:0d:8d:
         b5:f9:2b:f3:83:67:28:98:17:71:0a:8a:ad:86:2f:37:e6:fa:
         20:f6:83:b7:dc:7c:b9:1e:7b:40:a4:28:43:48:be:57:17:5b:
         19:81:ea:f4:04:1a:62:f7:fa:b8:59:af:c4:72:2e:c6:cd:56:
         45:90:a4:e0:85:0b:fa:86:15:a5:33:f5:20:60:e9:9d:0c:14:
         1b:d0:6e:d6:fb:96:26:95:ea:22:6d:b7:8b:07:35:38:60:16:
         56:22:21:1c:01:5c:8b:c0:13:48:1b:c6:25:b8:e5:fe:e9:08:
         c7:be:46:ce:90:f6:8b:1a:9e:9c:20:3f:59:f8:27:e2:86:04:
         37:7a:0b:60:84:29:d9:65:e4:46:da:1b:82:ea:d2:ea:ee:95:
         ec:b4:36:b5:85:92:35:f5:3c:66:61:13:a5:58:f9:ad:dc:ca:
         de:c9:d8:1b:a5:f4:51:fc:07:02:3e:ea:6a:6d:a1:6a:f2:88:
         88:e2:e6:a8:ad:11:a2:8d:d5:35:74:6c:bc:c2:88:d4:e4:88:
         ac:4b:e3:8f:bb:89:2c:62:2a:99:e3:ab:f5:f5:ca:f7:1e:5b:
         80:64:bc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:50 2026 by rpki-client