Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
File:                     63F5D1BE104B11F0B006D834C4F9AE02.roa (raw, json)
Hash identifier:          ucDjKdlEoKBqhQh87Rg8Fkoo/k7BTVx43hcEmBbKJqQ=
Subject key identifier:   C6:1B:56:1A:F1:81:D3:C6:9D:C9:CC:E6:C2:C6:EB:BE:DD:E0:77:7B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EEDE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:38:05 +0000
ROA not before:           Mon 06 Jul 2026 16:38:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133976
IP address blocks:        163.223.102.0/23 maxlen: 24
                          2401:f5a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61150 (0xeede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:38:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd9ec-a9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b4:82:29:d2:40:82:3e:f4:1a:8e:b6:e9:a8:
                    9a:1c:dc:66:40:8c:70:96:40:06:da:67:b6:49:1d:
                    fc:eb:79:47:6d:52:44:24:ef:fb:56:02:a9:52:61:
                    df:65:09:49:1b:c0:42:29:de:ee:e1:ea:fd:e7:26:
                    f3:20:3d:1c:56:55:5a:e0:8f:f2:87:3b:d5:8e:3e:
                    4a:63:87:5b:c7:93:2c:57:56:2f:24:e1:87:03:29:
                    31:eb:87:86:19:5a:66:14:1f:4d:31:68:40:fb:98:
                    6b:70:d3:bf:4e:a6:1d:c8:34:8c:5e:c3:5a:6f:bf:
                    3a:a2:a3:43:a6:4c:49:73:10:2e:2e:a4:65:86:c6:
                    50:a5:e8:4f:de:13:a9:34:8d:46:20:9b:6b:f2:7d:
                    81:aa:9c:14:33:58:5a:31:40:87:50:f6:42:c6:93:
                    6d:8f:7d:8b:d9:5c:c2:84:f5:c1:08:96:5e:2a:d0:
                    11:40:7e:5e:8d:80:bf:ae:83:e1:19:a2:5d:a8:e3:
                    39:65:cd:3a:3a:52:d0:85:40:99:39:6f:41:9c:cf:
                    a9:d7:ca:af:02:b5:fa:64:d8:94:01:56:bd:da:ff:
                    b9:9d:b9:dc:82:77:39:a1:ad:43:02:db:88:f6:32:
                    25:fd:2c:56:3e:ff:0c:3c:5c:d5:9c:b0:85:07:c6:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:56:1A:F1:81:D3:C6:9D:C9:CC:E6:C2:C6:EB:BE:DD:E0:77:7B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63F5D1BE104B11F0B006D834C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.102.0/23
                IPv6:
                  2401:f5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:bf:7b:c1:37:08:79:1d:33:5f:1e:29:f9:5c:ae:d4:cb:05:
         3c:be:a2:16:3c:df:30:93:a3:d4:47:a4:93:f3:48:9e:1b:b9:
         bc:0f:27:75:06:5c:d7:f9:42:ac:ca:65:c5:69:f6:74:89:d0:
         ae:3a:3a:0c:a5:a7:ad:ca:e7:2a:c2:ba:83:0d:97:d2:3d:4a:
         d6:b1:4a:77:7a:ce:41:42:6e:02:f0:72:d2:6b:cf:ab:e1:11:
         97:c3:ff:55:4f:10:86:86:3e:19:7f:87:86:7a:3c:7d:c1:18:
         ae:cf:ee:61:86:8f:d5:27:ba:ec:29:84:95:2c:af:80:be:50:
         ef:9d:c3:bf:7f:12:d2:5a:af:a5:57:e9:f0:35:19:ed:37:a1:
         04:60:c6:b1:2c:42:08:b4:e1:e7:dc:f7:2c:67:a4:06:9b:40:
         46:37:03:c4:88:06:6d:05:b0:6c:a3:05:44:aa:3a:0c:fa:72:
         e7:98:e4:0e:f5:34:c2:ad:91:51:be:92:16:1c:ec:2f:a1:52:
         60:7a:b0:75:04:67:3b:46:90:8d:93:60:a1:31:54:97:48:82:
         a2:f2:9b:0c:fc:ea:f9:53:99:f1:c2:14:c6:22:7e:e8:ac:8f:
         43:5a:05:1c:c9:e9:a1:8d:69:8e:9f:4e:a4:9e:6e:ee:19:67:
         4e:4c:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:52 2026 by rpki-client