Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99DA20063D8011F1A2AA04D1BC833773.roa
File:                     99DA20063D8011F1A2AA04D1BC833773.roa (raw, json)
Hash identifier:          oZQ3rFMNefMfB9xV8c+n7V/zutRUtVJH9tTaIykEqrg=
Subject key identifier:   38:96:31:70:9E:26:C7:83:20:99:B4:9F:8C:FA:A4:C1:49:49:05:D9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F712
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99DA20063D8011F1A2AA04D1BC833773.roa
Signing time:             Mon 06 Jul 2026 17:47:35 +0000
ROA not before:           Mon 06 Jul 2026 17:47:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154564
IP address blocks:        163.128.102.0/24 maxlen: 24
                          163.128.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63250 (0xf712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:47:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea37-c131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:0b:ad:df:68:28:4f:22:d1:dd:24:e7:a7:
                    51:df:e9:24:2a:e9:e8:23:d1:c9:24:16:8f:65:48:
                    b2:bb:7f:0e:b1:aa:0a:80:5b:46:5b:21:74:10:45:
                    5d:b4:a9:93:99:c6:6a:39:70:1a:b3:fa:4c:bc:0a:
                    df:fd:04:eb:bb:2e:70:7b:94:34:82:08:7d:6a:8b:
                    f2:87:da:81:89:8e:bc:ee:bf:a5:f6:c1:d2:8b:79:
                    43:cb:cd:ff:39:c0:87:5e:29:cc:4c:b7:d8:fa:3a:
                    f7:c8:ed:89:61:6e:04:7e:8c:0f:a1:bd:d8:11:11:
                    d8:ee:ca:64:24:57:06:92:62:92:b5:72:39:97:6d:
                    b1:f3:fa:77:a7:6d:86:34:a8:cc:74:6e:70:b4:a6:
                    f7:a4:7e:d3:1f:99:aa:d9:4d:96:05:b3:f8:7c:3b:
                    25:2e:f9:c8:ca:57:c8:37:5d:35:92:83:68:72:dc:
                    2c:15:02:bb:4f:b8:05:96:c2:cd:75:48:5a:62:40:
                    f0:7e:d4:ff:73:c4:00:27:41:e0:d3:28:07:a1:c4:
                    e6:da:b2:fa:22:c1:06:f6:ef:fa:c1:8c:52:20:2a:
                    6f:ac:a1:40:27:cf:da:1f:c3:92:3e:fc:d9:2b:57:
                    14:3c:d3:6e:62:85:6b:f3:5e:c8:d9:8b:e2:31:94:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:96:31:70:9E:26:C7:83:20:99:B4:9F:8C:FA:A4:C1:49:49:05:D9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/99DA20063D8011F1A2AA04D1BC833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:d4:a4:9e:59:f2:4b:e8:61:c0:96:3a:c0:51:66:7c:c0:b4:
         30:8f:b5:be:22:38:0c:23:14:2e:b7:a2:60:b5:57:09:fc:fa:
         e1:b7:20:20:66:42:31:52:48:39:3c:db:62:ab:2b:76:2f:ab:
         91:c8:6d:07:a2:e9:3a:85:b6:5b:95:21:12:32:07:bf:17:ea:
         03:36:51:be:f5:3c:85:8f:eb:47:61:fd:89:6f:03:cf:6a:43:
         70:ff:65:08:ad:8c:1a:1f:41:77:22:eb:31:30:0d:b4:e5:f6:
         b4:70:df:fb:9e:04:22:d3:55:18:76:28:df:b4:89:9d:a1:d7:
         7b:5a:ce:c7:d3:16:79:00:5f:b1:48:da:6b:57:22:b1:c1:0d:
         a5:85:db:c9:c0:9c:13:50:77:68:eb:a3:54:a9:47:6e:b5:ff:
         5d:2d:a5:1e:05:c5:ba:2c:70:c8:e1:0e:bf:96:c1:47:1f:2c:
         80:f6:92:80:7a:8c:ce:2b:3c:ac:d6:6a:70:04:1b:ea:93:8a:
         6a:f4:63:f7:27:1b:b1:fa:9f:73:d9:8b:90:6d:d5:f2:42:ef:
         4c:60:53:c9:51:a1:1f:f3:c8:18:56:6a:84:7e:26:28:43:0a:
         83:e0:e7:09:0b:02:20:23:86:48:81:dd:14:d5:1a:e6:44:a0:
         4e:8d:92:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:14 2026 by rpki-client