Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A99B072A6EB11F1A96CAC0B5211F970.roa
File:                     9A99B072A6EB11F1A96CAC0B5211F970.roa (raw, json)
Hash identifier:          DyZ1sdLdbvPiGgyYfmoORUuJ+v06o2oQwGjgUtvHdig=
Subject key identifier:   72:08:EA:8C:E8:9A:13:12:18:42:90:3D:0C:64:59:60:42:CD:EA:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FBA1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A99B072A6EB11F1A96CAC0B5211F970.roa
Signing time:             Wed 02 Sep 2026 16:30:27 +0000
ROA not before:           Wed 02 Sep 2026 16:30:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154870
IP address blocks:        163.52.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64417 (0xfba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep  2 16:30:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a984f23-6336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:d0:bf:2e:56:57:b3:08:43:3d:07:83:42:
                    c6:5a:d5:d9:60:3b:3d:10:ab:8b:b3:24:09:3c:4f:
                    31:7a:d3:75:35:8d:e2:10:f6:b8:69:c3:a3:7e:c8:
                    fd:ea:04:a3:8c:b8:5e:23:d8:97:12:f7:78:97:bd:
                    b1:7e:9f:d9:a9:2e:63:d4:f8:38:4b:8a:e8:94:95:
                    6e:01:9e:dd:30:46:c5:a9:9e:23:9b:2a:65:c9:cf:
                    d8:5a:aa:41:e0:5a:c6:ec:2c:2f:1f:c0:9c:70:ad:
                    43:97:d7:f8:46:ce:ba:1f:1a:cb:b1:b8:17:63:cb:
                    37:0b:ce:30:27:e6:5f:ea:36:51:6c:22:03:c8:7a:
                    58:0b:fb:fe:f9:2a:f3:be:5c:52:f0:e1:b8:8a:1a:
                    7e:51:4d:c9:60:9c:70:cb:8b:eb:87:db:89:26:b1:
                    93:3a:1b:f2:f6:e4:7c:82:10:1a:c2:cb:fd:56:39:
                    9f:8b:11:ec:78:c6:ef:6d:f8:90:f1:26:db:df:51:
                    7b:c9:7a:2e:85:9c:c1:48:0b:0a:bd:69:3e:62:71:
                    af:81:2e:0a:4e:26:be:5b:ef:a3:52:35:dc:9c:8d:
                    dc:6e:e3:3e:ed:fc:4d:4c:1d:5d:b2:ad:70:0f:99:
                    ba:c0:be:4f:91:8f:3b:2b:7c:bb:cc:d1:28:0e:40:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:08:EA:8C:E8:9A:13:12:18:42:90:3D:0C:64:59:60:42:CD:EA:AB
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9A99B072A6EB11F1A96CAC0B5211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:61:5c:55:89:7e:8c:42:dc:7a:b8:e1:72:1a:32:eb:a7:5f:
         f5:e3:40:6d:29:0d:e4:6c:6d:70:d1:d7:8b:04:73:fe:68:cc:
         ed:12:da:86:9b:53:8d:c4:fa:5b:84:59:1a:35:1e:af:6a:b3:
         3a:15:5e:47:ee:6a:7e:33:bf:ca:0f:43:6b:f0:34:eb:d3:4c:
         ad:27:c0:eb:6b:68:0b:7b:19:f8:c3:2b:d8:9a:b5:3e:be:05:
         76:4c:66:b1:42:38:2a:bb:17:cb:a9:2a:3f:9c:2f:ca:b8:3d:
         91:43:dd:cd:40:5b:ba:d8:a7:a4:8c:64:8f:0e:57:c4:8c:e2:
         69:89:64:39:54:6e:f0:b3:f2:a5:62:82:b7:3d:25:e4:72:b2:
         a6:dd:5a:a5:b1:80:c4:c5:f3:51:2e:b4:60:a0:9e:4c:ae:87:
         9b:84:b4:fc:fa:37:9b:f0:19:18:41:3e:5a:0f:81:1e:ea:96:
         47:f3:54:5f:30:22:d8:79:df:d7:f7:5b:18:b1:34:6c:c0:39:
         33:c6:92:51:3b:b5:b5:b7:06:08:21:3b:b6:17:7c:31:bd:db:
         f9:79:cd:97:fa:e4:e6:30:1a:23:f5:bf:31:f7:9a:fa:66:64:
         e6:f3:a1:aa:d1:82:3c:2d:f8:af:dd:f5:a7:21:83:67:6a:0e:
         f9:62:d5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:19 2026 by rpki-client