Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa
File:                     A69DB682FFC811EF92D78053C4F9AE02.roa (raw, json)
Hash identifier:          QilnXuA/NrdyZeozKxSk+E7tTq8PNFQhWT4CgNxj4p4=
Subject key identifier:   D0:60:D0:AB:B9:4A:B2:3A:C5:6C:D6:0A:8C:2C:9B:F1:52:DA:40:7A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F653
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:40:59 +0000
ROA not before:           Mon 06 Jul 2026 17:40:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152502
IP address blocks:        163.223.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63059 (0xf653)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:40:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be8ab-80b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:52:a9:6f:a7:20:b2:82:72:15:11:0d:3e:4d:
                    a3:c8:a0:93:e1:43:bf:94:fd:21:c1:49:c6:79:7e:
                    ec:0a:29:a7:18:9b:d2:64:00:c3:cb:74:84:c4:84:
                    25:29:6d:62:7e:5b:94:48:72:3e:5e:49:f3:15:2c:
                    c2:fc:ad:02:8a:8b:12:60:27:b4:ce:47:02:f6:89:
                    da:38:eb:e8:4c:1e:0a:64:18:60:62:6e:67:e5:73:
                    f9:aa:4f:73:a4:60:a2:ff:de:4e:03:e1:5b:dc:c1:
                    da:17:86:e5:ae:e7:8d:16:79:d0:57:d5:65:59:82:
                    21:7b:87:cd:4b:82:6c:c5:bb:66:94:8a:68:53:f2:
                    10:d0:4f:88:95:10:6d:20:49:29:8d:a5:da:e5:73:
                    4d:b7:b0:4c:9e:1e:0f:64:68:33:22:e9:f1:71:b3:
                    7a:16:66:5e:7f:c7:fe:dc:2f:a3:f4:2a:10:98:df:
                    55:4b:3e:ec:ab:e4:8a:ac:4b:9e:07:76:0b:ac:d2:
                    de:41:96:f9:38:f4:d5:d4:ff:86:e3:43:30:5b:34:
                    8c:44:50:48:29:bd:3d:4c:28:9a:df:ef:3c:1a:02:
                    08:e2:f3:98:bb:51:97:61:f7:19:54:5c:5f:12:4a:
                    80:6b:85:c8:ae:b3:6e:c1:73:cf:24:c4:0b:ee:0d:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:60:D0:AB:B9:4A:B2:3A:C5:6C:D6:0A:8C:2C:9B:F1:52:DA:40:7A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:a9:d1:14:bc:ea:14:0d:e2:ef:03:17:43:c5:02:95:c8:ff:
         a2:a5:cc:3d:fb:3b:b4:31:ce:d5:d2:b0:c1:18:1f:8e:60:6b:
         c8:c8:25:b4:2f:cf:2b:79:47:ea:75:3b:33:59:28:a1:84:21:
         e5:e1:75:02:71:de:be:94:d5:a1:6c:74:d5:73:47:f5:d5:2e:
         7b:ef:3d:3b:ef:08:5a:06:19:d0:4a:78:9b:39:60:4c:49:7f:
         e9:19:c8:63:52:91:1f:08:45:a9:e3:49:09:ae:db:3e:4e:fa:
         e2:f0:1f:fb:17:ce:2e:2f:7b:dc:2d:f7:c9:d1:a0:33:4a:73:
         7a:58:09:8e:64:4c:db:87:e8:66:4c:f9:33:20:14:b0:79:04:
         2a:3e:89:a6:9c:d4:03:89:8c:c1:45:84:bb:08:f5:be:24:0c:
         6e:b3:da:9d:15:42:a0:07:f4:9b:18:65:51:21:91:0c:34:62:
         57:2a:2f:17:6a:8f:21:b1:f2:c0:86:fb:e1:dd:49:c2:3a:03:
         0c:98:13:ab:8e:96:0f:ae:91:11:1d:50:c3:f0:dc:26:34:e4:
         96:4b:6d:8b:e4:dc:be:12:f7:b4:14:54:2c:fd:92:02:0a:3a:
         71:9e:23:68:e8:79:12:9c:cf:06:00:1e:6c:34:c0:be:28:e8:
         f9:79:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:25 2026 by rpki-client