Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C0AE95C836E111F0BD233B12C4F9AE02.roa
File:                     C0AE95C836E111F0BD233B12C4F9AE02.roa (raw, json)
Hash identifier:          fXGFEAai+GlAzZLUUVB8ov+hCFQ2Zg47KJRXkqwmc4E=
Subject key identifier:   20:FC:C5:84:AA:8C:FD:4D:8F:26:A8:76:DD:BC:37:6F:EA:78:15:92
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E29A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C0AE95C836E111F0BD233B12C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:38:35 +0000
ROA not before:           Sun 31 May 2026 16:38:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133689
IP address blocks:        163.227.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58010 (0xe29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:38:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c640b-fe78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:36:bd:62:01:64:55:36:1a:0a:28:af:c7:a3:
                    b6:b4:7c:3c:0e:3e:8e:64:90:e3:bc:3a:4f:b4:9b:
                    3d:25:d3:f0:9e:12:70:be:71:b1:ad:84:6b:20:63:
                    10:93:e2:8f:9f:df:bf:fc:0c:19:09:20:e0:04:ef:
                    00:7c:95:3a:b8:97:01:a9:c9:33:a6:8f:82:7c:e1:
                    2e:cb:c3:5c:2e:24:19:a3:c2:bd:d5:22:77:45:60:
                    4d:a6:5d:c1:3e:c9:d5:4d:4a:5e:e7:97:dd:4f:17:
                    b2:12:67:a2:77:d8:e9:c2:df:37:18:40:9b:c2:62:
                    7b:58:b7:7a:d4:b3:d3:8b:c6:c8:9c:4f:9b:46:f9:
                    6c:46:53:83:d6:ed:d6:83:80:b1:1f:c2:6e:f8:e9:
                    2a:a5:2b:a9:e9:23:6d:f8:3a:3b:13:89:2a:75:28:
                    3c:ae:eb:35:9d:67:dd:f9:e0:15:ce:43:a0:9b:09:
                    ad:5a:69:d8:9f:7a:1a:7b:fa:f4:29:e7:ee:dc:c9:
                    5a:ba:f2:dd:a8:23:72:cc:06:ca:fe:96:6c:f5:4a:
                    af:86:1d:28:09:5c:dc:56:67:9f:5b:a6:fc:23:08:
                    4f:a1:24:e9:a0:4b:0e:4a:ee:5c:11:68:c5:62:c2:
                    4e:83:91:f5:6c:e8:a3:4b:b2:9b:46:b6:08:b3:57:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:C5:84:AA:8C:FD:4D:8F:26:A8:76:DD:BC:37:6F:EA:78:15:92
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C0AE95C836E111F0BD233B12C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.227.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:5a:0b:e5:3a:90:ac:f5:8f:c3:e9:78:6a:27:42:eb:20:25:
         39:e2:4b:c7:6d:f8:ce:90:cb:e8:46:9a:11:15:bc:a6:cb:0e:
         3e:a9:18:f5:f1:01:64:6f:3b:b9:aa:54:ba:f5:4e:0b:dc:eb:
         1b:81:22:47:34:c7:37:68:e3:0e:b3:42:7c:cd:46:01:17:3b:
         d4:98:a5:ba:54:fd:09:da:7a:46:eb:9a:11:0b:f6:59:be:08:
         b3:96:f4:67:6a:29:c2:a5:97:43:fb:a5:a6:40:ae:f0:89:c1:
         04:15:4c:dc:22:81:54:b6:ed:2c:9c:84:37:4e:98:e1:ff:a0:
         e6:12:48:40:64:eb:85:b0:de:7e:81:62:25:bc:c1:a3:bf:c5:
         35:60:00:7b:17:f0:a3:7b:ed:77:3e:df:e6:98:6b:a2:ba:40:
         0f:59:b9:ee:c3:b3:df:10:0f:2e:e1:99:0e:27:d2:8a:68:a1:
         d8:36:30:32:a8:a6:f6:5a:b3:a8:d0:e9:77:58:e3:d7:42:6f:
         f5:55:c9:61:1e:97:be:a2:01:93:dd:e3:c7:3f:d2:d1:56:88:
         93:47:88:04:68:27:ee:43:e3:c2:08:9f:9f:20:81:77:32:87:
         21:9e:4b:92:6d:18:a3:87:c8:88:41:87:92:27:b5:09:ff:ae:
         8e:5b:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:42 2026 by rpki-client