Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1B7916640011F1A2CD57189647A888.roa
File:                     DF1B7916640011F1A2CD57189647A888.roa (raw, json)
Hash identifier:          KsS+Q3RUTaWSRQwJoZD0M2xh1Vod+686eGLOTwwRYTM=
Subject key identifier:   DA:3A:9D:E7:68:AD:F4:30:F5:17:E3:B4:1A:68:38:23:C0:88:4C:AC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F71D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1B7916640011F1A2CD57189647A888.roa
Signing time:             Mon 06 Jul 2026 17:47:55 +0000
ROA not before:           Mon 06 Jul 2026 17:47:55 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154617
IP address blocks:        163.128.222.0/23 maxlen: 24
                          2001:df6:ecc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63261 (0xf71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:47:55 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea4b-fcc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:62:58:4f:23:21:7d:25:4f:65:ab:7e:16:
                    35:ad:33:48:e6:f2:1d:a6:63:b6:9e:01:d2:9a:c3:
                    8f:0f:da:03:49:8f:92:44:c1:ca:4d:0e:0b:c8:9b:
                    38:4d:d5:e9:2d:b6:5f:ad:ee:60:dc:7f:0f:fa:e8:
                    87:62:5f:2e:61:82:c5:ef:b1:37:38:d0:2c:67:b4:
                    a0:03:21:09:70:13:38:7a:5e:e1:76:50:bb:5f:d0:
                    2f:ef:75:ab:44:6d:53:46:a8:0d:03:a2:5a:f8:33:
                    0d:05:77:eb:b6:47:c2:a4:a7:ca:5c:e5:ed:03:18:
                    ca:65:90:71:e8:1d:ab:02:67:7d:ff:2d:95:df:d9:
                    75:69:3d:b7:20:15:f3:9c:60:e1:da:e7:61:8f:8d:
                    06:52:6e:d0:96:49:70:f9:43:4f:79:6a:64:f7:8e:
                    97:31:5a:1d:fd:57:cc:e7:3d:a8:69:fe:5c:0f:94:
                    05:32:e6:0a:cd:34:ab:aa:1a:ee:dd:cc:77:7e:c7:
                    59:02:69:4d:4f:4b:01:51:69:47:9a:f6:bc:17:fb:
                    3b:ce:7c:fd:15:ab:d9:a6:a1:e6:79:97:d2:c2:90:
                    28:c0:9f:42:69:79:8b:54:47:ab:a1:f0:4e:02:eb:
                    b0:04:4e:68:0a:84:0d:64:6d:73:43:03:6e:91:c1:
                    76:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:9D:E7:68:AD:F4:30:F5:17:E3:B4:1A:68:38:23:C0:88:4C:AC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DF1B7916640011F1A2CD57189647A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.222.0/23
                IPv6:
                  2001:df6:ecc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:5e:ac:72:45:35:86:17:9d:74:ad:01:12:a3:a0:4a:3f:
         a1:18:99:70:ca:32:f9:46:ef:6e:3c:5d:50:82:25:e4:e8:3b:
         01:ac:7c:fb:4f:b1:90:83:7c:7c:68:9b:ff:04:c2:17:16:81:
         73:e8:a5:b2:57:dd:67:39:a7:70:b3:ca:0f:ac:a4:cf:4b:66:
         12:18:b2:9a:81:9c:39:ee:d2:a7:83:d5:71:b4:8d:ae:65:ee:
         e7:0c:0c:6c:49:df:16:89:63:fc:2e:82:b8:30:ed:55:4a:ad:
         93:ef:0d:e5:c0:44:44:67:da:2b:83:9b:a3:99:76:2e:d7:ae:
         83:47:66:06:38:33:f1:aa:14:f9:7a:75:39:07:c8:a6:3f:69:
         74:33:bc:0b:14:74:d8:70:ca:d7:77:3c:70:5d:7e:c1:ac:dc:
         c4:29:f5:c7:d7:b8:06:5e:58:90:73:50:55:57:54:db:ec:04:
         cd:2f:ce:46:3e:e4:eb:ce:9c:52:7e:25:d9:ad:e6:f5:bc:66:
         e5:60:8e:db:77:9b:af:a2:ed:7f:76:2e:2e:7a:f7:a6:ae:37:
         ab:6f:71:b1:80:b3:d4:ac:5d:9b:e5:cc:c6:b3:3d:67:7a:c1:
         06:c7:b3:d1:c7:78:09:ba:75:cb:a4:43:07:e1:55:3f:6e:25:
         f9:82:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:24 2026 by rpki-client