Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEE0F80A0ECC11F08C313C71C4F9AE02.roa
File:                     FEE0F80A0ECC11F08C313C71C4F9AE02.roa (raw, json)
Hash identifier:          4WdYObpDjlk32T7U3/pvQuSTZyCXGIv5o1fApM/tQvU=
Subject key identifier:   B0:56:47:F6:4A:C1:19:3C:04:CC:93:89:12:9D:11:B1:73:F2:A6:AA
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6BA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEE0F80A0ECC11F08C313C71C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:44:27 +0000
ROA not before:           Mon 06 Jul 2026 17:44:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153734
IP address blocks:        163.223.194.0/23 maxlen: 24
                          2401:f920::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63162 (0xf6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:44:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be97b-3375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:44:2c:55:e1:b9:c4:20:80:dd:89:50:c7:
                    9d:b9:bc:31:96:cc:88:15:44:8f:e0:71:1a:ee:55:
                    8c:dd:3b:4e:65:86:86:57:9f:7d:ec:68:ba:32:d5:
                    1f:fd:12:b7:9a:28:fa:91:db:d2:e2:90:ce:18:b9:
                    73:3e:58:83:ab:b1:32:28:7d:e3:ec:72:72:6c:0c:
                    cb:2e:be:29:09:f7:72:b8:b7:ac:6c:b4:6a:db:6f:
                    55:84:29:82:c4:69:e5:0e:53:3f:83:4f:e8:09:85:
                    bb:b2:4c:1d:cf:11:39:35:0d:01:95:e5:c8:24:bb:
                    66:e8:31:c5:d0:94:d1:54:65:d1:2c:69:d5:ec:b9:
                    b9:9f:0a:38:47:67:55:17:e9:00:47:4f:44:ff:22:
                    7f:28:2e:d2:1d:df:fa:b8:9c:b2:8c:75:c2:25:dc:
                    7e:64:ea:be:85:b2:b6:75:5e:fe:24:23:62:67:c5:
                    02:fe:80:91:74:4d:8b:91:0f:06:fe:a7:41:d1:0e:
                    ea:8c:96:83:04:0c:f8:d7:a7:ec:75:3e:af:2e:b8:
                    15:e4:87:c0:3d:f3:52:70:9b:a7:9b:2d:03:d7:83:
                    4f:54:ff:72:67:e4:90:2f:f0:96:ee:76:99:09:00:
                    33:aa:c8:03:08:ba:db:13:4f:e4:53:99:0b:30:ba:
                    67:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:47:F6:4A:C1:19:3C:04:CC:93:89:12:9D:11:B1:73:F2:A6:AA
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FEE0F80A0ECC11F08C313C71C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.194.0/23
                IPv6:
                  2401:f920::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:79:c2:a0:86:b0:b0:8a:1a:f2:d3:93:22:38:70:63:7f:
         cf:e6:b7:0f:c6:5b:44:91:1e:ad:bc:20:7c:33:4c:ea:ba:be:
         99:be:26:b6:b2:13:d9:3b:0b:a6:b7:46:d9:b6:30:c4:f8:4d:
         99:67:19:1f:1e:7f:36:56:55:a1:e0:fb:6a:d0:a8:29:50:b7:
         56:51:26:88:71:8f:8f:89:3b:ad:e1:13:7a:76:26:0b:43:74:
         d4:9e:37:c7:93:71:3b:b0:2e:a4:a7:a6:87:da:54:3d:aa:d0:
         ec:05:a1:04:9f:a6:75:30:4d:a7:08:98:c6:81:2b:55:39:9a:
         88:ae:7a:bb:39:78:17:6d:72:c1:56:cb:4f:1f:08:6c:6a:33:
         b0:07:41:d8:34:08:c8:d2:d8:34:81:f7:73:9f:95:bd:a1:b7:
         e1:c3:f7:13:c7:1e:c5:9e:7f:c6:0f:ca:35:a7:d0:10:1c:ab:
         3c:cb:43:79:e3:17:90:b7:f7:81:9d:72:40:6f:ca:89:51:02:
         88:33:1d:8a:3a:52:72:cb:fa:98:69:b7:f7:02:b5:c8:0a:ed:
         9b:fb:93:53:e9:b8:65:f0:34:e2:64:83:3c:6f:36:40:3e:2a:
         cc:30:3c:b3:47:d9:83:65:50:bc:dc:1c:83:98:46:f6:ab:7d:
         05:bc:86:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:51 2026 by rpki-client