Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/47DB57BC9B8511F191BA30A64411F970.roa
File:                     47DB57BC9B8511F191BA30A64411F970.roa (raw, json)
Hash identifier:          mGDH4+uO6s8a5TDyRvtaDlG1gpsiOPrQ8V4FMaRxljU=
Subject key identifier:   52:55:1B:B1:79:3D:6E:8B:81:7E:DB:79:79:8E:4D:42:DE:C4:8D:90
Certificate issuer:       /CN=A914A657/serialNumber=C29371DA6DAB01AD53EDE0AC681E7970A57D32B0
Certificate serial:       02
Authority key identifier: C2:93:71:DA:6D:AB:01:AD:53:ED:E0:AC:68:1E:79:70:A5:7D:32:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpNx2m2rAa1T7eCsaB55cKV9MrA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/47DB57BC9B8511F191BA30A64411F970.roa
Signing time:             Wed 19 Aug 2026 04:20:16 +0000
ROA not before:           Wed 19 Aug 2026 04:20:16 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154845
IP address blocks:        163.52.18.0/24 maxlen: 24
                          2402:7020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.crl
                          rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpNx2m2rAa1T7eCsaB55cKV9MrA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A657, serialNumber=C29371DA6DAB01AD53EDE0AC681E7970A57D32B0
        Validity
            Not Before: Aug 19 04:20:16 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a852f00-7ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:e0:17:be:82:a2:4e:91:81:17:96:2c:7e:
                    b0:95:70:9c:b7:3f:3d:b6:bc:ed:1e:9e:a3:36:cd:
                    cb:65:8e:9c:0a:a5:19:b5:24:7f:98:13:72:1b:0e:
                    4e:a3:0b:90:20:f3:4b:fe:54:74:0c:f4:7f:36:43:
                    c6:4e:79:f9:b8:e9:09:23:fa:05:bd:60:e2:e5:79:
                    d5:b4:43:15:c2:54:88:f0:51:cc:68:95:a3:41:8e:
                    bf:7e:87:5f:25:6a:a3:1d:2a:af:d0:33:a3:e4:ce:
                    07:3b:ed:48:42:6d:e4:ab:78:c7:0f:bc:c9:30:b7:
                    5f:e3:f7:cc:4e:b4:5c:44:81:a4:33:fc:df:42:6f:
                    f3:f5:6c:db:9d:6f:06:e4:62:04:5f:6f:1d:39:a7:
                    3f:e9:9c:a4:44:a2:6c:90:08:96:02:14:27:a1:8b:
                    83:1c:1d:30:75:76:41:96:c0:c7:e2:86:f8:04:43:
                    ab:45:e2:85:82:e0:50:ba:37:af:63:e7:b6:b7:e2:
                    cd:79:17:59:46:69:ee:00:69:00:bb:f2:d5:d8:0e:
                    d9:be:df:d9:c1:0e:cc:d0:96:10:6e:96:77:5a:98:
                    69:14:87:77:4f:a9:15:e6:62:70:8c:4c:0c:3a:4f:
                    a8:fe:da:d9:d7:99:fa:75:66:68:9b:d0:f2:89:7c:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:55:1B:B1:79:3D:6E:8B:81:7E:DB:79:79:8E:4D:42:DE:C4:8D:90
            X509v3 Authority Key Identifier:
                keyid:C2:93:71:DA:6D:AB:01:AD:53:ED:E0:AC:68:1E:79:70:A5:7D:32:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/wpNx2m2rAa1T7eCsaB55cKV9MrA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wpNx2m2rAa1T7eCsaB55cKV9MrA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A657/E037AAFC9B8411F1BEC77B6A4411F970/47DB57BC9B8511F191BA30A64411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.18.0/24
                IPv6:
                  2402:7020::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:00:cd:6d:94:73:00:90:d6:72:90:6c:be:ba:a0:87:be:
         c0:63:7d:e6:64:91:78:75:af:19:3a:a8:dc:2a:e0:a1:6c:b5:
         b5:b3:72:74:b5:db:3e:52:5c:cc:ba:74:6c:3c:be:38:2c:91:
         2f:0c:f3:65:34:17:3e:07:64:47:62:68:84:32:08:f7:96:18:
         87:c0:fd:35:dd:d5:ec:16:84:5d:c2:41:af:65:56:4c:0f:d8:
         d5:6f:2a:c7:b0:e6:82:3e:7f:07:dc:6a:08:90:32:a3:ec:27:
         4b:c1:82:e4:fc:51:be:23:43:bf:0a:1b:5d:f6:87:39:71:2c:
         72:a5:10:d0:0c:01:94:ac:28:86:e2:5a:aa:ff:f1:9f:75:33:
         94:74:83:ee:bc:f7:4e:a3:16:fc:e4:41:1c:22:1b:9d:7d:c9:
         11:d7:d0:39:0c:08:c6:9b:bb:e2:7c:33:27:e5:f2:e8:bd:9d:
         1c:8f:b1:9a:32:c7:b9:a6:14:b2:d3:b6:55:90:8f:75:80:0d:
         c1:74:d5:71:9e:83:37:c6:b6:ad:7d:31:3d:c1:88:57:35:3a:
         02:74:c5:f4:4a:63:50:14:50:9f:c9:b4:c2:93:f3:5e:5e:dd:
         30:c6:9e:48:34:53:1b:c1:7b:d3:a1:ac:98:be:f7:bc:04:6d:
         4d:e6:62:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:39 2026 by rpki-client