Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5976AF06063C11F080EAF859C4F9AE02.roa
File:                     5976AF06063C11F080EAF859C4F9AE02.roa (raw, json)
Hash identifier:          /iu8eEmWOMvB40URoeSgn1rbsCu209WtKZvizYv76SI=
Subject key identifier:   45:54:44:20:B1:CD:3D:BB:77:43:BF:22:09:79:D2:09:94:01:F4:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D85B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5976AF06063C11F080EAF859C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:54:31 +0000
ROA not before:           Thu 08 May 2025 16:29:35 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153722
IP address blocks:        163.223.164.0/23 maxlen: 24
                          2401:f7e0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55387 (0xd85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:29:35 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c3a7-f2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:84:96:f1:16:37:01:d2:e6:e7:f2:f2:1a:
                    2a:c3:26:22:b1:6a:f5:64:10:6a:85:2f:d8:68:c7:
                    73:64:b1:9c:59:56:eb:79:d7:42:bb:61:28:52:98:
                    5f:1f:bf:02:e5:87:c1:2d:50:37:17:31:5b:09:8e:
                    65:b0:4e:97:3b:07:e5:e0:30:1f:a2:3d:e6:19:53:
                    9d:e0:0c:6c:5a:a6:a3:17:3f:72:be:13:7c:57:fe:
                    0e:c7:1e:75:1b:dd:ac:95:7e:00:7d:35:88:58:57:
                    78:5f:77:05:d6:f2:c4:db:d3:fa:4f:08:b6:bb:df:
                    27:52:02:3e:3f:c6:e4:47:21:4c:7d:5d:dd:f9:c0:
                    1e:a7:7c:87:ef:83:7f:25:ed:74:c8:cf:f1:01:24:
                    5c:cc:eb:50:07:83:4f:e9:a7:8b:2a:bf:81:ad:7b:
                    4c:8b:49:ad:b0:86:6d:80:aa:70:83:4f:29:fc:3f:
                    1b:a9:c5:6d:fe:7d:10:39:91:40:2c:b9:be:50:f8:
                    6c:d3:23:f8:07:04:31:10:37:d9:3a:95:4a:8c:e0:
                    08:b7:06:7f:3e:fd:7f:e8:e1:bc:b2:59:e0:59:b8:
                    67:4a:e2:3f:fd:ff:2c:66:84:8d:08:6c:b3:80:b6:
                    f7:c8:f4:6f:78:8c:d3:5a:c9:38:72:cc:aa:22:a7:
                    2d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:44:20:B1:CD:3D:BB:77:43:BF:22:09:79:D2:09:94:01:F4:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5976AF06063C11F080EAF859C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.164.0/23
                IPv6:
                  2401:f7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:48:40:63:d3:31:af:09:fc:63:0f:19:d2:1c:8d:17:88:16:
         d6:31:79:d6:ab:13:2a:91:9d:9c:9c:c6:a0:27:c3:39:29:c5:
         28:8c:f4:fc:4a:08:12:a4:74:71:a8:02:cd:69:e7:f4:ff:29:
         80:23:4a:bc:ae:fe:c0:ce:82:64:a0:e9:87:8c:ad:fa:a6:ee:
         d2:43:dd:17:2a:78:30:a6:b4:9d:c5:02:8a:70:f7:81:48:a8:
         24:68:46:de:c1:27:00:5e:a5:a0:97:bb:06:de:af:ed:46:e6:
         37:f1:f7:da:0a:66:7d:68:f4:1b:a0:af:d7:97:ef:19:4d:3b:
         a6:1f:c3:83:5e:00:a0:b0:85:bc:c7:34:c4:a3:95:16:56:cf:
         56:75:b8:0e:41:28:de:ed:bc:2d:7b:6e:92:12:d8:cf:9e:ff:
         06:fe:98:d6:1d:c1:ed:85:5e:0a:2f:96:15:b8:fe:b2:ec:7e:
         69:06:5a:33:35:d4:c6:42:35:93:dd:02:0e:f0:e1:e6:68:42:
         38:55:de:1d:97:00:4d:21:ec:d2:51:5d:96:dd:10:2b:5f:e5:
         27:c6:7e:ca:4d:58:29:67:5e:c8:a4:5e:6c:fe:00:c3:fa:19:
         a8:81:d1:ab:70:ab:f9:bc:c6:56:18:47:f9:bf:a2:92:2c:5d:
         55:7d:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:06:59 2026 by rpki-client