Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EBBF4EB02C11F1AB9EC3D93911F970.roa
File:                     63EBBF4EB02C11F1AB9EC3D93911F970.roa (raw, json)
Hash identifier:          9hsE31sgtfCR/ylBBmJyAVR1BKe3q9ry4mu5vV9t4eo=
Subject key identifier:   81:14:D1:B4:F7:F2:F6:95:CF:7A:E8:0D:F7:47:86:A6:33:0E:4E:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FC87
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EBBF4EB02C11F1AB9EC3D93911F970.roa
Signing time:             Wed 16 Sep 2026 03:53:38 +0000
ROA not before:           Wed 16 Sep 2026 03:53:38 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154909
IP address blocks:        163.52.142.0/23 maxlen: 24
                          2001:df7:7dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64647 (0xfc87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 16 03:53:38 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aaa12c1-daf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:18:73:f4:c1:17:36:f2:e4:8d:c8:a6:bb:
                    6d:60:b7:b5:86:0a:a8:7b:0c:2f:9e:ec:0a:be:1f:
                    eb:5f:55:a8:8d:4c:c1:6f:42:4b:12:94:08:0d:7c:
                    b6:c1:04:c5:ec:c4:ef:9e:75:4e:58:b8:9d:b4:b1:
                    e8:bc:eb:e1:96:f3:c6:bf:c8:b6:8a:5b:67:f7:78:
                    03:95:40:33:5b:e0:26:38:23:0c:90:bf:a7:35:67:
                    33:d3:ae:78:98:80:cd:d6:30:09:5d:55:65:7c:35:
                    6b:95:70:a6:0a:06:18:18:23:37:f8:1a:13:30:e7:
                    4c:ba:3d:00:d5:64:6c:98:84:b1:a5:85:51:6f:61:
                    05:c4:6d:83:15:b5:02:fb:82:6e:55:3a:e6:5e:0d:
                    18:8f:60:8f:79:12:4f:34:64:c3:78:90:f9:48:59:
                    e0:e4:e3:4a:82:e4:b0:ed:90:c0:c9:cf:7a:7d:63:
                    03:44:6b:10:6a:bc:a9:c7:98:ee:5d:1e:e1:0c:f1:
                    84:3f:99:b6:3e:39:89:e9:6f:4e:86:ff:ec:43:f6:
                    92:f8:ff:cb:08:3e:21:97:a5:e3:0d:a0:ab:30:ff:
                    f9:5a:79:e8:12:00:45:31:7e:80:46:3f:83:e4:e1:
                    ed:b7:7a:f9:11:f6:16:a2:16:4e:16:71:a4:0c:23:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:14:D1:B4:F7:F2:F6:95:CF:7A:E8:0D:F7:47:86:A6:33:0E:4E:8F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/63EBBF4EB02C11F1AB9EC3D93911F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.142.0/23
                IPv6:
                  2001:df7:7dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:a7:52:8d:74:37:17:28:e5:be:78:fd:07:1f:01:75:93:
         5c:ad:20:01:b4:90:7e:59:1a:df:9b:66:76:5b:6e:78:a5:6d:
         3a:65:e7:b7:f6:d6:7f:79:db:db:41:b6:bc:95:8a:fd:e3:12:
         eb:34:4c:75:62:85:34:54:2c:5e:88:10:e2:31:af:b4:3f:b5:
         4b:01:46:79:a1:88:9a:5a:9f:b9:da:92:23:a1:0e:a9:c8:51:
         be:15:4d:5a:bf:30:d5:24:a3:04:02:d2:c2:d8:fe:09:a4:53:
         6e:e0:b1:2f:67:af:4e:98:cc:0d:1f:1d:28:8f:1f:c8:42:db:
         a3:a9:b0:84:39:c7:1d:73:2a:74:6b:0b:56:1f:52:d1:bc:85:
         c6:46:cc:15:42:38:eb:d6:e9:4a:cd:05:60:e6:6b:db:d2:4d:
         29:ca:ce:13:9e:51:e3:ab:02:4f:28:06:b4:b4:af:f5:69:19:
         af:01:21:7d:b2:e8:47:4c:f8:c8:33:df:6e:fc:48:82:62:b8:
         c9:d7:a4:19:57:28:67:ae:22:18:d6:65:97:b7:f1:3f:5b:0d:
         a4:96:05:e3:8b:3d:3c:8a:71:80:f5:a3:ad:fb:ec:ec:3e:94:
         a6:5f:53:05:d3:c5:1d:0c:d1:28:fa:32:80:1f:9b:53:fe:73:
         1e:ee:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:03 2026 by rpki-client