Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa
File:                     A69DB682FFC811EF92D78053C4F9AE02.roa (raw, json)
Hash identifier:          5VI1H88BzxTnxBQvtey6n8ChfS9kIriaUk3dlHDg/wE=
Subject key identifier:   D5:79:E3:F5:81:57:F2:8B:73:C6:63:44:B5:3C:A2:6E:B1:93:6B:6F
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D818
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:53:25 +0000
ROA not before:           Thu 08 May 2025 16:28:27 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152502
IP address blocks:        163.223.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55320 (0xd818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:28:27 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c365-faf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c1:02:40:66:5e:84:d4:2b:8e:88:b4:13:62:
                    7f:2d:7d:34:96:1f:2b:34:aa:74:28:06:21:c3:17:
                    84:e2:74:82:c5:30:53:8e:83:4a:be:c1:a6:93:47:
                    42:ba:78:87:01:04:fa:bb:7c:1a:a2:7f:21:c4:f0:
                    3e:2a:6c:d6:80:83:4d:9a:28:05:0b:db:ad:98:dd:
                    b1:ca:f0:7a:9c:33:65:a2:a0:c6:36:21:15:03:d4:
                    99:ec:f7:a3:3c:87:85:7f:ec:8e:18:10:23:3f:dc:
                    ba:26:ef:2a:71:02:ab:80:4b:e0:45:84:66:6a:93:
                    a9:f0:df:e4:10:bf:a8:23:c3:6e:55:43:ca:d6:b2:
                    25:ef:8d:6d:b9:e7:81:6b:04:62:e3:6f:91:3d:9f:
                    46:ab:59:fb:50:9e:a8:f9:d5:0a:9f:1c:da:af:32:
                    d8:a8:c1:d0:ad:1d:92:76:d7:23:b4:54:aa:eb:cc:
                    c5:5f:aa:d3:48:89:b5:63:36:bb:4c:51:f2:c4:d7:
                    85:e3:57:64:43:df:61:67:ee:68:d2:bb:a3:a5:aa:
                    5d:24:07:f5:c6:d9:83:69:d8:d7:e7:8d:87:af:bd:
                    7c:5d:40:77:2d:10:15:02:83:8e:f0:0b:47:28:87:
                    24:b0:10:69:cc:bc:7d:cb:96:85:4e:cb:d1:61:f6:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:79:E3:F5:81:57:F2:8B:73:C6:63:44:B5:3C:A2:6E:B1:93:6B:6F
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A69DB682FFC811EF92D78053C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:99:b6:4e:f0:5f:c5:24:5b:31:1c:5e:25:75:6f:ff:35:2f:
         a1:5c:00:86:68:21:7a:76:04:10:0e:42:27:70:99:ec:42:e0:
         ff:29:c0:48:99:ff:53:96:15:13:a2:c2:22:3d:be:bf:38:81:
         f0:d6:8a:3a:f5:1a:f0:21:38:b7:da:0e:ee:0d:cd:a2:a1:40:
         e1:c2:ac:e4:49:2f:a8:1f:39:1e:71:9b:86:2b:2d:64:ff:42:
         e1:a2:48:fe:04:b7:59:0c:c3:33:82:a1:06:5b:28:d4:ec:55:
         26:85:4a:d2:2a:d4:07:bb:a3:33:39:6a:0e:1b:df:b3:a8:e1:
         1f:4c:68:6d:a8:ba:42:ad:dc:b2:05:94:7f:66:96:7b:44:e7:
         e4:11:70:d7:4e:70:9a:f0:53:00:33:d2:a7:be:a5:84:de:5c:
         19:a1:04:db:fb:90:14:d2:43:ef:6b:92:a9:b9:fa:5d:ec:83:
         45:b6:a8:45:0e:f1:7f:4d:14:e7:f9:8a:34:52:d0:df:d4:51:
         45:cd:11:1f:f3:86:1f:53:35:46:dc:35:7c:1b:59:09:f4:e0:
         36:d5:5e:3b:b7:bc:bc:b5:42:63:0d:5d:d2:98:0b:6e:79:ca:
         eb:06:9a:e9:2f:59:50:87:08:78:f0:91:95:15:ed:55:7d:54:
         6a:e5:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:45 2026 by rpki-client