Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
File:                     D0D1D812FB0D11EFABB24730C4F9AE02.roa (raw, json)
Hash identifier:          oP4c8l+Vc1dkaRgS4DHGBOKSU9a5oL0gZPlLruKmYns=
Subject key identifier:   61:5D:07:9B:30:83:E5:9F:14:48:7B:61:02:7F:D0:46:1F:CB:DB:45
Certificate issuer:       /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial:       EC
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:37:36 +0000
ROA not before:           Fri 05 Jun 2026 07:37:36 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153669
IP address blocks:        163.223.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
                          rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:28:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
        Validity
            Not Before: Jun  5 07:37:36 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a227cc0-4152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:41:5a:ff:df:a8:3d:c5:1c:c2:1f:3c:c1:29:
                    a1:84:01:1c:71:db:88:0d:fa:73:2a:2b:f8:6c:77:
                    00:fa:c6:ac:e5:23:6e:d5:1f:5c:e9:41:4d:76:ab:
                    57:91:48:4d:8b:c8:82:c3:32:a5:86:84:82:b0:94:
                    70:f3:ba:2c:2b:fd:42:8b:e9:d4:7a:b3:eb:fd:c2:
                    cf:81:b2:b2:cd:83:18:e9:46:c2:54:f9:ea:27:25:
                    06:eb:dd:af:06:a2:a7:75:5d:32:74:99:08:5f:8a:
                    87:34:3f:b1:42:91:2a:e3:c7:98:1c:c1:d1:74:f3:
                    4f:eb:24:a9:97:75:7f:78:21:6f:27:c3:42:e4:6f:
                    69:29:2a:5d:7f:43:1f:19:8d:1e:07:46:3c:dd:b9:
                    82:81:4a:0a:49:8b:a1:fe:51:0b:bc:48:f5:dc:97:
                    32:e1:8c:1b:27:f4:ab:c8:f6:cd:ac:bf:b2:93:f1:
                    87:6e:0a:17:6d:1d:65:b8:40:2c:76:8d:cc:41:88:
                    0c:5f:9f:13:6a:29:2b:8b:5f:35:9e:68:8a:ce:e8:
                    7f:20:38:34:ff:0d:62:b8:0f:50:e2:21:e1:eb:4f:
                    ba:02:26:4f:98:89:c8:13:b7:55:41:f0:1e:cb:78:
                    0b:02:f7:4d:96:65:1c:c0:c9:5f:7d:18:da:92:bd:
                    2e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5D:07:9B:30:83:E5:9F:14:48:7B:61:02:7F:D0:46:1F:CB:DB:45
            X509v3 Authority Key Identifier:
                keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:6c:c8:92:c6:0e:a2:43:54:19:56:c4:97:bf:3e:52:f5:
         8f:e1:d0:99:35:ce:8c:28:16:09:3e:8b:7d:86:85:02:36:74:
         37:eb:14:6c:73:9b:a1:d9:65:f8:8d:b9:1b:21:8a:ca:17:e5:
         18:59:ae:29:6e:5c:f6:ca:c0:f0:dd:91:c2:63:48:64:31:e1:
         27:62:d5:14:ce:fd:2c:de:4b:55:7e:bf:b0:ed:a5:4b:d9:f5:
         8a:08:f6:58:7b:c5:6a:57:50:8d:c4:64:16:ea:4f:d9:42:11:
         74:95:6c:20:69:4f:57:a3:bc:f9:ca:b2:1b:c9:6b:06:ad:db:
         01:09:5f:06:6f:d6:3e:40:5d:5b:0f:95:1a:9b:09:56:a8:b5:
         09:6c:0c:13:88:b6:05:f2:b8:86:14:bc:bb:5a:f7:b0:49:19:
         cd:1c:86:d3:7d:fa:e4:9f:3d:19:ff:ab:0c:82:13:40:23:d4:
         e5:2f:e3:81:41:2c:54:97:c6:dd:d6:69:75:32:91:9a:14:db:
         5b:c7:6f:5b:ac:df:51:c8:7d:b2:6c:6b:61:41:b3:26:4c:1c:
         a7:0c:7e:0e:21:68:91:dd:b7:57:47:48:55:96:49:e3:2d:9b:
         79:96:3d:ee:78:2e:54:30:0c:c1:37:59:f0:ce:71:c0:2d:f3:
         39:06:4a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:51:57 2026 by rpki-client