Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/8601959679DF11F193D499DB65A30FBC.roa
File:                     8601959679DF11F193D499DB65A30FBC.roa (raw, json)
Hash identifier:          dJ72wAJA0nbSV+h9SeoXcj3siEq/Cclo9TYNDcphMSQ=
Subject key identifier:   06:A1:41:BC:7F:BF:0E:8A:8C:58:09:F0:0F:09:F7:21:FB:9E:2D:2D
Certificate issuer:       /CN=A918E023/serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
Certificate serial:       EF
Authority key identifier: B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/8601959679DF11F193D499DB65A30FBC.roa
Signing time:             Tue 07 Jul 2026 08:40:36 +0000
ROA not before:           Tue 07 Jul 2026 08:40:36 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135044
IP address blocks:        163.223.234.0/24 maxlen: 24
                          2001:df5:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl
                          rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E023, serialNumber=B9CD57E2FF4F58BB959A9541A31CFDF6697618B2
        Validity
            Not Before: Jul  7 08:40:36 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a4cbb84-7895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:6c:21:e0:65:5b:7e:83:c2:fb:d8:47:13:
                    bd:b9:03:65:7b:6c:bc:3c:bd:95:0a:55:57:11:e9:
                    f4:21:d2:2b:8c:9b:9f:1f:75:9f:be:76:4b:82:75:
                    83:e3:5c:73:5c:92:82:51:d1:45:51:c6:9f:51:17:
                    91:c1:8d:ac:27:6a:ba:45:cb:7b:9c:5e:3a:ba:5e:
                    fa:91:9f:84:93:95:b8:68:ad:51:f9:fa:ec:c4:ef:
                    03:68:fc:94:33:42:4a:89:ed:c2:4c:7d:63:c5:d4:
                    b6:ce:4a:a5:09:2c:b6:59:d0:da:40:28:13:f3:11:
                    21:2c:2f:06:0d:bd:68:d9:98:43:1d:39:93:6c:d1:
                    d6:90:16:64:bf:77:4f:45:cc:89:8a:90:de:1a:55:
                    66:8e:cb:9e:05:b1:07:fa:b3:cf:49:e4:10:18:ef:
                    7e:53:e1:05:d5:24:52:fc:6a:66:99:cf:8a:26:48:
                    16:af:3f:a9:d3:fa:92:fe:f8:9d:5b:fb:49:29:46:
                    a9:13:20:4b:d9:63:44:b2:93:70:d9:19:b9:ab:f6:
                    3f:2d:39:70:40:4d:83:cb:f1:f9:69:27:18:9e:00:
                    28:b5:81:41:98:35:c5:07:db:84:1f:29:42:90:99:
                    1d:91:7e:9f:00:91:9f:bd:82:dd:ef:f0:66:91:6c:
                    88:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:41:BC:7F:BF:0E:8A:8C:58:09:F0:0F:09:F7:21:FB:9E:2D:2D
            X509v3 Authority Key Identifier:
                keyid:B9:CD:57:E2:FF:4F:58:BB:95:9A:95:41:A3:1C:FD:F6:69:76:18:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/uc1X4v9PWLuVmpVBoxz99ml2GLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uc1X4v9PWLuVmpVBoxz99ml2GLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E023/A654FEF0111C11F0B15AF970C4F9AE02/8601959679DF11F193D499DB65A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.234.0/24
                IPv6:
                  2001:df5:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:66:4f:ce:2f:a2:b0:1a:e3:60:3e:3c:24:cd:bd:bf:e9:38:
         61:fc:41:43:55:df:17:6b:c1:fe:02:2b:ed:f0:3e:a9:f9:b2:
         b2:9b:31:ba:4e:8a:d2:14:d9:87:18:c8:07:ca:a3:88:c7:61:
         7c:3b:c9:70:5c:19:9a:37:07:03:a1:28:9f:05:3f:24:3b:dd:
         c2:62:2a:91:74:fb:9e:4e:8c:da:fc:35:54:e9:a7:c1:54:64:
         55:82:81:d8:4f:e5:ef:54:24:05:b3:ac:7b:4b:09:4b:36:69:
         bd:58:b6:bf:47:ef:59:6d:48:ec:7f:a1:85:cb:07:12:1b:f2:
         65:fa:4f:1c:21:7e:35:21:25:99:f2:ba:0a:26:b2:31:85:f5:
         8b:3e:2f:bf:51:a9:53:e4:85:7a:36:4f:b4:10:c4:55:b8:a1:
         40:2e:b2:0c:42:df:ed:97:d4:2f:e7:c3:e1:d2:27:38:4a:3e:
         30:71:ae:bc:89:1d:6f:59:bd:a8:ef:41:3e:bb:57:fa:7f:7b:
         77:af:80:50:ee:4e:a5:0c:d8:75:be:1a:06:62:d1:35:83:92:
         38:03:86:d0:c0:06:d7:77:62:9e:bb:f9:3f:16:fb:90:3a:d1:
         61:81:67:d0:04:47:6a:21:e1:37:56:8d:30:05:e9:ae:6f:3c:
         47:04:80:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:10 2026 by rpki-client