Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47A58228449511F1802763B9AA833773.roa
File:                     47A58228449511F1802763B9AA833773.roa (raw, json)
Hash identifier:          6NBieWNcYH2p5ym+2Gn3KYRk6UIam9/x2v5e6mAOQYA=
Subject key identifier:   72:B7:C6:C8:00:E9:25:3C:64:17:AB:2E:BE:08:CC:DD:CC:D8:0E:69
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DFA5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47A58228449511F1802763B9AA833773.roa
Signing time:             Thu 30 Apr 2026 13:05:37 +0000
ROA not before:           Thu 30 Apr 2026 13:05:37 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154568
IP address blocks:        163.128.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 11:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57253 (0xdfa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Apr 30 13:05:37 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f353a1-d31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:3d:04:62:14:a8:ff:09:d8:79:8e:67:86:
                    39:65:39:69:1d:79:96:49:85:6b:8c:a8:21:bd:3c:
                    25:a9:b1:cc:f1:09:4b:ed:f5:61:fc:9c:e0:ad:dc:
                    03:fb:7f:5f:34:db:20:01:b6:94:f8:40:3a:b4:9f:
                    f2:6d:ff:34:23:96:aa:70:d2:68:52:fa:a5:40:9a:
                    d3:a1:38:6c:16:8a:aa:39:02:30:9b:bb:f1:73:fe:
                    d3:25:a4:18:ea:69:c1:24:ce:eb:fc:a3:6d:4f:52:
                    03:d9:de:f9:4c:d6:b2:fc:bf:e1:f5:54:1f:7b:00:
                    dd:8c:c3:83:34:3f:03:c5:4e:b8:b0:1b:e9:7a:10:
                    b3:87:e2:da:f9:2a:8e:0a:92:2f:ce:65:e1:b2:1f:
                    bf:42:79:cf:74:1f:92:89:95:f0:bf:f3:7d:4a:21:
                    3a:ce:37:14:1b:8c:82:ef:25:10:d3:9d:bd:2b:21:
                    64:75:af:46:9d:6f:2e:8c:04:21:b5:91:30:f3:3f:
                    72:2a:c3:0f:51:97:9f:1d:e0:9d:f8:73:2b:8a:cf:
                    e6:67:cb:6a:f7:d5:85:16:e9:e5:c3:f0:e0:68:47:
                    ba:59:d7:50:5a:1f:04:61:57:23:9f:b9:d3:be:99:
                    ca:94:44:0a:1a:ca:a0:59:2d:c4:c5:13:c9:d1:e7:
                    3f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B7:C6:C8:00:E9:25:3C:64:17:AB:2E:BE:08:CC:DD:CC:D8:0E:69
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/47A58228449511F1802763B9AA833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a6:14:fc:d8:09:85:de:37:5a:d6:6c:f9:82:ef:32:d7:ef:
         ea:a4:09:e2:4d:81:24:86:ea:e6:ad:ea:d8:20:2e:a3:82:8c:
         c7:42:32:c2:92:36:0b:0d:46:b6:3d:fd:33:5a:c8:fb:0f:9f:
         9d:f7:7e:dd:f7:1c:56:1d:47:85:e6:c3:21:22:06:f8:ed:c8:
         67:4b:b8:86:2f:29:39:3b:fe:86:cc:a4:7a:4d:fe:c6:c1:29:
         67:e7:43:a9:40:00:bc:ca:0b:1a:6d:92:2b:c5:99:ee:6c:87:
         a8:d3:65:ef:2b:88:9b:5f:99:5f:b6:0d:9b:79:3b:90:b4:3f:
         3e:da:4f:ea:1c:52:e2:d3:d4:36:d7:27:e7:bc:30:21:2e:6b:
         90:a9:34:b6:e0:76:74:48:2a:2b:f6:f1:43:fc:1d:be:05:76:
         20:f8:d7:b5:78:b7:8f:d5:80:e5:ec:b9:af:93:0f:b7:3d:e7:
         25:d6:77:e9:16:96:60:f9:30:c9:1d:3d:02:80:0f:26:e3:54:
         48:f2:9c:d3:ac:b7:00:4f:dd:76:a8:bc:d8:08:8a:88:dc:cc:
         af:0b:60:36:4d:1b:de:0d:13:cb:35:50:70:99:6a:0e:ed:55:
         74:8a:61:1e:af:31:1b:4c:04:f7:15:ee:a1:2a:8a:a4:9b:f1:
         5e:d0:e5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:35:53 2026 by rpki-client