Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83BF2C6AB5A011F1A5230F2B3411F970.roa
File:                     83BF2C6AB5A011F1A5230F2B3411F970.roa (raw, json)
Hash identifier:          8OogqzksmYs9Jp160iWecCphmsvA4XDXDp9p6I7tL90=
Subject key identifier:   5D:7B:80:48:90:6B:7C:54:B5:6E:CC:77:A0:94:83:FB:B6:C7:1E:B6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FD15
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83BF2C6AB5A011F1A5230F2B3411F970.roa
Signing time:             Tue 22 Sep 2026 07:20:23 +0000
ROA not before:           Tue 22 Sep 2026 07:20:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154935
IP address blocks:        163.52.208.0/23 maxlen: 24
                          2001:df7:8b40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 Oct 2026 05:32:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64789 (0xfd15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 22 07:20:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ab22c37-0f23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:94:dd:a6:03:a0:a3:64:bf:73:55:92:e0:c7:
                    dd:7f:e8:e7:5e:84:46:96:ec:cc:94:16:04:4a:c8:
                    09:d1:db:f8:0f:e2:a2:97:d1:28:07:c7:d8:05:93:
                    ea:ba:2f:3c:0c:2a:46:33:24:be:88:f7:db:3e:41:
                    b5:9e:b2:12:05:2e:43:05:21:f5:bf:59:e4:70:bf:
                    ec:eb:68:aa:6a:87:6e:d6:85:c1:82:ea:9a:81:4e:
                    b8:5c:d3:4e:02:6a:e9:85:81:9f:04:4d:b5:7d:7c:
                    9c:e8:64:13:80:1d:97:e6:60:f5:cc:5b:93:04:d0:
                    7d:72:1f:32:de:06:72:26:87:e0:87:ee:f2:c3:31:
                    31:4d:00:03:8d:97:24:03:d2:e7:63:e7:94:e9:41:
                    4c:16:72:13:5a:28:ab:68:73:ef:ab:35:49:11:db:
                    b6:5a:39:d4:b4:ad:8f:36:6b:5c:29:ae:66:ce:b4:
                    e3:39:b4:5d:97:6b:d8:ed:8b:66:bd:77:d8:1b:6b:
                    7d:10:dd:07:6d:1b:d7:3b:f2:1b:db:0b:94:bd:2e:
                    9f:dc:64:46:22:1a:57:e7:ef:5a:6e:21:8d:75:b9:
                    34:89:27:92:5a:33:10:96:b7:88:1e:78:80:f8:75:
                    ff:73:a3:21:cd:ee:27:7c:b9:87:15:34:97:81:2e:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:7B:80:48:90:6B:7C:54:B5:6E:CC:77:A0:94:83:FB:B6:C7:1E:B6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83BF2C6AB5A011F1A5230F2B3411F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.52.208.0/23
                IPv6:
                  2001:df7:8b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:e3:bb:78:78:5b:e5:3f:65:85:f2:d1:fc:3b:32:1b:63:88:
         d5:23:73:5e:0c:d1:94:1f:f9:f2:a4:8f:68:58:a4:5a:c4:8b:
         44:65:0f:95:28:c7:c9:ee:4c:df:2d:a6:d6:be:7f:07:ab:ef:
         20:fd:12:db:a4:2f:81:9c:4d:87:e0:dc:6b:5d:18:33:85:00:
         6f:94:64:d3:17:a8:ef:2a:c0:47:1a:f0:64:7d:ff:9d:b5:1d:
         25:b8:9b:53:55:54:27:66:5f:1d:0c:eb:63:30:83:1d:66:0c:
         19:fa:7c:f7:17:49:9b:05:19:ea:af:3d:c2:c8:84:34:fd:00:
         3e:a7:ac:5c:56:29:dd:78:19:58:46:64:be:27:7b:cc:15:59:
         7a:14:7e:9f:47:82:2c:ee:6a:d3:39:23:ce:11:00:88:5d:44:
         44:d3:9c:17:98:30:ca:ca:e8:f5:4c:0f:6f:a8:36:f8:4d:e1:
         2c:d7:1f:4a:6b:5d:59:80:3a:e9:64:0d:4c:a1:66:3e:11:dc:
         76:8e:5e:27:00:6d:03:6f:34:0b:d6:62:37:d6:0f:8e:3e:9e:
         61:47:d5:14:6b:17:3b:56:22:32:99:29:cd:b6:54:ab:f8:f7:
         49:90:b8:35:52:34:eb:1e:ab:c0:0d:2e:6c:91:f6:12:d8:7f:
         9f:4b:9c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 11:10:51 2026 by rpki-client