Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
File:                     D0D1D812FB0D11EFABB24730C4F9AE02.roa (raw, json)
Hash identifier:          gjmWESjalzP1QqYOn23fGwUgWwKzWh8l/34qUOiA6Ms=
Subject key identifier:   09:8D:48:12:C2:60:22:6C:6B:1A:25:5A:39:56:F1:CA:76:4A:73:30
Certificate issuer:       /CN=A918F961/serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
Certificate serial:       011D
Authority key identifier: 4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa
Signing time:             Thu 03 Sep 2026 06:55:54 +0000
ROA not before:           Thu 03 Sep 2026 06:55:54 +0000
ROA not after:            Fri 01 Jan 2027 00:00:00 +0000
asID:                     153669
IP address blocks:        163.223.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl
                          rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 05:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918F961, serialNumber=4BEEC74F476FB171DC8EDAF9491D6CC27BF80E2F
        Validity
            Not Before: Sep  3 06:55:54 2026 GMT
            Not After : Jan  1 00:00:00 2027 GMT
        Subject: CN=6a9919fa-b9d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:58:a0:f3:9e:c9:17:01:a5:95:4d:57:83:f8:
                    3a:77:ac:af:99:15:7d:39:c8:6f:80:df:d6:dc:12:
                    da:63:0a:93:33:7b:61:47:0e:21:23:3c:03:63:00:
                    40:68:c3:0e:88:4b:54:36:6d:f2:af:03:07:c4:bd:
                    ca:ff:56:9d:ff:6e:62:c1:8d:75:07:e8:90:af:12:
                    6d:ad:37:3d:90:80:ff:a5:d7:fb:e7:bc:1c:66:01:
                    6c:41:17:26:8e:3d:62:44:ab:2f:c1:79:86:a9:fc:
                    c6:28:65:24:67:37:67:3c:0b:83:2e:bb:64:20:a4:
                    5a:76:a4:b5:0f:5f:82:bb:f6:c4:12:b9:13:4f:8f:
                    5b:10:97:03:35:03:92:1f:b8:39:0a:7b:a8:4a:52:
                    9a:aa:4b:fe:b4:96:50:46:aa:78:2a:4a:0d:c7:53:
                    c9:8b:e8:a4:6d:9c:7e:61:88:bf:51:1d:ab:84:b3:
                    2d:e1:ef:9b:e8:e9:04:d1:7c:33:7f:9a:00:9a:27:
                    92:a5:0c:c6:82:82:23:ac:cb:2a:66:5f:1e:bd:0b:
                    1c:ae:3d:b9:98:9f:a5:26:6e:6b:c9:47:c2:81:35:
                    a7:b1:dc:eb:ea:63:60:27:97:42:2d:72:0e:ae:bc:
                    39:9a:14:05:09:ae:ce:c4:44:29:12:c0:46:1f:c0:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8D:48:12:C2:60:22:6C:6B:1A:25:5A:39:56:F1:CA:76:4A:73:30
            X509v3 Authority Key Identifier:
                keyid:4B:EE:C7:4F:47:6F:B1:71:DC:8E:DA:F9:49:1D:6C:C2:7B:F8:0E:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/S-7HT0dvsXHcjtr5SR1swnv4Di8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-7HT0dvsXHcjtr5SR1swnv4Di8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F961/05B21B10FB0D11EFB2464327C4F9AE02/D0D1D812FB0D11EFABB24730C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:52:58:81:99:42:36:a8:86:aa:52:71:55:9e:ef:80:9d:4c:
         8f:90:6e:5e:09:59:b8:a9:22:ab:d3:35:70:cb:9e:17:43:61:
         81:93:02:c1:63:6a:b5:2b:fb:55:fa:7e:87:64:1f:fe:19:af:
         df:cb:f0:12:25:e6:b2:0b:c7:9f:93:cf:12:73:f3:54:03:d0:
         89:97:ca:ef:7d:0b:66:ea:45:9c:aa:ff:df:bd:92:c1:6d:31:
         14:a0:b6:f7:15:27:37:03:75:17:9a:1a:90:20:10:6a:85:c0:
         5c:17:b8:ac:94:da:32:a9:83:8a:da:18:c8:8d:c4:9f:5d:10:
         3e:9b:92:a8:78:ca:ba:21:6f:a2:7f:0a:e0:3d:fd:67:59:95:
         4b:39:d9:39:cb:7b:36:c4:93:55:31:f5:47:55:02:9e:c7:4f:
         57:f8:27:11:2d:9f:27:a2:d6:00:fa:29:22:b7:4f:b2:e2:55:
         94:98:3b:6b:6c:39:90:5f:00:81:a9:c2:6b:32:fe:e5:2c:7a:
         4e:98:35:d9:2a:4d:c4:76:b2:ac:36:a2:7e:ac:9b:6c:51:a7:
         7a:cc:3b:10:f2:52:10:24:6c:4d:54:a7:6c:14:fe:26:a1:2d:
         f1:e7:b2:b2:bd:9f:78:3f:da:7c:7d:25:4f:47:92:ba:98:f0:
         14:9e:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:43:27 2026 by rpki-client