Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/EDD96AAE7F4811F19E46568395A30FBC.roa
File:                     EDD96AAE7F4811F19E46568395A30FBC.roa (raw, json)
Hash identifier:          Wmt85iJENOVXXmg3SFuE0XKh364Rsjv2WardtpRUQfE=
Subject key identifier:   95:A9:CD:F9:5D:F1:B5:77:F2:A3:43:E2:71:05:21:70:E7:B1:F7:F2
Certificate issuer:       /CN=A91BF578/serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
Certificate serial:       02
Authority key identifier: 85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/EDD96AAE7F4811F19E46568395A30FBC.roa
Signing time:             Tue 14 Jul 2026 05:57:43 +0000
ROA not before:           Tue 14 Jul 2026 05:57:43 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153643
IP address blocks:        163.223.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:17:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF578, serialNumber=853ECB4F77CC2141DBA8DD18C12135C9D770FEE4
        Validity
            Not Before: Jul 14 05:57:43 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a55cfd7-e85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:d5:bd:2b:13:db:ca:9c:d1:de:2b:5c:ae:
                    c2:9f:18:3a:3b:d6:7c:9a:37:f3:6c:b1:2c:ba:22:
                    21:da:10:68:c5:ff:f9:df:b6:17:fc:a2:3b:ee:46:
                    ab:87:b8:c2:94:4d:3f:e0:55:40:55:de:58:79:52:
                    6f:36:29:fa:e0:15:4f:03:bf:19:71:5a:7b:c3:78:
                    2f:dd:23:ec:a7:85:a1:d2:6e:c1:89:fc:54:c0:a3:
                    63:1f:28:75:d7:96:3b:be:92:7a:d9:c7:c5:a5:1b:
                    c4:8b:bd:7e:39:d6:7d:13:5a:2c:bd:cb:d8:22:4d:
                    fb:6b:ec:84:19:f8:e8:4f:e7:a2:b1:ec:65:f5:98:
                    d0:86:6f:a0:05:b5:cc:4b:7b:31:02:75:a4:2c:c9:
                    2a:97:15:c0:fc:06:6c:78:eb:59:8b:36:f9:2d:d4:
                    e9:21:f2:f0:79:cc:48:46:66:09:93:81:3c:15:d4:
                    ee:60:5b:86:73:5e:d4:7c:9a:ed:a2:d9:1b:57:bc:
                    b4:dc:4a:8e:c8:ee:75:83:7d:73:48:36:69:af:79:
                    eb:02:3b:ca:57:09:bb:9b:f0:3f:8d:82:0b:67:ae:
                    e7:f7:81:6d:66:bd:80:ba:6f:8a:51:0b:cb:98:04:
                    8a:ee:6b:18:36:1c:5b:0a:6a:b7:9b:be:3a:84:8c:
                    a0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A9:CD:F9:5D:F1:B5:77:F2:A3:43:E2:71:05:21:70:E7:B1:F7:F2
            X509v3 Authority Key Identifier:
                keyid:85:3E:CB:4F:77:CC:21:41:DB:A8:DD:18:C1:21:35:C9:D7:70:FE:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/hT7LT3fMIUHbqN0YwSE1yddw_uQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hT7LT3fMIUHbqN0YwSE1yddw_uQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF578/A03BA2587F4811F1A3EA0E8195A30FBC/EDD96AAE7F4811F19E46568395A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.223.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:fa:f0:79:cf:db:2a:83:ad:7b:98:ad:0b:38:75:cd:92:6a:
         c0:f2:6c:fe:8c:fe:16:99:8e:8d:bc:34:e4:4f:d8:68:29:8f:
         44:10:7b:0a:13:07:9a:71:a0:08:7f:1b:64:52:00:56:5f:12:
         5e:1f:5c:01:70:43:97:63:37:0d:35:ec:1d:17:a6:0f:d8:1e:
         9f:0f:3c:92:1e:dc:b0:1b:c3:fd:f8:f6:e0:87:4f:c4:a3:e9:
         a5:5e:9e:68:72:60:60:a0:1d:87:6a:39:aa:db:5a:1d:65:0b:
         d4:96:7d:f5:fa:86:c7:f6:b3:f1:a3:f0:86:fa:06:0f:71:80:
         2a:0b:2e:21:88:92:f1:97:db:7c:95:73:26:82:2a:57:87:ad:
         09:62:31:0e:3f:17:8d:78:64:7d:f6:ae:41:0b:da:d7:0b:26:
         ea:ad:7e:3f:d8:e0:fa:b0:41:da:ad:42:f7:f9:77:03:93:76:
         61:7b:69:de:db:6e:6a:a5:81:c6:7d:57:46:e6:fc:b0:5a:df:
         58:dc:6e:d5:cf:66:5b:3a:b8:4c:e0:7f:b2:6c:ff:98:13:74:
         cf:03:58:c4:90:32:f0:2a:57:73:03:b9:da:e0:ee:9b:71:8b:
         3d:30:8b:04:68:78:b0:85:0a:a7:69:7d:05:e9:53:84:4b:71:
         dd:c8:ae:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:23:54 2026 by rpki-client