Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/7B8341E0A27611F1B22095DC6711F970.roa
File:                     7B8341E0A27611F1B22095DC6711F970.roa (raw, json)
Hash identifier:          W2uLFVg9cyT3g5mEYwOqfVSyGEEYZ3YApRYxjYpxZIY=
Subject key identifier:   72:03:C6:04:C7:70:29:D4:42:4B:F8:0D:16:CA:AC:66:63:73:9D:F1
Certificate issuer:       /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial:       0C70
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/7B8341E0A27611F1B22095DC6711F970.roa
Signing time:             Fri 28 Aug 2026 00:21:59 +0000
ROA not before:           Fri 28 Aug 2026 00:21:59 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     219075
IP address blocks:        61.18.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
                          rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 18:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3184 (0xc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
        Validity
            Not Before: Aug 28 00:21:59 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a90d4a7-9f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ea:cf:ad:12:b6:49:65:cb:96:3e:ed:d4:19:
                    56:a6:e1:01:77:4c:56:69:e2:23:12:c5:40:6e:97:
                    15:63:59:20:e1:e8:32:64:7f:04:57:54:83:8e:95:
                    97:cc:84:e3:02:16:c3:39:64:b8:84:de:9f:1c:1c:
                    64:96:cc:2f:50:ae:29:62:54:af:aa:a3:df:3f:d8:
                    bd:48:34:18:26:69:d0:61:5a:27:88:ee:88:d9:4b:
                    a9:4c:4d:65:74:2a:49:aa:69:a1:a8:54:fb:cd:9f:
                    d7:de:07:a9:79:67:4f:cb:fc:ab:e9:e6:5e:15:e6:
                    50:c0:cf:32:ae:96:11:c3:56:63:c9:0a:32:9a:05:
                    83:66:3a:c2:0c:86:5e:6e:51:1e:d3:c5:23:6b:86:
                    0e:3f:d9:f3:f3:9e:2e:18:2b:c0:bd:11:11:59:17:
                    62:7a:ad:1d:38:73:b5:b3:2e:9c:44:8f:99:ec:9e:
                    15:21:e5:a0:8b:d2:20:3d:ca:dd:16:c3:56:02:92:
                    ca:98:15:30:da:99:12:7a:e8:c3:40:37:6d:87:6f:
                    7c:d7:2a:3c:79:27:6f:ef:3a:ad:cb:76:b0:f5:83:
                    c3:c7:81:15:86:1f:c2:e5:19:af:ad:79:b4:2c:d0:
                    bf:78:cb:07:69:77:3b:87:ee:19:99:53:c7:cd:a2:
                    34:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:03:C6:04:C7:70:29:D4:42:4B:F8:0D:16:CA:AC:66:63:73:9D:F1
            X509v3 Authority Key Identifier:
                keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/7B8341E0A27611F1B22095DC6711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.18.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:11:f6:af:47:7e:af:70:c4:ea:29:9f:b4:3b:39:4d:6a:cb:
         f8:0c:6f:d1:83:3d:dc:34:04:2f:42:43:ad:f1:51:b9:a3:bb:
         6d:7d:20:e2:9b:5d:d9:4a:76:5c:81:18:73:a4:aa:65:d4:5b:
         f4:1b:67:4f:20:ca:3e:b8:ec:9c:e3:6c:99:c0:a3:b4:5d:ed:
         2e:e1:da:e3:4b:df:f1:86:ca:74:1a:c5:7b:54:77:e9:15:6f:
         b9:dc:b5:6f:95:1b:4c:84:33:66:1f:e7:03:44:70:39:9e:6a:
         bb:46:fe:db:17:4b:10:b8:c0:98:ee:83:c2:4a:9b:ba:54:5b:
         90:3f:97:cb:e3:56:d5:81:02:43:8b:ba:03:ed:70:66:e5:29:
         bb:3c:d5:52:3b:d4:12:87:53:78:2e:3d:13:ee:7a:f2:28:4f:
         ef:d2:48:87:b3:c0:4b:0e:d4:d6:4c:61:54:01:0c:35:71:c0:
         13:3a:77:6c:2b:e3:c0:1e:f0:c4:db:f8:16:e4:bf:b8:c4:ad:
         24:31:1d:6c:44:b4:5f:02:87:14:e2:74:73:b8:70:23:d5:96:
         04:21:ce:7a:31:db:e8:d4:83:9c:e3:7d:0c:54:f8:07:81:fd:
         e1:02:4e:47:5b:45:93:5b:f6:a3:28:1b:a6:8c:3e:ea:87:c9:
         f4:70:d4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 21:54:28 2026 by rpki-client