Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa
File:                     AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa (raw, json)
Hash identifier:          4xlm+4cjqsIYvlYtLdT0vdOhZBUEzgGYdXITfmNyAMg=
Subject key identifier:   9B:0D:29:81:DE:EA:3A:95:8A:7B:A5:87:E4:53:5F:77:83:21:4B:8D
Certificate issuer:       /CN=A914DC5D/serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
Certificate serial:       0A1F
Authority key identifier: 20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa
Signing time:             Tue 16 Jun 2026 21:25:15 +0000
ROA not before:           Tue 16 Jun 2026 21:25:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23644
IP address blocks:        203.151.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl
                          rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2591 (0xa1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DC5D, serialNumber=20F2531A7BA8212D2BB0900D576372D33F846928
        Validity
            Not Before: Jun 16 21:25:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a31bf3b-7fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:79:82:c0:a0:74:6d:94:5b:95:0d:6a:8d:
                    97:ea:4b:f7:9d:ba:a3:e2:87:cb:6e:94:4c:7d:d5:
                    76:59:95:db:7a:ea:d4:aa:a2:80:d2:41:3c:b8:1d:
                    c4:db:70:f9:99:5b:f0:61:38:1b:89:aa:12:73:3c:
                    b7:10:dc:8e:7e:44:66:27:82:e2:35:3b:bc:15:1a:
                    df:eb:b1:8e:0b:45:c8:93:6c:37:4f:80:5d:45:fa:
                    49:e0:0a:bd:cd:1e:e1:8c:41:c2:b7:8c:95:10:6c:
                    52:86:37:13:3a:d9:52:d4:6f:5b:e4:ec:dd:b6:2f:
                    0c:af:f0:ab:83:88:f1:5d:67:8b:a3:5e:c8:63:97:
                    9a:05:0f:e2:1b:23:72:54:10:a6:27:46:11:e3:fc:
                    8a:4b:37:fd:8d:b0:d6:0e:0b:9d:80:5e:d7:3c:44:
                    7d:1a:30:0a:c1:26:42:c3:1f:94:13:0b:34:6c:3b:
                    55:2f:c8:4b:4b:e6:ac:70:c5:20:b7:3d:a5:19:78:
                    35:52:22:55:92:94:d2:c7:0f:bb:12:7f:2b:6e:28:
                    d5:7c:5d:ca:58:e9:16:ac:d8:43:64:ef:7f:d0:fb:
                    97:1b:b8:39:02:01:f2:9a:9a:37:dd:48:1e:34:de:
                    d5:de:da:65:7f:21:c5:ab:b8:44:b5:88:08:9d:fb:
                    c4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:29:81:DE:EA:3A:95:8A:7B:A5:87:E4:53:5F:77:83:21:4B:8D
            X509v3 Authority Key Identifier:
                keyid:20:F2:53:1A:7B:A8:21:2D:2B:B0:90:0D:57:63:72:D3:3F:84:69:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/IPJTGnuoIS0rsJANV2Ny0z-EaSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IPJTGnuoIS0rsJANV2Ny0z-EaSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DC5D/39E7146C2A3311EB929DC07CC4F9AE02/AEF56D7C2A4111EBA1B1BB3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.151.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:6a:ce:10:f9:97:d9:4d:61:52:5b:f4:ff:6a:d1:1e:0a:cd:
         14:ab:38:20:b2:21:1d:9b:f1:6d:22:ba:e0:05:31:70:1c:a1:
         d0:36:7b:92:9b:f4:9d:8b:35:50:b2:ee:f9:95:17:db:a1:97:
         aa:4b:f1:3c:26:57:d3:4d:9c:88:96:21:fa:13:57:35:96:54:
         9b:f1:dd:2e:b6:b1:fb:84:5a:ca:23:e7:0d:96:bf:aa:8c:12:
         f5:64:b4:c8:fd:1e:a0:c7:7d:27:15:4a:b1:ef:dd:ac:8f:c3:
         c4:14:19:11:f8:59:3a:3f:35:20:92:9b:09:04:35:cf:34:db:
         9e:18:0a:e5:0a:67:a9:c4:75:de:9c:1b:72:6c:52:c8:ce:92:
         91:3a:3e:3d:ed:8c:46:15:76:75:24:e5:25:eb:aa:56:5f:e3:
         dc:14:be:c1:14:a9:28:c6:8d:89:7f:1c:b2:05:3c:d7:dc:c0:
         61:0b:0a:61:39:91:aa:53:ef:8d:27:d1:eb:a5:f2:6f:c2:51:
         17:35:c1:e3:4b:c3:52:32:f7:c4:51:97:98:46:96:12:9d:7f:
         05:24:62:50:3c:3e:33:a9:45:9d:af:ba:de:2c:9d:30:2a:f6:
         c3:55:39:a5:20:65:7b:23:37:df:af:cb:0b:ac:f7:f8:d4:46:
         1d:60:03:e1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NERDNUQxMTAvBgNVBAUTKDIwRjI1MzFBN0JBODIxMkQyQkIwOTAwRDU3NjM3MkQz
M0Y4NDY5MjgwHhcNMjYwNjE2MjEyNTE1WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTMxYmYzYi03ZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAneN5gsCgdG2UW5UNao2X6kv3nbqj4ofLbpRMfdV2WZXbeurUqqKA0kE8uB3E
23D5mVvwYTgbiaoSczy3ENyOfkRmJ4LiNTu8FRrf67GOC0XIk2w3T4BdRfpJ4Aq9
zR7hjEHCt4yVEGxShjcTOtlS1G9b5Ozdti8Mr/Crg4jxXWeLo17IY5eaBQ/iGyNy
VBCmJ0YR4/yKSzf9jbDWDgudgF7XPER9GjAKwSZCwx+UEws0bDtVL8hLS+ascMUg
tz2lGXg1UiJVkpTSxw+7En8rbijVfF3KWOkWrNhDZO9/0PuXG7g5AgHympo33Uge
NN7V3tplfyHFq7hEtYgInfvE7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJsNKYHe
6jqVinulh+RTX3eDIUuNMB8GA1UdIwQYMBaAFCDyUxp7qCEtK7CQDVdjctM/hGko
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REM1RC8zOUU3MTQ2QzJB
MzMxMUVCOTI5REMwN0NDNEY5QUUwMi9JUEpUR251b0lTMHJzSkFOVjJOeTB6LUVh
U2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lQSlRHbnVvSVMwcnNKQU5WMk55MHotRWFTZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NERDNUQvMzlFNzE0NkMyQTMzMTFFQjkyOURDMDdDQzRGOUFFMDIvQUVGNTZEN0My
QTQxMTFFQkExQjFCQjNEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAy5cSMA0GCSqGSIb3DQEBCwUAA4IBAQCtas4Q+ZfZTWFSW/T/atEe
Cs0UqzggsiEdm/FtIrrgBTFwHKHQNnuSm/SdizVQsu75lRfboZeqS/E8JlfTTZyI
liH6E1c1llSb8d0utrH7hFrKI+cNlr+qjBL1ZLTI/R6gx30nFUqx792sj8PEFBkR
+Fk6PzUgkpsJBDXPNNueGArlCmepxHXenBtybFLIzpKROj497YxGFXZ1JOUl66pW
X+PcFL7BFKkoxo2JfxyyBTzX3MBhCwphOZGqU++NJ9HrpfJvwlEXNcHjS8NSMvfE
UZeYRpYSnX8FJGJQPD4zqUWdr7reLJ0wKvbDVTmlIGV7Izffr8sLrPf41EYdYAPh
-----END CERTIFICATE-----
Generated at Wed Jun 17 20:25:08 2026 by rpki-client