Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
File:                     6C5BE410BD9F11EE963C753BC4F9AE02.roa (raw, json)
Hash identifier:          MGtVx11HokReybIJaW43xGqirmSnPfw9cAmc88rn5e4=
Subject key identifier:   E7:E0:C8:8F:4F:F5:67:7D:AE:E7:46:97:68:60:35:51:19:DF:17:54
Certificate issuer:       /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial:       1BA2
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
Signing time:             Fri 08 May 2026 16:19:43 +0000
ROA not before:           Fri 08 May 2026 16:19:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     65350
IP address blocks:        202.181.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
                          rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7074 (0x1ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
        Validity
            Not Before: May  8 16:19:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe0d1e-e003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:7d:ce:18:24:15:9d:a4:fe:59:e3:4b:61:
                    de:a5:02:97:57:c8:82:fd:3c:0e:67:c0:45:4a:c7:
                    9d:4c:e6:83:20:f8:6b:fd:35:e7:2d:4f:a5:3c:99:
                    5c:14:8a:8b:1d:ee:a0:fb:54:c7:66:32:e3:6e:60:
                    47:0b:1c:bc:70:04:4f:e8:b0:27:8e:20:87:37:5e:
                    95:f9:f6:ce:f2:7d:9c:25:2c:e5:65:34:2b:cc:c3:
                    ef:5e:43:2f:2d:71:e1:57:08:61:fb:f6:67:97:96:
                    2e:d2:48:52:fc:66:ab:34:2c:67:db:ac:93:e9:58:
                    f8:63:d8:95:40:ea:d5:43:1b:82:95:f8:e6:38:b3:
                    95:c6:85:fb:a9:5c:35:8f:3b:5b:b1:a5:e3:87:0f:
                    36:9d:cc:7c:c8:f5:85:3c:97:19:4c:44:77:4a:4a:
                    48:0f:17:59:8b:b5:11:e8:76:df:01:b5:3d:52:56:
                    f7:8f:26:4d:54:e2:c8:ba:d0:80:66:1f:0a:ec:d4:
                    28:cd:3a:22:bd:47:09:00:c8:6a:a7:02:85:26:a1:
                    f8:48:64:a1:28:fc:d2:20:57:73:73:78:7a:0c:99:
                    25:d6:c8:2b:e1:26:50:0a:5a:b3:55:34:be:12:ab:
                    b1:cf:1c:e4:c6:7e:ea:b3:5f:ee:1d:93:bd:bf:b2:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E0:C8:8F:4F:F5:67:7D:AE:E7:46:97:68:60:35:51:19:DF:17:54
            X509v3 Authority Key Identifier:
                keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:76:7c:1e:ce:4f:b8:1b:6d:0f:3e:ac:a1:c2:d8:64:80:36:
         f5:7d:99:50:ee:d4:7c:6b:f7:09:aa:e8:7a:cd:d9:a1:b2:b6:
         82:24:7e:f1:31:fa:bb:ad:4e:5e:b6:92:8d:a8:ef:c2:fe:7d:
         03:93:78:db:99:08:3a:e0:c0:7d:dc:db:e5:9e:dc:12:40:77:
         65:92:61:a5:a5:46:e3:9f:64:8e:1d:af:97:9e:7f:fb:ad:94:
         a4:3f:3b:79:72:4d:ab:0b:0c:fc:4c:e6:c1:96:b8:13:b8:2b:
         6c:31:a2:40:eb:44:32:61:56:42:d8:7e:c6:0b:ae:d5:b0:09:
         fc:a7:09:bf:47:d1:f7:15:15:02:ab:66:db:c8:1e:6c:b6:ad:
         45:14:2f:b2:3e:8d:6c:62:be:fd:7d:c0:41:38:68:8f:5f:dc:
         55:a9:5a:e9:a0:3f:89:a7:54:2a:a6:68:a5:9d:1a:1f:0c:a8:
         70:9c:48:55:3a:e6:c0:8d:fa:b9:cd:4c:d1:38:7b:8d:2b:28:
         7a:95:b9:3f:9a:af:48:83:46:3b:85:fb:d7:50:2c:0f:13:76:
         f6:a3:09:64:1d:42:63:54:e2:d0:6b:b4:ca:62:92:9e:08:f0:
         90:17:c2:a8:35:5a:b4:c4:e0:09:42:2d:06:ee:8b:fe:23:40:
         d3:06:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:35 2026 by rpki-client