Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
File:                     FDA89E2CA33511EBA984863CC4F9AE02.roa (raw, json)
Hash identifier:          We6jmeEEyT0HEMr/GY7jQ9dR91pmG5jYjCWmk5TFv3Q=
Subject key identifier:   DB:65:58:57:7B:11:3D:CF:E1:FC:2C:27:44:A4:09:B0:73:A0:5D:5C
Certificate issuer:       /CN=A918495F/serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
Certificate serial:       1829
Authority key identifier: 0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa
Signing time:             Thu 04 Jun 2026 17:19:43 +0000
ROA not before:           Thu 04 Jun 2026 17:19:43 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     4515
IP address blocks:        168.70.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl
                          rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6185 (0x1829)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918495F, serialNumber=0C5A542A1E9B3FB5C8E49686EBEBCFC050CCE4A5
        Validity
            Not Before: Jun  4 17:19:43 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21b3ae-6699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:91:83:a1:f9:d2:40:0a:e7:71:33:9d:43:7a:
                    73:8e:70:3d:20:7e:80:0b:e2:1b:16:f5:87:43:57:
                    12:05:71:eb:90:dc:f9:f9:6b:98:87:91:e6:3f:17:
                    05:35:88:3a:65:cb:a8:7c:94:3c:2f:f3:74:fa:bf:
                    8e:e5:23:b2:2c:1f:b8:da:91:d2:2c:50:16:76:ff:
                    95:d0:ba:06:73:8f:70:80:da:f3:5c:c1:54:4c:d9:
                    c7:05:08:63:ef:56:cc:ba:c4:1c:f1:57:92:63:90:
                    07:61:22:10:ef:73:77:20:81:c7:bd:58:b1:77:a1:
                    bd:86:3d:13:f0:e1:c6:89:68:c0:24:80:06:f0:05:
                    3d:89:a0:2d:e9:f8:98:72:cc:3d:bf:dc:55:aa:e7:
                    bc:70:53:98:1f:2b:d3:e5:87:ea:26:07:c0:97:c2:
                    e3:64:9a:de:57:08:f5:14:0b:30:e1:21:54:32:94:
                    20:ba:a9:17:dc:66:21:c8:ae:5e:65:99:a4:50:f5:
                    57:ac:bd:bd:56:89:4e:b9:8e:1a:a0:9f:fb:64:14:
                    11:fa:a4:42:a8:7c:29:b8:11:1a:9f:d4:b4:70:6a:
                    49:62:04:43:8d:e7:eb:f7:f1:dc:cd:9e:0d:d9:28:
                    02:34:5f:66:ab:0b:83:ce:8b:89:f0:0d:8a:63:8c:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:58:57:7B:11:3D:CF:E1:FC:2C:27:44:A4:09:B0:73:A0:5D:5C
            X509v3 Authority Key Identifier:
                keyid:0C:5A:54:2A:1E:9B:3F:B5:C8:E4:96:86:EB:EB:CF:C0:50:CC:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/DFpUKh6bP7XI5JaG6-vPwFDM5KU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DFpUKh6bP7XI5JaG6-vPwFDM5KU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918495F/78D5D896DFEC11E7A27A2213C4F9AE02/FDA89E2CA33511EBA984863CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.70.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:0e:09:08:dc:ee:68:05:de:98:05:e5:8a:b4:66:d6:c0:3a:
         53:09:42:c2:88:2d:7a:51:2a:4f:c3:bc:bd:2d:93:38:e9:19:
         d8:dc:0a:57:9d:a3:c5:12:41:0b:31:69:29:18:56:b1:05:93:
         0b:5c:be:92:6b:f7:5f:98:c8:a2:f0:dd:63:69:ec:3a:cb:29:
         1f:cb:94:d4:8f:79:dd:54:b4:19:c7:3f:fd:5f:23:c9:f3:6a:
         4f:f5:2c:de:13:e9:f6:33:31:c0:37:89:6b:bc:af:b9:cd:01:
         4b:32:fb:17:4a:3f:2b:d6:ce:28:82:43:e5:e4:f4:82:61:04:
         21:3b:21:e6:32:3c:44:a9:12:fd:0d:98:4f:3c:92:80:2e:a2:
         52:1b:7d:a5:14:4b:b7:4c:2d:3d:b7:a5:f1:be:6e:8b:0f:4f:
         e6:4e:e3:12:40:4a:3a:44:60:30:3f:54:69:33:4a:ad:86:4a:
         b8:55:f9:7b:39:a1:b5:3b:8a:68:e9:d2:48:41:bd:6b:fb:3b:
         5a:76:32:c9:86:23:49:76:67:b7:32:2b:f3:cd:93:b8:13:ef:
         54:af:0a:20:57:62:86:53:77:cb:1c:25:92:12:99:80:9d:1b:
         0a:32:b8:a4:45:b0:bd:c0:e6:67:f8:80:b8:04:95:85:6c:87:
         68:a8:a6:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 6 13:34:32 2026 by rpki-client