Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/ACE7F9985DF711F084BC8A50C4F9AE02.roa
File:                     ACE7F9985DF711F084BC8A50C4F9AE02.roa (raw, json)
Hash identifier:          BcNgGbp9R5muzvSnB/YVBhMpcVEZktWqP0cVBxkO3vw=
Subject key identifier:   A9:2E:A9:31:AF:69:D3:A5:BF:6D:F3:1F:2E:2E:AC:F6:51:11:B4:AA
Certificate issuer:       /CN=A918ABAC/serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
Certificate serial:       CA
Authority key identifier: B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/ACE7F9985DF711F084BC8A50C4F9AE02.roa
Signing time:             Wed 27 May 2026 07:40:07 +0000
ROA not before:           Wed 27 May 2026 07:40:07 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     13335
IP address blocks:        165.101.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl
                          rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 202 (0xca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ABAC, serialNumber=B4038AB64039F3145622A20FF70ED7BE1D4E7F91
        Validity
            Not Before: May 27 07:40:07 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a169fd7-4e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:e2:15:5e:ca:05:37:30:77:58:96:60:a9:
                    3a:ce:10:5d:63:5a:c8:05:37:85:16:27:55:25:40:
                    64:e9:49:78:d0:41:0f:a0:14:d5:fd:f9:f1:d8:90:
                    48:87:f3:14:c4:fd:66:fb:70:86:48:20:b8:cc:8c:
                    1f:dc:19:7b:79:e8:5c:46:76:61:83:c3:02:10:dd:
                    b9:aa:7b:70:00:50:d7:a1:67:dd:71:e8:e3:fc:73:
                    e8:1f:58:54:b1:6e:99:5d:22:ee:8d:61:6e:d0:a9:
                    94:54:60:2c:25:cf:72:73:68:a7:41:de:c7:26:bc:
                    49:f0:0a:68:c7:7e:da:0b:7b:bf:5f:32:45:a7:cf:
                    94:e6:63:1f:23:e9:09:eb:82:c7:2e:ee:a7:fd:a7:
                    93:c7:36:03:2b:ed:e7:41:5b:01:a8:be:c0:6d:ef:
                    bb:39:b6:99:b4:25:43:1c:7e:fb:5a:70:d4:7a:09:
                    e2:0e:e1:d7:8f:92:04:cc:cd:69:ee:dc:9a:89:70:
                    b9:b6:d1:58:2f:87:dd:33:ce:c9:89:49:64:87:a9:
                    e0:03:ed:e4:85:6a:54:38:2d:0c:5b:37:7a:9a:90:
                    c3:df:da:7b:3f:b6:85:30:c6:32:2e:31:ab:b8:ee:
                    32:30:d7:1d:b4:27:7f:44:3d:d2:71:81:9a:cf:e3:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2E:A9:31:AF:69:D3:A5:BF:6D:F3:1F:2E:2E:AC:F6:51:11:B4:AA
            X509v3 Authority Key Identifier:
                keyid:B4:03:8A:B6:40:39:F3:14:56:22:A2:0F:F7:0E:D7:BE:1D:4E:7F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/tAOKtkA58xRWIqIP9w7Xvh1Of5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tAOKtkA58xRWIqIP9w7Xvh1Of5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ABAC/649BC3B250C911F0B4730246C4F9AE02/ACE7F9985DF711F084BC8A50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:31:fd:5a:cb:7a:13:19:28:c8:da:29:d6:81:52:18:df:21:
         3d:f9:a6:e8:a3:0e:9b:cd:fa:fe:f2:13:bd:c9:0b:34:e7:1c:
         eb:24:a6:c5:f7:30:6b:9a:88:66:7e:12:5e:88:40:8b:f1:05:
         2d:48:0f:e3:3d:e5:11:5d:d2:82:fb:c4:9e:d0:e1:a5:27:b9:
         89:77:02:de:e1:c0:fe:2f:bb:b6:0d:e3:db:3f:95:98:23:ac:
         a5:2e:a7:59:15:fc:8b:d2:69:47:2e:03:5d:92:f7:20:b2:e9:
         6d:c3:a9:0e:cd:a7:64:40:cf:b7:21:a6:2e:92:f8:1a:7c:10:
         31:92:36:32:92:ae:5b:1e:41:83:80:31:a3:21:49:a4:4b:02:
         46:54:ba:c7:4d:01:31:ac:90:f9:83:ca:9e:f9:f2:16:e1:64:
         21:2e:b4:c1:88:8c:72:a2:91:66:57:55:d1:ec:42:5b:75:c4:
         23:7b:2d:cd:fe:5b:c0:89:1a:3e:d7:f7:f9:2f:ff:51:9d:ce:
         ac:d3:75:b5:30:8f:e6:1f:5c:a0:fa:9d:b1:a8:24:0e:ed:ab:
         65:ed:e8:1e:be:54:26:59:c4:af:bc:64:72:53:e3:63:11:2a:
         74:fd:66:ea:68:ec:33:20:42:6c:53:69:84:4b:00:3c:5f:d7:
         24:4d:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:04:48 2026 by rpki-client