Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa
File:                     0386A52403A911EF851C9E18C4F9AE02.roa (raw, json)
Hash identifier:          2XSOJ1NyHdR7wK+y4bx16ZBgHraDdB/JltTeeCwsIoc=
Subject key identifier:   5B:3B:03:7F:68:11:B3:FB:BB:90:D0:BC:BB:6F:9F:43:CD:32:CD:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F78
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:26:20 +0000
ROA not before:           Sun 31 May 2026 16:26:20 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152582
IP address blocks:        157.20.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12152 (0x2f78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:26:20 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c612c-51ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:4f:f7:77:d6:32:33:18:19:74:60:d4:96:
                    67:95:3b:71:45:ea:eb:78:59:dd:51:99:0d:ca:16:
                    ee:7a:9c:51:25:69:47:b2:a5:43:42:a6:86:e4:1f:
                    ae:dc:ab:82:7e:45:28:bf:9d:b9:8d:f6:93:7d:37:
                    bd:3b:d7:b5:70:43:89:ff:6b:c4:1e:49:cd:74:5c:
                    83:ed:15:77:a1:43:a3:4c:c2:94:8f:b6:87:89:19:
                    77:a5:65:50:41:0a:dd:53:b8:c9:78:13:b0:a2:59:
                    33:8a:c4:5e:f4:c6:37:d7:57:44:0e:db:ba:f5:a3:
                    6a:bd:94:eb:f0:bd:2f:a6:5a:9f:fc:53:5e:ae:07:
                    a6:5c:7d:6a:e2:da:9e:c5:d4:63:18:c1:81:5c:f4:
                    da:45:6d:43:b9:e6:ef:de:e8:52:d0:02:ab:54:fe:
                    7a:96:98:42:74:20:f3:4a:ec:f9:bd:30:a2:bd:94:
                    af:14:12:5f:ef:de:fa:ae:51:54:0f:15:48:3e:30:
                    b8:ef:60:80:c4:27:56:03:e5:59:bb:0c:35:30:31:
                    32:e6:14:bb:fb:5a:c7:2f:1f:18:57:a8:da:58:a9:
                    fc:cf:99:3b:d8:b9:dc:2f:66:15:a8:9b:7a:c0:66:
                    1e:15:c6:88:33:0e:99:3c:48:16:57:e2:15:81:5d:
                    b9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3B:03:7F:68:11:B3:FB:BB:90:D0:BC:BB:6F:9F:43:CD:32:CD:FB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:29:dd:0c:2b:00:16:0f:d8:b8:28:0a:1e:b7:dc:cd:ef:b0:
         d3:fd:56:1a:f4:86:cc:93:c0:8e:cd:d7:16:ad:a4:91:43:d1:
         0e:0c:b5:ca:c3:dd:07:8f:fb:ab:f7:8c:92:72:c8:62:92:27:
         04:e2:9b:c2:59:db:1f:bd:e8:68:36:37:2e:6d:97:c8:53:61:
         66:f1:2f:23:16:5e:ec:2a:f1:75:da:e4:05:7b:ea:0d:ba:fe:
         b8:85:c7:52:23:6f:74:24:a8:4e:05:2e:d9:e3:41:56:0b:14:
         f0:ce:cc:44:b9:66:9e:56:7f:a0:d5:b0:06:0d:a8:f9:39:0f:
         c3:11:81:50:2a:6c:cb:37:a2:85:bc:7f:3a:98:2c:9b:b5:26:
         42:60:53:55:d3:a4:ef:8a:2b:4c:a9:e7:bd:cf:0d:5c:05:ab:
         5f:71:13:68:91:59:02:13:0c:fb:9e:9d:d7:bd:cf:73:85:31:
         50:6f:be:bd:44:c3:12:8f:3d:8c:d8:70:25:a9:22:47:00:88:
         ef:63:7e:7f:02:b7:7b:56:cd:aa:a1:71:0f:7b:18:a8:62:a6:
         18:2f:18:24:23:e7:e4:de:20:7b:73:5b:fa:c9:a7:33:1e:00:
         c1:64:3d:6c:64:c0:e8:54:ca:7c:aa:e7:35:69:a0:b8:a8:98:
         ff:26:0b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:31:07 2026 by rpki-client