Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/138553C26F9411F1A258826D6DA30FBC.roa
File:                     138553C26F9411F1A258826D6DA30FBC.roa (raw, json)
Hash identifier:          Wv9NYGDqGf8HP2Qk0or2CuT89Szac5p6PwFHY+Uqvwg=
Subject key identifier:   47:91:38:D7:44:D2:41:2F:DD:5E:07:C5:3C:8E:20:9E:89:94:35:5A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31D9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/138553C26F9411F1A258826D6DA30FBC.roa
Signing time:             Mon 06 Jul 2026 16:25:59 +0000
ROA not before:           Mon 06 Jul 2026 16:25:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153742
IP address blocks:        162.4.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12761 (0x31d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:25:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd717-5593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:97:e3:7c:77:d1:8b:ce:26:ab:9c:52:ca:
                    cb:9a:f0:5d:48:41:08:9d:31:7f:b5:e3:4e:d6:ed:
                    54:77:e5:8d:24:4b:bf:d1:86:9d:6f:b8:7e:92:ef:
                    32:30:07:5e:c9:39:94:e6:69:9b:c2:b8:35:f5:24:
                    26:26:61:f3:89:e2:f8:fc:36:b1:3b:e1:3e:09:1e:
                    32:bc:ce:0c:a8:85:85:90:6a:c5:34:67:3c:0e:17:
                    88:bc:03:99:59:d8:97:8f:0f:de:f3:5b:57:b4:36:
                    51:19:34:56:eb:0b:cd:de:85:ab:25:da:bb:56:2d:
                    46:9c:06:17:d1:d9:0e:1d:4f:85:95:d3:ca:c9:95:
                    47:88:8a:67:b8:3e:51:1a:2e:1b:ab:d6:a4:b3:8c:
                    e1:e3:aa:79:69:0e:2d:96:53:ed:33:3c:bd:3d:f8:
                    cd:f9:fd:95:21:df:98:cb:1a:00:00:5f:e7:3c:28:
                    24:af:ac:ee:7a:f9:e2:3a:25:c4:a5:c7:6d:33:12:
                    00:06:7f:84:cf:87:d0:e6:df:3a:03:87:3b:9b:c5:
                    25:27:73:5e:8d:b1:5c:df:b7:27:3b:34:03:74:aa:
                    d8:18:0a:33:4e:96:1d:fa:a8:dd:b5:d5:ae:25:56:
                    60:c7:7a:cb:ab:e9:bc:e1:8e:96:54:07:e8:36:50:
                    e5:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:38:D7:44:D2:41:2F:DD:5E:07:C5:3C:8E:20:9E:89:94:35:5A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/138553C26F9411F1A258826D6DA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:05:f6:8e:ac:64:e1:a9:fd:0c:05:e0:90:35:8b:a6:41:37:
         84:96:1b:cd:fd:06:2f:4a:0b:90:46:32:f4:d1:17:3b:0d:fc:
         1a:98:9c:4e:cc:bd:73:e0:26:81:4b:fb:8c:e5:12:31:e5:45:
         b9:e6:d5:81:54:e6:17:7d:15:11:35:81:43:21:ef:da:27:fc:
         49:2c:49:da:a1:97:9c:5a:94:ad:93:91:1e:00:43:34:bd:6f:
         7e:95:3c:9b:93:cb:11:80:83:be:51:03:64:b1:e5:e1:3a:a9:
         b0:40:b5:7d:f3:c8:ef:ec:60:4a:6f:b8:d7:de:71:00:e4:ff:
         db:7f:bc:1e:e8:87:be:fb:21:27:ba:19:dc:70:d7:83:26:9a:
         eb:28:74:1f:92:7a:c7:54:26:81:81:76:26:ab:bd:c0:7a:99:
         52:9f:56:33:4b:2e:82:e5:a4:fa:32:7d:8c:28:63:4a:27:48:
         64:88:c9:9c:ec:b1:2f:ff:90:fb:c9:ee:85:d0:90:5d:77:87:
         a3:fb:b6:32:fe:6d:ea:6d:cf:11:67:b2:be:6d:8a:cb:97:15:
         5f:68:65:65:1e:4c:b0:1b:78:6c:83:8f:38:93:80:f9:aa:78:
         e9:ac:dc:63:9e:e6:81:57:bd:d9:05:28:44:b3:a2:c3:d5:37:
         4b:66:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:05 2026 by rpki-client