Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
File:                     13E46FE8283511F19DB4198DC9833773.roa (raw, json)
Hash identifier:          lwThjBesUBmfR0+Wf6xGGif2VRiW0mHCYaAi4qCtwXk=
Subject key identifier:   64:26:D9:15:86:3D:9A:EB:32:7D:C0:7E:A5:74:83:16:7A:71:98:44
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F38
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa
Signing time:             Sun 31 May 2026 16:24:18 +0000
ROA not before:           Sun 31 May 2026 16:24:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152491
IP address blocks:        157.20.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12088 (0x2f38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:24:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60b2-6ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:cc:18:92:54:ab:7a:0f:8c:a6:b7:2f:4c:
                    6d:c8:5a:5f:45:85:a6:7c:ba:0b:df:76:c9:af:62:
                    b7:bd:e1:b5:8e:e3:c7:9c:ba:41:b8:1c:30:ca:ab:
                    52:dc:80:f6:6c:04:46:f4:59:95:6c:98:12:22:c4:
                    61:67:61:f9:7a:71:70:b6:c5:2e:f0:29:bc:e8:11:
                    2a:93:02:52:ec:3b:c3:b1:98:63:d5:65:3c:34:29:
                    ca:86:e1:90:24:17:6f:85:fe:5a:08:02:fb:ee:29:
                    44:a9:ea:91:48:41:60:11:7f:45:69:5f:a9:3a:6f:
                    7a:88:c5:bd:f1:65:c6:f4:1f:f5:83:5c:45:15:2e:
                    32:c2:91:55:e3:af:d6:eb:2c:fd:c4:66:51:8b:24:
                    ed:c6:51:d0:e1:e3:46:3b:0e:03:f8:57:d5:eb:b1:
                    5e:11:f2:40:a6:74:3b:f3:04:21:6a:e9:45:47:14:
                    d0:89:dd:18:2f:60:66:7e:92:46:7e:46:39:3e:00:
                    5b:d3:59:b9:fa:d2:7f:a4:04:7c:70:02:68:5c:ee:
                    67:95:38:ad:aa:b1:a6:f9:96:19:57:9d:92:1b:93:
                    16:5c:b6:81:d6:e8:83:a1:c9:1a:ec:e0:82:69:ba:
                    d1:91:b6:7f:ee:c7:b8:2f:56:4e:dc:b0:54:80:9e:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:D9:15:86:3D:9A:EB:32:7D:C0:7E:A5:74:83:16:7A:71:98:44
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/13E46FE8283511F19DB4198DC9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:8b:e3:53:eb:4a:eb:b1:1f:10:8d:b3:81:35:b4:9f:f1:0e:
         d7:c1:87:5b:d6:4f:db:78:17:d6:f7:d8:31:b9:a9:9e:0a:92:
         0f:92:7f:73:a4:dc:61:f0:8c:f0:e3:d6:aa:ff:c4:48:61:73:
         a6:ec:97:48:74:13:5f:92:27:25:e3:0f:87:d2:e3:ae:5d:45:
         97:a2:63:43:b6:30:84:53:91:e1:20:83:ed:5a:a3:8c:61:b7:
         d9:cb:ba:85:13:5e:c8:48:34:31:28:46:84:37:88:ec:a7:5a:
         a8:b9:57:c5:1c:2d:da:d2:e4:d2:13:33:29:47:91:30:76:1f:
         da:8d:bb:64:ac:a8:95:7d:e8:fb:bc:cb:aa:8a:f6:71:46:ca:
         a5:4d:9f:a7:60:a3:24:4a:d4:c2:8e:5a:1a:56:ec:a3:7f:ac:
         62:a9:c6:38:07:66:04:85:8b:fd:44:d4:69:71:aa:0a:ce:df:
         55:cf:1e:5d:b7:d7:aa:1d:34:cd:3f:5e:a6:9d:65:a8:fa:d9:
         cc:6a:19:a0:e3:00:e8:fc:bf:0a:77:be:66:b4:d4:6e:9d:e9:
         13:44:26:fa:e6:64:8d:6f:8f:39:bc:8e:fc:b6:39:43:2a:55:
         ce:3b:5f:0b:b3:11:7a:a5:a4:e6:57:30:9d:f7:0e:50:1f:e2:
         5c:28:45:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNDE4WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjBiMi02ZWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5TbMGJJUq3oPjKa3L0xtyFpfRYWmfLoL33bJr2K3veG1juPHnLpBuBwwyqtS
3ID2bARG9FmVbJgSIsRhZ2H5enFwtsUu8Cm86BEqkwJS7DvDsZhj1WU8NCnKhuGQ
JBdvhf5aCAL77ilEqeqRSEFgEX9FaV+pOm96iMW98WXG9B/1g1xFFS4ywpFV46/W
6yz9xGZRiyTtxlHQ4eNGOw4D+FfV67FeEfJApnQ78wQhaulFRxTQid0YL2BmfpJG
fkY5PgBb01m5+tJ/pAR8cAJoXO5nlTitqrGm+ZYZV52SG5MWXLaB1uiDocka7OCC
abrRkbZ/7se4L1ZO3LBUgJ5glQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGQm2RWG
PZrrMn3AfqV0gxZ6cZhEMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMTNFNDZGRTgy
ODM1MTFGMTlEQjQxOThEQzk4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAnRS/MA0GCSqGSIb3DQEBCwUAA4IBAQC9i+NT60rrsR8QjbOBNbSf
8Q7XwYdb1k/beBfW99gxuameCpIPkn9zpNxh8Izw49aq/8RIYXOm7JdIdBNfkicl
4w+H0uOuXUWXomNDtjCEU5HhIIPtWqOMYbfZy7qFE17ISDQxKEaEN4jsp1qouVfF
HC3a0uTSEzMpR5Ewdh/ajbtkrKiVfej7vMuqivZxRsqlTZ+nYKMkStTCjloaVuyj
f6xiqcY4B2YEhYv9RNRpcaoKzt9Vzx5dt9eqHTTNP16mnWWo+tnMahmg4wDo/L8K
d75mtNRunekTRCb65mSNb485vI78tjlDKlXOO18LsxF6paTmVzCd9w5QH+JcKEVF
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:48 2026 by rpki-client