Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa
File:                     1869BC5A45F811F096901E67C4F9AE02.roa (raw, json)
Hash identifier:          kNAzbu+9sBZx8me+pTpm5xueDHxVLPTWItrmyDjmsjc=
Subject key identifier:   1B:A7:95:BB:B1:48:FD:4C:FE:9E:E3:E4:A2:CA:EB:C4:6C:62:4C:15
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FB1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:28:04 +0000
ROA not before:           Sun 31 May 2026 16:28:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153901
IP address blocks:        165.99.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12209 (0x2fb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:28:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6194-8cb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:29:40:01:d0:05:73:f8:49:69:71:78:7c:0e:
                    ec:1d:27:11:e7:c4:24:e1:84:83:40:12:81:63:62:
                    66:e1:be:f3:04:30:5a:ef:ef:f0:79:c8:b8:c1:24:
                    71:dd:0c:79:b1:4c:a8:ab:0b:39:02:2d:26:cb:5b:
                    7b:3c:c2:9b:4c:cc:ef:fe:af:70:3f:3b:0f:a7:f6:
                    d7:d1:82:ee:27:3d:e4:26:23:7b:68:0a:12:bd:1a:
                    24:48:4b:f7:59:96:e5:af:ee:c9:63:7d:26:56:da:
                    64:6d:2e:28:c0:38:c5:9e:be:3f:bf:42:34:d6:97:
                    b1:9e:5a:4a:12:1e:d3:61:de:42:c6:91:1c:85:fd:
                    d4:02:89:9a:35:c7:62:2b:4a:d0:43:fd:f3:65:0b:
                    7b:03:72:b9:8f:0d:08:30:01:b0:3a:87:29:8e:7e:
                    cd:42:72:89:53:62:66:8a:06:4f:e1:b3:c0:07:bf:
                    8a:53:16:18:6d:11:ea:1d:9a:22:a3:60:10:c8:9a:
                    4d:1a:53:b0:92:02:31:ac:65:23:2e:7f:31:67:3e:
                    3f:e3:f7:81:3c:14:cb:2c:25:0d:86:10:eb:8b:e0:
                    04:9e:ed:22:3b:5f:04:00:5d:85:dd:de:fe:98:cd:
                    b4:68:6c:41:ab:91:a6:c6:65:c8:ee:62:74:2f:31:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:95:BB:B1:48:FD:4C:FE:9E:E3:E4:A2:CA:EB:C4:6C:62:4C:15
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1869BC5A45F811F096901E67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:75:b9:6b:59:ea:03:fe:cf:bb:18:c3:b4:a1:de:c8:b2:13:
         a9:8e:6b:0d:99:84:e9:22:78:bb:c4:a5:e8:68:3c:a4:0e:07:
         5f:2e:36:10:fc:e5:6f:16:7a:c8:88:ca:64:ca:af:6b:37:56:
         06:4f:0b:d1:49:b6:28:db:d2:cd:12:b8:3b:7b:e0:fc:eb:fd:
         18:08:49:4f:8d:8b:52:ba:74:36:5d:c5:63:49:b3:ee:b4:38:
         dd:68:20:83:7a:2b:c4:d3:57:b0:24:5f:16:49:6c:79:ea:2a:
         15:17:74:39:ca:29:01:4c:d1:40:85:b3:5b:5c:34:ec:ce:d1:
         c2:5f:df:5c:65:b4:df:52:e1:c3:d5:db:66:7a:ff:64:88:2d:
         59:4d:d4:38:52:8a:e7:6d:ca:79:46:2d:0a:03:2a:ce:b2:1e:
         0a:ea:d4:7e:d6:c0:b1:76:e7:e6:0a:17:59:16:d9:c3:c1:91:
         bb:e4:6b:f7:1f:e2:64:c6:c2:8a:5b:bc:4a:3b:86:23:08:a9:
         0d:8f:f7:7f:23:b7:44:62:aa:11:73:15:af:7a:b9:dc:83:1f:
         48:b3:b4:63:20:96:a5:76:ac:41:fa:c8:1f:8f:d5:13:24:c4:
         e4:ad:5e:9c:ee:15:b2:4b:54:4f:f6:3f:e8:20:c1:16:d7:da:
         15:62:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:29 2026 by rpki-client