Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
File:                     1B6234F8C6C411F0B021E76AC4F9AE02.roa (raw, json)
Hash identifier:          noAAfygbrN0Y8/+hcmzfAYqU6d4szbqC1x+aYE4fzas=
Subject key identifier:   85:8D:2C:51:E3:0B:41:DF:2D:E7:D4:AF:53:E7:20:83:83:C6:F0:31
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31E5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:26:22 +0000
ROA not before:           Mon 06 Jul 2026 16:26:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153950
IP address blocks:        144.79.227.0/24 maxlen: 24
                          160.25.111.0/24 maxlen: 24
                          165.99.212.0/23 maxlen: 24
                          192.232.32.0/24 maxlen: 24
                          192.232.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12773 (0x31e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:26:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd72e-05fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:03:c1:68:68:26:d9:9b:ce:e5:f2:40:98:
                    bc:eb:28:3d:dd:e6:7a:d2:65:fe:fc:a0:f0:5d:4e:
                    0d:e0:2b:02:4a:10:b6:b7:54:5a:e1:9e:9a:87:15:
                    47:60:67:6d:61:ce:ab:57:25:24:6d:ad:28:a1:03:
                    86:74:6b:40:71:46:8d:ad:71:b1:21:88:e6:49:2b:
                    f1:68:99:a5:5e:53:07:33:01:01:ac:0a:ed:77:63:
                    02:aa:ae:b1:96:22:b9:9b:23:ed:ac:a7:70:6f:09:
                    d6:ac:84:53:41:d8:61:3a:8a:6e:49:2e:c1:99:06:
                    28:c6:9d:94:b1:ae:94:2d:e9:cf:30:6e:b2:63:2a:
                    13:dd:22:0d:1a:7c:ee:c3:a1:41:64:f8:52:1e:18:
                    ed:65:b3:2d:4c:75:e8:26:21:d0:a3:a4:18:d6:01:
                    d5:b0:80:f4:a0:c6:25:1d:5b:d5:e5:6c:a4:69:35:
                    ee:09:8f:5d:b8:30:5a:f5:0f:d7:23:03:7c:d9:f5:
                    85:fb:d6:94:b5:3a:b6:4c:63:56:56:b9:02:1d:c2:
                    55:13:df:5a:b1:8a:39:88:b6:73:76:00:67:ed:3b:
                    9d:e6:39:fa:15:02:a6:5a:16:1e:e6:f1:5c:82:63:
                    41:86:3b:4e:70:54:a8:86:60:aa:9d:bc:61:50:78:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8D:2C:51:E3:0B:41:DF:2D:E7:D4:AF:53:E7:20:83:83:C6:F0:31
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1B6234F8C6C411F0B021E76AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.227.0/24
                  160.25.111.0/24
                  165.99.212.0/23
                  192.232.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:78:63:96:c7:50:c3:a6:e1:4e:aa:82:e7:94:5b:e0:c7:ef:
         b8:da:31:f8:b1:ed:7f:ea:ca:53:ae:16:61:e4:ee:d3:f1:b4:
         c1:c4:b3:55:0f:9c:2a:de:3b:98:f1:12:1e:0a:f4:c7:d1:d7:
         40:a3:44:d0:14:3e:aa:e2:89:f0:26:e5:8b:64:00:27:3e:aa:
         ed:11:ff:5e:f9:5d:51:ca:ce:98:84:55:d6:60:4f:49:c8:5d:
         f8:82:17:3f:33:bc:3e:bc:b1:91:5b:a4:41:f5:9b:97:48:77:
         b3:08:16:da:db:28:03:ed:65:9c:50:57:01:f8:5b:78:ea:95:
         f5:8e:07:7e:84:4f:6d:a1:27:bc:13:04:98:9d:4b:8f:05:3d:
         29:68:f5:aa:48:a9:60:d5:41:25:3f:92:e2:44:fb:00:7a:70:
         11:e1:38:00:ac:89:cc:6b:a4:1a:d8:e7:6a:67:98:6a:b1:da:
         ad:d5:62:6b:31:5c:fc:bb:fe:de:7f:d5:9e:e7:37:f5:9b:56:
         ec:35:4c:c2:da:e7:4e:0d:fb:e1:39:7e:f6:c8:e1:2c:78:54:
         de:95:6a:2c:db:bb:d5:75:c5:fb:36:99:56:bb:cc:3f:67:3b:
         74:9a:f2:0e:2e:f8:c8:44:61:f8:02:75:dc:96:b0:e1:c3:ee:
         dc:53:17:96
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgICMeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNjIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDcyZS0wNWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXMDwWhoJtmbzuXyQJi86yg93eZ60mX+/KDwXU4N4CsCShC2t1Ra4Z6ahxVH
YGdtYc6rVyUkba0ooQOGdGtAcUaNrXGxIYjmSSvxaJmlXlMHMwEBrArtd2MCqq6x
liK5myPtrKdwbwnWrIRTQdhhOopuSS7BmQYoxp2Usa6ULenPMG6yYyoT3SINGnzu
w6FBZPhSHhjtZbMtTHXoJiHQo6QY1gHVsID0oMYlHVvV5WykaTXuCY9duDBa9Q/X
IwN82fWF+9aUtTq2TGNWVrkCHcJVE99asYo5iLZzdgBn7Tud5jn6FQKmWhYe5vFc
gmNBhjtOcFSohmCqnbxhUHjkPwIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFIWNLFHj
C0HfLefUr1PnIIODxvAxMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMUI2MjM0RjhD
NkM0MTFGMEIwMjFFNzZBQzRGOUFFMDIucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe
BAIAATAYAwQAkE/jAwQAoBlvAwQBpWPUAwQBwOggMA0GCSqGSIb3DQEBCwUAA4IB
AQBqeGOWx1DDpuFOqoLnlFvgx++42jH4se1/6spTrhZh5O7T8bTBxLNVD5wq3juY
8RIeCvTH0ddAo0TQFD6q4onwJuWLZAAnPqrtEf9e+V1Rys6YhFXWYE9JyF34ghc/
M7w+vLGRW6RB9ZuXSHezCBba2ygD7WWcUFcB+Ft46pX1jgd+hE9toSe8EwSYnUuP
BT0paPWqSKlg1UElP5LiRPsAenAR4TgArInMa6Qa2OdqZ5hqsdqt1WJrMVz8u/7e
f9We5zf1m1bsNUzC2udODfvhOX72yOEseFTelWos27vVdcX7NplWu8w/Zzt0mvIO
LvjIRGH4AnXclrDhw+7cUxeW
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:28 2026 by rpki-client