Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2CD0468858BC11F091143F84C4F9AE02.roa
File:                     2CD0468858BC11F091143F84C4F9AE02.roa (raw, json)
Hash identifier:          wt9YxqLsx99NCx7x87A2B73MFjOu2RWACctgKsyNsII=
Subject key identifier:   1E:A6:17:3F:B7:AE:53:81:CC:D5:F5:C8:94:E0:2B:63:87:D6:C4:2D
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3105
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2CD0468858BC11F091143F84C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:18:59 +0000
ROA not before:           Mon 06 Jul 2026 16:18:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141841
IP address blocks:        165.101.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12549 (0x3105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:18:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd573-8e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:c4:69:30:45:be:67:b6:18:3e:fd:90:4a:
                    ee:c0:6c:32:1a:47:7b:19:c4:5a:fd:0a:d4:cf:24:
                    77:5a:de:57:55:b4:e3:7a:b0:61:60:44:35:46:ff:
                    dc:8a:5d:4f:b2:33:70:1e:12:a0:27:10:aa:12:42:
                    f6:9a:0e:83:d4:e1:5c:a5:4c:2e:c3:9a:01:89:4d:
                    c3:db:f1:6f:e5:d1:1a:6e:f6:8a:f3:70:74:c6:29:
                    9d:ba:9e:d3:20:71:b0:1f:06:95:62:59:db:3f:c8:
                    ef:b0:08:dc:1c:67:59:4f:89:2e:8b:b8:73:6d:ec:
                    76:e6:f3:06:07:af:16:91:fb:20:83:6a:8e:fc:06:
                    c5:39:87:f3:c8:22:db:db:26:50:5f:a9:95:14:1a:
                    cc:86:28:3f:e1:23:c8:6a:42:66:d0:9f:1e:6e:f1:
                    7a:7c:18:d1:5d:da:28:fb:f6:ac:61:ae:dd:d1:cb:
                    9e:8b:42:dc:7d:c8:5a:5f:7c:03:af:a8:84:e7:b9:
                    a6:cd:1a:6b:5a:d2:ec:1c:66:c4:c1:29:4d:3d:c7:
                    1c:b7:60:cb:98:f9:4c:f9:d6:37:33:53:e9:47:00:
                    33:b0:ab:8a:0d:bc:56:32:c0:a3:f3:15:9f:a8:cd:
                    bd:5a:26:0c:2f:59:65:6d:5d:05:60:6e:fa:3f:72:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A6:17:3F:B7:AE:53:81:CC:D5:F5:C8:94:E0:2B:63:87:D6:C4:2D
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2CD0468858BC11F091143F84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:1a:be:93:0b:5a:93:9d:5b:9d:08:fe:c8:88:1d:ae:34:f5:
         09:76:a5:b7:55:6b:82:c4:e3:19:f0:0b:73:e7:30:8e:13:cc:
         29:74:6e:d7:58:a2:5a:24:b1:a1:d9:cd:fc:47:e0:53:cb:79:
         1c:b8:d3:7c:a7:b6:c6:5f:4a:16:32:ee:8c:5f:23:d3:6f:f5:
         cb:5b:f3:54:17:21:01:f3:d8:d9:e8:e4:09:31:de:b9:d6:4d:
         18:11:52:56:7e:ad:b4:1e:bc:c3:68:5c:52:28:bb:e5:ac:ca:
         fd:56:be:b6:b1:ff:78:c4:ef:ee:1c:c0:e0:74:a0:5e:4e:cb:
         a0:e9:c3:65:e3:c4:b3:7b:64:95:f4:d9:83:54:eb:51:7d:4e:
         c9:f0:2c:5d:4b:73:3f:73:3b:13:47:3d:0f:ca:85:f1:1c:6d:
         40:9c:98:fa:5a:bc:be:d7:83:8f:16:97:f6:e9:04:c3:3f:d6:
         ff:1b:be:45:37:d9:0b:5f:b1:71:17:6c:ea:39:3d:cd:29:06:
         6c:59:70:17:65:80:f6:cc:40:93:f9:b1:ec:7a:3d:70:37:18:
         ee:db:6e:fe:ba:27:17:2f:ba:9b:fa:7c:0e:32:1d:39:ae:76:
         e9:4a:fb:3c:10:5e:f3:1e:df:3b:51:d7:93:1c:04:d3:8b:e4:
         5f:2b:cd:3c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxODU5WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDU3My04ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWLEaTBFvme2GD79kEruwGwyGkd7GcRa/QrUzyR3Wt5XVbTjerBhYEQ1Rv/c
il1PsjNwHhKgJxCqEkL2mg6D1OFcpUwuw5oBiU3D2/Fv5dEabvaK83B0ximdup7T
IHGwHwaVYlnbP8jvsAjcHGdZT4kui7hzbex25vMGB68Wkfsgg2qO/AbFOYfzyCLb
2yZQX6mVFBrMhig/4SPIakJm0J8ebvF6fBjRXdoo+/asYa7d0cuei0LcfchaX3wD
r6iE57mmzRprWtLsHGbEwSlNPccct2DLmPlM+dY3M1PpRwAzsKuKDbxWMsCj8xWf
qM29WiYML1llbV0FYG76P3KUPwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB6mFz+3
rlOBzNX1yJTgK2OH1sQtMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMkNEMDQ2ODg1
OEJDMTFGMDkxMTQzRjg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWVgMA0GCSqGSIb3DQEBCwUAA4IBAQByGr6TC1qTnVudCP7IiB2u
NPUJdqW3VWuCxOMZ8Atz5zCOE8wpdG7XWKJaJLGh2c38R+BTy3kcuNN8p7bGX0oW
Mu6MXyPTb/XLW/NUFyEB89jZ6OQJMd651k0YEVJWfq20HrzDaFxSKLvlrMr9Vr62
sf94xO/uHMDgdKBeTsug6cNl48Sze2SV9NmDVOtRfU7J8CxdS3M/czsTRz0PyoXx
HG1AnJj6Wry+14OPFpf26QTDP9b/G75FN9kLX7FxF2zqOT3NKQZsWXAXZYD2zECT
+bHsej1wNxju227+uicXL7qb+nwOMh05rnbpSvs8EF7zHt87UdeTHATTi+RfK808
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:40 2026 by rpki-client