Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/30695B4066BD11F0A139834EC4F9AE02.roa
File:                     30695B4066BD11F0A139834EC4F9AE02.roa (raw, json)
Hash identifier:          h6t/Darl4h2we5yDfrKe2AJQJ7jJU4YFmRnNcAKDUN8=
Subject key identifier:   E4:93:A5:31:07:AE:EE:0E:11:5B:88:38:0D:70:0C:36:20:81:DD:4B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FD0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/30695B4066BD11F0A139834EC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:29:09 +0000
ROA not before:           Sun 31 May 2026 16:29:09 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154069
IP address blocks:        165.101.228.0/24 maxlen: 24
                          165.101.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12240 (0x2fd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:29:09 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c61d5-7843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:3c:cf:b5:c8:c5:c2:3e:bd:23:e8:16:ac:
                    37:f6:92:7d:91:74:b3:b1:0d:7f:b2:4b:2c:b1:d8:
                    c7:01:1c:00:0a:b3:ad:5b:33:cb:8e:46:76:93:27:
                    a0:09:cb:0c:fd:11:b0:ff:54:2c:30:6e:d4:f9:51:
                    6f:42:e7:cb:52:8a:da:64:f6:d7:c7:b3:61:2d:d6:
                    66:a0:c2:97:8a:48:be:b6:69:3e:22:5b:13:69:60:
                    72:71:09:ac:50:be:ea:ec:a8:50:59:e6:30:a2:6d:
                    4c:f8:67:5b:02:11:9b:c7:9a:0a:a3:68:b0:04:b8:
                    97:0f:0e:d5:27:d4:e6:b1:c7:9e:03:9e:c0:db:41:
                    28:33:eb:78:57:95:33:f6:ab:ee:4f:75:28:64:e1:
                    fc:26:92:ce:26:94:dd:89:f2:c2:c0:18:50:88:ef:
                    e4:ad:bc:39:20:cf:0c:16:a7:5f:a6:16:59:71:ad:
                    f0:b3:3a:65:1d:b3:27:cd:5c:d4:a0:d2:48:25:0d:
                    ad:6d:4c:c2:af:ab:c1:71:6f:8f:df:a0:68:fe:0e:
                    5c:1f:32:06:e2:f6:1d:11:31:cc:86:ce:9e:af:05:
                    63:4a:23:bd:eb:25:05:32:e2:53:2b:b8:da:bb:7b:
                    2a:47:84:1f:08:e0:6b:d4:49:53:b1:88:9e:1a:e9:
                    93:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:93:A5:31:07:AE:EE:0E:11:5B:88:38:0D:70:0C:36:20:81:DD:4B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/30695B4066BD11F0A139834EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:46:9e:a7:1e:43:87:06:1f:52:87:36:55:2b:d1:15:b2:b6:
         26:a3:a4:64:46:03:85:a4:3d:98:ff:94:da:16:70:50:b7:83:
         3d:c3:42:ca:d1:f0:b1:1e:6e:ab:a1:16:5c:f4:bf:94:11:5f:
         67:9b:36:75:54:ff:80:b3:74:98:f9:ff:f6:5a:fc:1b:a2:23:
         43:be:e1:79:e0:7a:4c:89:f7:67:ac:4b:8b:fe:37:51:5f:31:
         97:bd:e6:b9:89:15:39:4c:dd:c1:f3:94:04:bb:bb:3c:be:7f:
         c3:45:6f:a6:52:48:02:71:f6:7b:18:96:f0:af:37:8d:25:c5:
         2e:ea:50:c2:bb:26:4c:52:42:39:f8:89:dd:43:4b:dd:88:d1:
         95:19:9a:36:f6:ae:1c:40:e0:fe:be:34:19:09:49:3e:69:07:
         27:10:a8:dc:f2:56:76:a5:ec:b3:de:35:dd:89:48:d7:a9:4c:
         2c:03:12:15:f2:61:b3:90:ef:1a:22:ee:01:7d:4c:3a:d0:59:
         0c:a0:0d:81:96:dd:79:c1:a1:82:28:7d:38:ab:af:e9:c9:ae:
         ca:b3:6b:80:cd:e5:04:a4:7a:10:e9:ee:a8:f8:09:8d:49:15:
         b4:80:b1:d6:6b:9e:46:ad:0c:40:d7:19:6a:b8:c0:23:bf:8c:
         ba:18:95:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:49:11 2026 by rpki-client