Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
File:                     3DC264DE530F11EF8C82480FC4F9AE02.roa (raw, json)
Hash identifier:          FqPdn7UBXxnxnEsVYOygQuhpzHPrG3GqSyjDp9W9I5Y=
Subject key identifier:   98:F9:66:53:C4:56:B5:DC:D1:1A:FE:8D:7C:E2:78:96:8C:D2:36:99
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E8E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:18:52 +0000
ROA not before:           Sun 31 May 2026 16:18:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134932
IP address blocks:        157.20.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11918 (0x2e8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:18:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f6c-f072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:d9:fe:ad:82:b7:83:95:a6:28:31:e8:9b:
                    c3:05:b3:69:9a:4c:88:57:cf:2b:63:df:06:ee:39:
                    f4:57:98:88:dc:4c:6f:5f:cb:83:b1:81:c7:f0:ce:
                    0a:84:60:0e:50:50:bd:2e:8b:d5:0e:4f:54:81:15:
                    25:0e:bb:cc:43:a1:dc:76:16:d1:e4:eb:ec:0a:e9:
                    83:0a:49:15:30:4e:e8:47:ef:d1:ca:cb:59:df:e2:
                    2e:62:3a:a4:17:a8:e6:72:dc:3f:c1:ac:66:28:5e:
                    89:a2:37:cb:60:3c:64:2f:1b:62:22:bb:e9:86:6c:
                    f5:01:cf:61:77:8d:1c:5b:7d:dd:fa:5c:8a:c0:63:
                    85:69:96:56:d5:c8:12:f7:9b:ee:a6:8f:db:81:9e:
                    23:37:5d:6b:ff:a1:25:c3:95:4c:58:23:4c:97:cf:
                    bb:bd:c7:75:2c:a7:65:db:c7:27:14:77:56:51:7e:
                    6b:f5:82:e6:ae:64:63:e3:81:50:c7:3b:34:2c:42:
                    86:cc:e7:e1:fe:52:ed:b4:18:d6:91:bc:0d:c0:1e:
                    f6:7b:d8:54:7d:72:a8:21:23:61:96:6e:f6:bf:04:
                    b8:98:a6:e4:29:89:87:c8:7f:15:84:8d:47:08:d4:
                    5f:6d:e6:11:24:41:fe:0a:60:30:38:81:85:aa:3b:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F9:66:53:C4:56:B5:DC:D1:1A:FE:8D:7C:E2:78:96:8C:D2:36:99
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:4e:36:6f:96:be:e9:51:d3:19:98:43:4f:94:ba:e5:96:6c:
         50:e3:2a:18:66:cc:eb:0d:59:14:95:45:59:77:ff:5d:8c:c8:
         f3:ac:33:44:6f:a4:ee:d6:09:fa:86:ab:2c:c6:fa:0e:14:dc:
         03:3f:24:29:b4:21:c5:0c:26:1e:17:eb:49:2c:c0:d0:ae:5d:
         28:9a:59:6a:68:97:de:3c:25:ac:34:08:51:a0:9c:f4:f9:85:
         be:5a:17:98:12:9f:a2:1b:a7:7c:e7:b3:99:48:3f:b9:f2:cc:
         52:28:a8:a9:93:a8:31:eb:43:27:16:67:f8:77:46:18:94:29:
         77:20:0e:b4:a7:c9:e7:0a:d5:1d:d1:21:36:a1:a9:ed:47:9e:
         e0:3b:0c:87:de:12:20:92:0f:89:7e:66:10:33:01:33:9a:8c:
         3d:7f:9b:23:2e:97:db:c6:49:6f:ec:bd:3f:d3:a2:c5:0e:1c:
         01:cf:2b:52:b9:e0:26:74:21:fc:a0:fc:d4:92:66:81:a9:d4:
         0b:f7:ef:be:32:b8:a4:7d:0b:35:25:ca:0d:9f:1c:be:14:52:
         50:d2:aa:4f:40:30:3d:67:f9:a4:73:f9:bd:9f:83:e2:c4:06:
         1d:29:73:4f:49:b2:f3:49:f3:41:3e:bb:f0:00:4f:a8:31:60:
         4c:a5:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:50 2026 by rpki-client