Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
File:                     3DC264DE530F11EF8C82480FC4F9AE02.roa (raw, json)
Hash identifier:          84SDH65U9zReMfgw6DPkjRfioAl0Tqu9AI6VbWeRhoA=
Subject key identifier:   DD:69:33:17:7C:C0:9F:89:C0:73:3E:E5:D6:4D:89:0E:0A:5E:72:FE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30B3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:16 +0000
ROA not before:           Mon 06 Jul 2026 16:16:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     134932
IP address blocks:        157.20.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12467 (0x30b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4d0-619e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:eb:d2:63:b4:56:c2:cc:2e:cb:44:21:50:14:
                    14:18:07:34:dc:d3:91:da:a9:36:2b:3a:d6:b3:94:
                    13:0d:94:9c:a0:ec:62:bf:98:59:f7:a3:42:11:2c:
                    b9:eb:c9:7b:89:e2:b2:44:e4:8d:e1:ff:5e:1c:60:
                    68:a6:d6:8a:17:c9:74:c6:e2:72:3e:98:92:5a:fe:
                    92:3d:00:c1:1c:89:b3:37:39:2d:94:ae:71:03:16:
                    61:f5:18:d9:49:c1:39:d7:37:b4:b1:9e:73:a5:f1:
                    f6:39:7a:25:01:e2:b5:9e:21:48:bf:d2:47:a3:0a:
                    37:1a:63:26:21:21:f3:e3:2e:b8:95:11:61:aa:59:
                    e2:ef:89:d7:6b:1e:0c:09:24:33:be:ab:85:4d:5d:
                    8a:7c:d3:3d:27:36:ab:98:10:a1:3a:c3:78:04:f9:
                    57:1a:85:52:ab:26:29:9e:07:64:73:0f:2b:36:bc:
                    86:ef:e0:a9:fa:c2:d1:bb:b9:ce:e3:fa:1c:fd:2f:
                    3e:0c:cd:7a:33:21:71:2f:f4:cd:bd:4e:d3:69:88:
                    b8:6c:0c:f3:8d:62:fa:66:5d:f7:d9:fe:41:c2:3b:
                    89:09:39:42:a5:bb:96:d1:ea:9a:8b:ad:62:a8:1d:
                    95:aa:54:db:eb:4d:4e:9d:79:81:35:7d:d3:c3:21:
                    5c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:33:17:7C:C0:9F:89:C0:73:3E:E5:D6:4D:89:0E:0A:5E:72:FE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3DC264DE530F11EF8C82480FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:b6:03:93:2a:9f:ce:50:e1:48:01:d8:b9:3e:d5:21:f0:e9:
         cf:18:df:aa:0e:9d:b9:32:ae:9f:da:54:42:1b:4c:fe:7b:ea:
         96:25:05:eb:e9:c2:ff:27:50:e5:86:66:f7:f8:34:06:e7:3a:
         4d:41:ea:7d:a2:71:d9:cd:86:44:6c:88:79:04:58:48:d8:7e:
         7f:6f:80:12:b3:fe:b3:2c:08:05:44:6e:12:4d:eb:20:46:f6:
         ee:7b:f0:4e:d4:fe:fb:2b:7b:a8:23:e0:51:ab:12:46:24:4b:
         7e:dc:93:c5:86:02:92:84:30:f8:d4:35:7b:06:5b:3f:71:ff:
         8c:a0:50:27:2b:7e:5f:51:b6:08:61:c2:d6:59:bd:ad:1a:c3:
         23:76:e4:0a:a4:bf:5f:5d:6b:80:b9:92:9d:e4:4d:47:bd:14:
         82:65:6c:e5:9a:14:ac:68:d7:de:3b:37:f4:f0:20:14:9e:6e:
         57:29:9a:87:d1:c2:c5:fb:f5:81:31:e1:52:c9:01:23:95:2f:
         43:d4:40:8a:6b:d1:18:e5:1a:b1:36:08:03:c2:e9:ac:c1:c4:
         1e:c9:8e:1e:e0:30:dd:a0:2a:f0:ea:94:80:8f:84:88:5b:cf:
         92:f0:3d:2e:4e:3d:ab:7f:6e:e4:aa:3c:29:b9:75:75:f4:ac:
         b2:ab:fd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:04 2026 by rpki-client