Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/50EF0656447211F195C40F819A833773.roa
File:                     50EF0656447211F195C40F819A833773.roa (raw, json)
Hash identifier:          R2R6RT0NOhEmYOtN4fyGAnvxD48JvghYbJGA8OsEkLM=
Subject key identifier:   7D:DB:45:11:7C:30:AD:5D:6B:8C:5D:17:B0:59:6F:DF:05:11:5B:00
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F30
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/50EF0656447211F195C40F819A833773.roa
Signing time:             Sun 31 May 2026 16:24:02 +0000
ROA not before:           Sun 31 May 2026 16:24:02 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152157
IP address blocks:        162.4.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12080 (0x2f30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:24:02 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60a2-fa61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:b1:1b:d2:a8:a7:8e:cb:c2:0b:76:fa:22:
                    d6:32:2f:c5:4f:bf:53:d2:be:ef:a2:90:3d:7f:f6:
                    18:ab:ec:86:68:f8:a8:dc:e6:77:a6:60:57:a6:c4:
                    a2:22:e9:a5:4f:07:b9:36:62:02:75:39:1a:7e:67:
                    96:02:10:a5:e5:b4:da:45:cd:6d:43:d9:8c:53:7c:
                    39:62:ea:0c:5e:f1:f1:af:f1:11:a1:7c:7a:aa:f0:
                    c4:bf:89:19:b5:a9:6c:1c:84:bf:a3:9d:c6:ea:23:
                    e1:e5:b4:d3:78:81:12:b2:d0:66:70:ef:d9:ad:fc:
                    dc:3d:46:3b:30:60:d5:d9:14:82:3d:d1:30:17:78:
                    6e:50:38:49:9c:2a:c3:f4:45:74:7b:4d:fb:cf:9e:
                    05:d4:60:a7:7b:aa:c4:50:7c:27:2a:a2:74:3b:c6:
                    d3:72:81:49:2c:47:04:b4:3e:91:0f:0e:ad:a9:4f:
                    3f:16:68:8d:57:c5:b0:a8:49:09:d4:f7:98:73:13:
                    77:05:a8:39:0b:d2:bb:a7:c4:17:fd:2e:0b:80:47:
                    32:14:ba:0e:28:9e:2a:6f:cc:3b:5d:75:e0:b5:00:
                    4e:52:e5:75:e0:d8:35:db:fa:31:15:67:99:dd:f5:
                    19:9a:0b:be:b3:2b:a5:e6:cb:b1:9f:44:9b:c6:85:
                    14:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DB:45:11:7C:30:AD:5D:6B:8C:5D:17:B0:59:6F:DF:05:11:5B:00
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/50EF0656447211F195C40F819A833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:cf:31:de:70:2f:46:f5:62:9f:40:f9:6a:dc:06:b7:75:91:
         fb:c1:b3:98:a4:a4:8c:74:51:e6:0e:33:13:cf:4a:93:47:86:
         c2:c1:7a:83:90:42:fa:03:4e:7f:75:15:51:bf:6c:7d:ba:d2:
         6a:82:56:1f:c7:ae:3e:31:97:4f:7e:fc:3a:4b:43:20:0e:9b:
         75:41:2a:90:84:fa:c8:63:c7:9c:cd:07:87:38:24:0f:2b:87:
         c5:65:dd:64:57:4d:f8:68:11:11:60:cc:7c:2a:d9:b3:57:fb:
         d7:41:28:7d:24:e9:54:d6:63:f1:f6:e2:4e:75:5b:da:1d:c8:
         0d:af:b9:ef:d9:6f:c3:9e:1a:b2:f1:d2:14:a9:a6:d0:63:27:
         34:67:42:46:cc:f1:ea:f4:4a:e5:30:11:cf:8c:5b:88:c8:0a:
         a4:d3:24:b3:6c:56:e2:ba:54:11:4b:5d:e6:89:3c:7a:9c:e9:
         a1:61:04:2e:73:dc:27:57:17:44:be:9c:8b:33:99:8a:9e:c4:
         cf:27:51:9f:3e:f2:12:dc:3c:56:1d:f8:0c:33:a6:a0:93:11:
         e6:71:25:90:34:56:b1:c7:b1:af:29:f9:a0:d3:ed:ed:f3:f2:
         61:27:1c:68:a3:0e:e7:8b:ef:8d:8f:2c:6b:3c:7e:3d:ca:93:
         85:60:09:b8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLzAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNDAyWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjBhMi1mYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu9exG9Kop47Lwgt2+iLWMi/FT79T0r7vopA9f/YYq+yGaPio3OZ3pmBXpsSi
IumlTwe5NmICdTkafmeWAhCl5bTaRc1tQ9mMU3w5YuoMXvHxr/ERoXx6qvDEv4kZ
talsHIS/o53G6iPh5bTTeIESstBmcO/ZrfzcPUY7MGDV2RSCPdEwF3huUDhJnCrD
9EV0e037z54F1GCne6rEUHwnKqJ0O8bTcoFJLEcEtD6RDw6tqU8/FmiNV8WwqEkJ
1PeYcxN3Bag5C9K7p8QX/S4LgEcyFLoOKJ4qb8w7XXXgtQBOUuV14Ng12/oxFWeZ
3fUZmgu+syul5suxn0SbxoUUpwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH3bRRF8
MK1da4xdF7BZb98FEVsAMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTBFRjA2NTY0
NDcyMTFGMTk1QzQwRjgxOUE4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBogQqMA0GCSqGSIb3DQEBCwUAA4IBAQC2zzHecC9G9WKfQPlq3Aa3
dZH7wbOYpKSMdFHmDjMTz0qTR4bCwXqDkEL6A05/dRVRv2x9utJqglYfx64+MZdP
fvw6S0MgDpt1QSqQhPrIY8eczQeHOCQPK4fFZd1kV034aBERYMx8KtmzV/vXQSh9
JOlU1mPx9uJOdVvaHcgNr7nv2W/Dnhqy8dIUqabQYyc0Z0JGzPHq9ErlMBHPjFuI
yAqk0ySzbFbiulQRS13miTx6nOmhYQQuc9wnVxdEvpyLM5mKnsTPJ1GfPvIS3DxW
HfgMM6agkxHmcSWQNFaxx7GvKfmg0+3t8/JhJxxoow7ni++NjyxrPH49ypOFYAm4
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:48 2026 by rpki-client