Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/549F91E8C44E11F0A5A9C62AC4F9AE02.roa
File:                     549F91E8C44E11F0A5A9C62AC4F9AE02.roa (raw, json)
Hash identifier:          Ek8YRtCthwm2wdNko71ys0VpvGTVhekbF85/bmOp3mI=
Subject key identifier:   55:D9:4D:88:8A:EF:96:8B:FE:11:9D:1A:99:22:57:E7:4F:1E:6B:B9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3206
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/549F91E8C44E11F0A5A9C62AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:27:26 +0000
ROA not before:           Mon 06 Jul 2026 16:27:26 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154333
IP address blocks:        138.252.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12806 (0x3206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:27:26 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd76e-8c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:5a:2f:ee:c4:68:1b:61:24:a0:9b:72:76:
                    fa:03:b2:8d:f4:45:9c:4f:92:4a:46:38:4b:d2:3f:
                    e6:3c:39:ce:d6:05:b0:d4:b5:d1:34:22:66:30:0f:
                    1f:b5:88:0d:f3:46:e3:c1:a2:40:76:b8:7e:db:02:
                    1d:9a:09:c9:8b:c5:68:a3:3b:61:48:6c:7d:81:a3:
                    b8:8e:c7:fc:f5:d4:b9:df:fd:e2:f6:69:45:48:7a:
                    42:5a:59:3c:cb:43:fc:73:88:60:29:a8:9f:21:25:
                    dd:98:b8:c6:f4:0a:ff:f6:7c:a2:2c:08:06:ff:de:
                    ce:73:af:84:30:02:34:a5:31:f7:f3:9d:a8:14:61:
                    3c:71:41:aa:9c:9e:47:4d:0f:ac:4d:05:f1:99:1e:
                    af:66:fe:1d:22:2a:dd:66:15:07:1b:03:ec:6d:cd:
                    69:2c:c8:f9:73:b6:62:5d:a1:d4:80:da:c4:c4:bd:
                    2f:ba:1f:e5:36:af:fc:d5:28:58:9f:88:3e:33:85:
                    43:b4:bb:4b:32:45:1c:48:63:24:c5:2c:98:97:38:
                    9e:97:75:84:c0:1e:6b:46:2a:08:44:fb:e4:99:a1:
                    b3:78:a4:45:1e:50:ca:11:39:59:87:f6:34:26:ed:
                    86:5f:b9:a6:d0:d5:36:25:cb:38:0d:64:c8:b6:3b:
                    61:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D9:4D:88:8A:EF:96:8B:FE:11:9D:1A:99:22:57:E7:4F:1E:6B:B9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/549F91E8C44E11F0A5A9C62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:44:cb:93:31:db:0c:c1:df:cb:ef:bf:d3:8d:90:c5:a0:51:
         23:e8:0b:24:2b:6f:bd:2e:15:9f:69:cb:d0:b2:82:94:cb:29:
         67:c3:b3:a8:9d:b5:09:be:83:c2:af:c0:51:08:31:28:14:c3:
         b3:4c:a7:01:90:60:39:97:24:7a:56:5d:88:f9:ff:31:3d:8a:
         96:5b:75:d7:4f:e4:14:c8:fc:56:50:18:b0:c4:53:0d:14:27:
         77:82:ec:59:37:94:29:c9:cf:e6:68:df:98:f7:79:a6:7b:f5:
         32:5d:3e:0d:d3:71:cf:1f:e6:ba:32:aa:25:a4:8a:8e:58:70:
         23:ee:6b:6b:fe:24:54:48:f1:bd:06:27:a7:ac:a0:10:3a:b3:
         34:ff:f4:b0:4b:b2:b4:f1:ad:8a:2e:68:a9:3d:ee:d3:85:ee:
         e2:77:13:61:0b:7c:5d:0b:b0:08:98:23:5c:41:ca:46:1b:c8:
         ad:ab:b1:2e:8c:86:e7:1e:91:a6:c2:07:b4:f6:d8:52:40:e3:
         e4:de:44:64:9e:f4:63:09:e2:56:aa:14:cd:d8:04:66:db:64:
         c0:fc:34:c2:e0:cd:bb:b3:89:d1:1f:5a:c1:40:d5:55:71:e0:
         b7:b5:29:95:d5:83:d5:23:87:33:ba:63:01:7e:1b:da:99:c1:
         3a:76:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:06 2026 by rpki-client