Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
File:                     54F6A0BECB7911F09243C583C4F9AE02.roa (raw, json)
Hash identifier:          5+JJkPcpHNQXgIP1/o6Ml/UmmSPygXilulrb6rpZDwU=
Subject key identifier:   47:50:80:77:BE:17:B6:EE:C5:0B:C0:BC:F0:3C:24:00:CE:53:AB:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FE1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:29:44 +0000
ROA not before:           Sun 31 May 2026 16:29:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154391
IP address blocks:        144.79.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12257 (0x2fe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:29:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c61f8-6fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:e4:6d:53:30:46:ff:2e:5c:b5:80:18:dd:
                    fc:35:b1:2d:39:52:8d:f6:d3:ee:7f:ed:32:8d:ee:
                    2c:b0:62:1c:33:92:be:b0:d5:66:30:ac:dd:46:d1:
                    94:0a:1a:91:d7:74:e4:11:09:45:7f:b6:1c:2c:cd:
                    52:a2:5d:db:94:65:86:90:38:86:f4:86:fa:28:6b:
                    40:69:fe:e3:b3:fa:5e:4a:7a:f2:61:48:4e:02:64:
                    60:ec:c9:00:d5:63:07:8d:ad:04:ba:ad:d1:bc:1e:
                    f4:22:13:df:05:85:22:fe:5a:e2:49:96:55:96:d9:
                    36:96:55:c4:c0:66:be:35:aa:4b:51:b1:f7:78:54:
                    71:52:31:24:b1:e1:a3:0d:da:37:96:fb:22:9b:bd:
                    0d:d8:d1:28:0c:40:51:9c:7e:8d:3f:2a:6f:e4:fc:
                    73:7f:b2:3e:d2:6e:46:82:1a:ee:c8:35:e2:a0:ee:
                    4a:b0:6e:20:2a:14:51:b9:81:30:6a:13:dc:e0:78:
                    a1:60:70:60:b0:fb:cb:47:92:2a:03:df:95:ff:fd:
                    87:b6:f6:8e:75:19:42:c7:67:f0:44:88:82:70:83:
                    f0:12:fc:66:0c:42:ea:67:46:95:26:62:7e:58:f7:
                    df:a1:e3:e8:13:a5:42:21:fe:c4:f4:fa:49:f9:83:
                    cb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:50:80:77:BE:17:B6:EE:C5:0B:C0:BC:F0:3C:24:00:CE:53:AB:A9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:e3:0a:c6:19:92:f2:5e:fa:12:31:e7:e2:4a:7a:72:5d:09:
         05:7d:19:9b:c6:d9:32:8e:84:e2:4a:93:93:92:d3:27:3f:d9:
         2d:4a:f4:5e:7a:90:2b:b7:e4:47:74:fc:29:ea:e5:9a:ff:e3:
         9f:92:e0:28:41:62:16:83:97:25:d4:e0:f8:cb:65:3d:70:5c:
         33:b9:5f:3e:10:d2:c8:85:30:28:6b:9d:2a:3e:f5:b8:e8:41:
         3d:06:23:cd:ae:72:a1:f3:e3:3f:a1:e3:9f:1f:d2:72:5c:fd:
         9f:8c:27:4d:f0:50:37:74:0f:ce:88:7e:e4:c3:2a:5c:0e:ed:
         dc:58:8b:86:47:0b:c7:16:7c:e3:ca:5d:17:49:6b:ec:ad:63:
         c7:74:e7:5a:49:c5:4c:91:23:14:d2:3a:bf:f7:d5:1a:74:b7:
         aa:73:52:32:82:ca:93:9b:c3:ff:3a:19:3c:f8:07:9e:72:bd:
         7c:a1:52:5b:d6:09:4f:e4:ff:a8:fa:d5:bd:0b:6f:61:2e:63:
         07:7a:a1:a1:d4:2f:47:4e:5e:84:6a:79:a8:98:d2:1d:20:64:
         fe:d1:ae:fb:a9:c6:4e:a0:78:08:24:d0:ae:3f:bf:ca:16:25:
         55:a0:a1:d6:02:c5:4f:49:36:91:cd:aa:de:a2:ae:5f:cb:9b:
         78:2d:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:52 2026 by rpki-client