Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
File:                     54F6A0BECB7911F09243C583C4F9AE02.roa (raw, json)
Hash identifier:          W8fIdG6Ho18YaU228pnpuDZzm1hkcmHKVdDikVkzAh4=
Subject key identifier:   49:4D:78:5C:81:5C:FA:AD:59:5A:53:C8:C6:72:3A:15:99:39:D5:04
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       320C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:27:37 +0000
ROA not before:           Mon 06 Jul 2026 16:27:37 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154391
IP address blocks:        144.79.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12812 (0x320c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:27:37 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd779-9960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:53:a2:ba:d3:6a:02:cf:ad:d7:7c:e5:83:20:
                    59:39:33:0c:06:56:e5:de:75:5b:73:7c:91:2b:d0:
                    38:53:ee:86:8d:77:b6:52:0a:62:ea:bf:d6:83:18:
                    67:26:4a:23:6e:7a:ab:02:d1:77:ed:e0:0b:64:e4:
                    74:64:d0:99:f4:86:6b:63:21:2e:56:cd:75:4a:f4:
                    d7:b9:58:6d:b1:e4:b8:c2:15:94:e6:e5:fe:28:7a:
                    56:8e:10:ca:79:24:1f:fd:6d:0e:57:8a:03:0f:48:
                    c9:32:78:9d:ee:33:30:28:cc:52:03:a7:23:7d:47:
                    5f:98:60:1c:de:52:ba:fc:e6:08:5b:fe:e8:f5:83:
                    2d:56:03:3a:7c:0c:26:97:1f:6c:07:c8:28:ba:60:
                    55:be:ba:bc:9d:78:29:b7:14:87:3e:51:66:06:80:
                    87:c8:0e:7d:7b:49:4e:34:27:61:c0:16:c2:ea:bb:
                    88:66:fa:3a:62:fa:69:1d:8a:1a:51:35:46:1a:1e:
                    85:53:ee:e9:00:3f:ed:8b:36:44:b9:9b:aa:7e:10:
                    2a:13:e5:84:88:e8:e7:44:9f:ef:b0:52:2c:53:a2:
                    cf:29:8d:20:8f:d4:82:89:a8:25:25:20:b1:40:6d:
                    94:cb:a9:d3:01:31:4d:16:03:34:14:d7:17:f9:d1:
                    ef:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4D:78:5C:81:5C:FA:AD:59:5A:53:C8:C6:72:3A:15:99:39:D5:04
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:d8:b8:c7:02:2d:78:7d:4b:0d:9c:26:78:de:39:a1:15:b3:
         3f:73:8a:97:81:c8:8f:62:77:31:1a:68:33:4f:ed:cf:12:60:
         4e:83:ce:8b:2b:42:4b:a4:f8:7d:fd:24:5f:a0:9d:82:af:a4:
         07:f5:ec:b1:e9:52:31:1c:15:96:95:e0:00:38:3d:9d:81:41:
         90:99:40:bf:cf:b4:8a:82:b0:9a:bb:5d:ed:99:92:0c:63:1b:
         67:0b:2f:5a:ab:a0:85:7c:55:8c:9e:4d:d8:a6:5e:3a:0b:fb:
         7a:91:88:be:f1:9b:80:b6:f9:41:43:3f:41:23:9e:bf:76:e9:
         88:95:fe:95:54:24:af:e2:14:55:41:68:b7:bb:e0:1d:50:2b:
         79:f8:4c:65:7f:53:36:61:87:fd:d6:ab:b0:8b:23:1d:13:29:
         b0:10:76:6a:ec:f4:c6:d4:3e:b5:92:01:c4:27:e0:5d:03:3a:
         5e:0c:0a:dc:94:55:0d:4e:47:07:36:16:8a:7c:11:49:32:e1:
         64:53:b8:b6:de:d9:48:6c:44:75:82:eb:c9:ae:e7:84:6b:d6:
         e6:11:03:73:01:d5:76:55:bf:96:9f:13:c6:51:be:18:0e:0a:
         89:f7:20:83:7a:a4:1a:e6:f5:3e:20:d3:2a:84:04:24:4b:19:
         25:6a:cb:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:56 2026 by rpki-client