Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa
File:                     5535DEF8DE2311EFA15D0950C4F9AE02.roa (raw, json)
Hash identifier:          2mqiei66VCxaGVSXKZYle+aT6esHBD7p9NTmoqUT0vM=
Subject key identifier:   AD:E3:78:AB:AF:06:B5:1B:BA:70:A1:12:97:76:E3:C1:85:EE:A2:55
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E84
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:18:33 +0000
ROA not before:           Sun 31 May 2026 16:18:33 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134320
IP address blocks:        157.20.196.0/24 maxlen: 24
                          157.20.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11908 (0x2e84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:18:33 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f58-2b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e5:2e:9c:47:dc:e5:5e:db:f5:bc:25:f0:ba:
                    b7:04:d2:7b:fd:16:0f:f9:66:55:fa:5e:99:be:10:
                    de:0d:af:be:35:d5:42:66:f2:85:b6:9e:2a:2f:fd:
                    8c:d9:47:83:d5:6f:ca:d4:f8:d2:a1:a3:82:d9:37:
                    61:93:3b:be:63:a5:c8:2c:fb:f4:49:6c:8f:21:42:
                    93:f2:e4:f7:35:26:ae:75:ef:26:7b:16:7f:ea:07:
                    4d:fa:50:78:65:a8:3a:3b:e1:f3:ed:6a:0e:74:54:
                    c2:f3:f9:2a:e2:50:31:36:90:8e:64:4b:30:f6:a9:
                    b3:f2:bf:01:32:7b:22:68:39:bf:7f:de:19:6c:a9:
                    cf:e2:9a:b7:44:73:48:a0:49:20:4a:f2:0b:96:88:
                    9b:6d:a9:f4:d7:d7:cf:00:7c:f6:52:77:55:a2:19:
                    f3:05:be:9a:b4:3d:34:80:9d:42:2c:b9:3b:ea:f6:
                    db:81:43:b3:d7:af:a6:18:4a:0d:33:41:6a:d5:4f:
                    d7:af:0e:3b:c7:06:28:6c:03:62:f0:85:76:88:25:
                    b1:f3:d8:33:c1:bc:11:60:e0:f7:1c:c6:f2:dd:89:
                    79:07:1e:c0:ec:6c:97:81:59:c4:a9:e9:0a:0c:28:
                    c0:32:2e:bf:13:13:f6:c7:9d:7f:48:d9:f5:b1:85:
                    4b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E3:78:AB:AF:06:B5:1B:BA:70:A1:12:97:76:E3:C1:85:EE:A2:55
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5535DEF8DE2311EFA15D0950C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:8e:cc:9e:95:54:72:53:89:c0:88:7c:95:5b:e8:e7:e5:12:
         24:9b:cf:ea:03:8f:3d:c9:29:70:4b:d1:11:cf:3e:28:09:c9:
         5d:40:27:cb:9c:9f:19:55:98:a2:e9:db:ab:24:fc:da:91:20:
         9f:de:10:76:ed:08:ba:6e:60:f5:f0:e4:a8:0c:7a:7d:27:bd:
         9c:de:1c:95:65:e2:67:70:41:60:ec:0e:85:4a:7b:8d:b4:56:
         76:d5:2f:f4:d7:56:03:f3:27:76:49:04:9b:71:62:37:01:51:
         1c:28:61:23:25:c0:62:28:a0:dd:62:b3:d2:b1:6f:df:94:88:
         fa:f6:a8:31:69:02:05:f3:c6:16:3c:96:2a:14:1d:90:49:31:
         f8:17:fa:78:59:bf:98:84:93:92:5c:71:49:47:50:14:f6:79:
         69:1f:76:b1:cc:64:37:1d:4c:31:b9:67:6a:b9:9f:dd:93:73:
         b7:44:e5:a0:00:46:2c:43:9a:df:39:15:4b:49:69:e8:5f:ec:
         06:a3:c2:38:a8:e2:0e:ef:29:72:80:a5:d4:7b:53:4e:e6:55:
         b3:63:26:42:53:12:1c:f3:be:b3:f2:4d:e7:72:25:a9:02:4e:
         d5:c8:da:92:bb:a2:fe:24:7a:2a:dd:bb:6c:72:84:31:58:44:
         99:57:bd:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:30:02 2026 by rpki-client