Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5619D034AFCB11F09D9DF548C4F9AE02.roa
File:                     5619D034AFCB11F09D9DF548C4F9AE02.roa (raw, json)
Hash identifier:          15PoZ8EVOEB61QHM7QNX8Y+RRzdb+fXFnTVHI3XT98Y=
Subject key identifier:   84:65:0C:17:C2:5D:60:5F:6F:B0:75:68:CB:D6:8F:EC:08:B0:F6:52
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31F6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5619D034AFCB11F09D9DF548C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:26:56 +0000
ROA not before:           Mon 06 Jul 2026 16:26:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154055
IP address blocks:        165.101.192.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12790 (0x31f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:26:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd750-722e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a3:f5:7b:a9:36:0b:ca:a0:eb:8b:04:62:a2:
                    32:f2:6a:2e:eb:e6:34:5f:dd:16:44:35:d5:0b:4f:
                    bb:3f:37:16:2c:bd:f4:44:b8:57:43:a1:c6:9d:5a:
                    6a:a1:89:22:33:42:e4:fe:9f:cd:7f:91:f0:21:c6:
                    87:17:7b:7b:67:01:3f:84:a8:fc:dc:ba:dc:01:ba:
                    c3:be:33:91:cc:78:24:8b:84:82:31:07:29:ea:9c:
                    ae:73:64:66:ab:c5:52:e0:73:a4:a6:b5:7a:60:46:
                    ad:6f:07:1a:fd:ef:a4:0b:22:e5:98:3d:4b:13:0c:
                    b1:37:09:64:24:57:19:e4:48:3f:cf:4f:12:4a:c8:
                    b4:da:83:6f:c7:e6:59:46:b7:1f:12:e7:07:eb:d2:
                    6a:83:47:20:7a:a8:8f:bf:a0:4a:05:a3:af:41:11:
                    57:dc:0b:da:59:33:ab:14:6b:20:6e:c9:88:7e:62:
                    4d:bc:46:5c:f0:ae:9d:ad:5e:4e:69:bd:a5:6b:5e:
                    01:8e:dd:20:1c:7a:b3:50:e1:f0:0b:7b:46:84:92:
                    bf:8e:f8:e0:9b:df:da:b7:3f:f3:cf:17:8a:2b:5d:
                    4a:a3:d3:b3:03:b7:21:9d:b6:a0:28:45:12:2d:fd:
                    c3:8c:44:c1:97:96:cc:6f:41:08:b1:41:80:46:cd:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:65:0C:17:C2:5D:60:5F:6F:B0:75:68:CB:D6:8F:EC:08:B0:F6:52
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5619D034AFCB11F09D9DF548C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:80:0b:f6:e3:b1:96:d5:cb:e3:37:6c:3a:ad:39:58:04:
         30:4b:4a:35:cc:fb:d3:62:f0:09:72:e1:7e:e5:d4:c5:22:66:
         22:c0:a9:c1:29:9c:91:75:97:f4:4c:3a:bc:8b:10:45:23:40:
         22:ce:2b:c1:5b:35:29:f9:1e:27:e1:1d:06:f3:7d:ee:f9:71:
         0c:81:28:56:74:f5:21:9e:cd:00:d9:88:d1:f3:85:82:85:bf:
         79:67:1d:fb:95:52:e4:ec:35:d8:4c:6b:36:cd:e7:ef:b6:4f:
         15:78:a1:ea:b2:e7:b4:7a:61:93:d0:92:e4:f2:ff:5e:90:9c:
         15:9e:54:ac:f4:f2:07:40:02:bf:83:34:7b:fd:76:d4:7e:4e:
         73:61:4a:91:c1:fa:80:ac:62:9d:3a:77:2f:8f:07:64:f0:4f:
         1c:e5:2f:95:09:4b:ba:dc:ed:16:c7:4d:7d:7c:54:2a:47:23:
         25:87:cf:fa:71:60:12:c4:c0:c1:06:14:1d:70:ff:0b:94:71:
         fd:b5:96:a8:9b:fd:67:fe:2d:8e:1d:89:61:d8:58:6e:b1:83:
         8e:4d:11:f4:4c:f6:1c:6e:0b:f3:42:e6:c9:62:f8:ec:16:5e:
         eb:8b:3a:aa:9f:78:e4:83:f5:e9:2e:db:1d:fa:67:67:b0:2d:
         87:03:2f:5d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNjU2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDc1MC03MjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn6P1e6k2C8qg64sEYqIy8mou6+Y0X90WRDXVC0+7PzcWLL30RLhXQ6HGnVpq
oYkiM0Lk/p/Nf5HwIcaHF3t7ZwE/hKj83LrcAbrDvjORzHgki4SCMQcp6pyuc2Rm
q8VS4HOkprV6YEatbwca/e+kCyLlmD1LEwyxNwlkJFcZ5Eg/z08SSsi02oNvx+ZZ
RrcfEucH69Jqg0cgeqiPv6BKBaOvQRFX3AvaWTOrFGsgbsmIfmJNvEZc8K6drV5O
ab2la14Bjt0gHHqzUOHwC3tGhJK/jvjgm9/atz/zzxeKK11Ko9OzA7chnbagKEUS
Lf3DjETBl5bMb0EIsUGARs02PwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIRlDBfC
XWBfb7B1aMvWj+wIsPZSMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTYxOUQwMzRB
RkNCMTFGMDlEOURGNTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBpWXAMA0GCSqGSIb3DQEBCwUAA4IBAQBzOoAL9uOxltXL4zdsOq05
WAQwS0o1zPvTYvAJcuF+5dTFImYiwKnBKZyRdZf0TDq8ixBFI0AizivBWzUp+R4n
4R0G833u+XEMgShWdPUhns0A2YjR84WChb95Zx37lVLk7DXYTGs2zefvtk8VeKHq
sue0emGT0JLk8v9ekJwVnlSs9PIHQAK/gzR7/XbUfk5zYUqRwfqArGKdOncvjwdk
8E8c5S+VCUu63O0Wx019fFQqRyMlh8/6cWASxMDBBhQdcP8LlHH9tZaom/1n/i2O
HYlh2FhusYOOTRH0TPYcbgvzQubJYvjsFl7rizqqn3jkg/XpLtsd+mdnsC2HAy9d
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:07 2026 by rpki-client