Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6256A10C114511F18262C1C3213D8C67.roa
File:                     6256A10C114511F18262C1C3213D8C67.roa (raw, json)
Hash identifier:          tWXSQNOcY1fnVuKDjQc0w1LEF9iGvVf5fuArVDNwWO4=
Subject key identifier:   45:A2:E3:BF:DB:02:93:73:4B:8D:5C:28:DF:01:71:90:AE:81:19:13
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FE9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6256A10C114511F18262C1C3213D8C67.roa
Signing time:             Sun 31 May 2026 16:29:59 +0000
ROA not before:           Sun 31 May 2026 16:29:59 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154464
IP address blocks:        144.79.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12265 (0x2fe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:29:59 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6207-1f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:16:ae:01:a2:75:72:58:85:71:b6:21:46:03:
                    79:ec:46:6f:6a:5b:4f:c8:c1:31:24:66:8c:c4:a4:
                    e3:4d:7f:01:2b:b3:b4:aa:13:25:0c:8b:9d:d4:b7:
                    64:79:75:03:19:45:5b:44:f8:97:4b:ec:5f:ce:7a:
                    b9:cb:63:1b:7d:b8:6c:70:27:f3:4d:44:26:37:6e:
                    66:39:5c:66:3b:85:5c:db:f7:50:00:02:0f:88:ca:
                    58:76:0d:ce:ce:d9:41:33:2a:81:38:9d:16:c9:35:
                    9b:40:f1:d3:a3:74:df:dc:3b:a9:95:6a:5e:d1:b3:
                    3a:5f:e9:bb:01:80:9f:41:8c:c1:c5:4a:1d:64:e0:
                    11:ed:1e:65:0d:4b:c1:20:32:f6:31:ae:a8:8f:ce:
                    9c:a1:28:d1:7e:4f:e9:bb:4c:05:28:50:77:40:ef:
                    f0:9b:36:a0:3c:bb:2f:67:7e:48:f3:cb:86:47:20:
                    82:c9:30:23:4d:df:99:91:5b:e2:42:56:d7:95:5e:
                    77:dd:30:11:52:c7:83:0f:7b:c5:fd:08:7e:c4:28:
                    5c:f0:55:39:dc:17:23:65:08:8b:d8:9a:38:4e:73:
                    2c:70:81:78:9a:80:f2:b9:a2:3f:af:d1:4a:3d:b1:
                    21:ad:65:e4:54:27:1d:91:8d:28:c6:51:b7:87:74:
                    6b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:E3:BF:DB:02:93:73:4B:8D:5C:28:DF:01:71:90:AE:81:19:13
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6256A10C114511F18262C1C3213D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:53:0e:a1:64:0a:6b:87:ca:7b:5b:75:7e:e6:f0:cf:30:a0:
         cd:cf:e5:81:a9:87:06:6e:03:97:9d:41:1a:a9:97:a0:09:d8:
         4c:6a:18:08:6f:3a:fc:9d:05:28:91:8e:09:60:59:73:3b:db:
         6b:9e:71:40:ee:d7:14:d4:c2:92:a1:cb:27:02:0b:38:fa:55:
         cd:95:18:bc:56:a3:d5:b4:2b:d6:48:95:70:6d:5c:20:24:57:
         93:69:31:c4:da:58:49:c8:16:d5:39:b7:cf:f0:ae:71:1a:bf:
         3a:2b:21:27:5d:ad:a8:ce:3b:07:17:fa:d9:d7:7d:75:22:f8:
         87:2a:96:fb:88:21:c6:e6:67:bf:a8:ec:dd:48:b8:9f:69:29:
         ba:97:e8:aa:98:42:57:c0:82:d2:5c:43:54:c1:cc:ea:6d:b6:
         b2:af:17:50:cd:1c:70:b4:17:57:f5:59:6b:2f:38:10:bb:bd:
         df:3d:15:5c:71:ad:d7:0c:a9:ba:d2:4e:10:b8:52:74:fb:15:
         d4:36:be:18:0d:0b:07:0b:3e:bc:05:e0:72:e8:f8:df:a3:2c:
         76:95:9c:6b:be:3a:a7:a9:e1:9e:31:c0:95:be:82:06:ea:74:
         17:5f:c9:b7:f5:84:69:82:bd:b9:04:83:16:a6:56:35:c5:4d:
         9e:7f:99:d8
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyOTU5WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjIwNy0xZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4hauAaJ1cliFcbYhRgN57EZvaltPyMExJGaMxKTjTX8BK7O0qhMlDIud1Ldk
eXUDGUVbRPiXS+xfznq5y2MbfbhscCfzTUQmN25mOVxmO4Vc2/dQAAIPiMpYdg3O
ztlBMyqBOJ0WyTWbQPHTo3Tf3DuplWpe0bM6X+m7AYCfQYzBxUodZOAR7R5lDUvB
IDL2Ma6oj86coSjRfk/pu0wFKFB3QO/wmzagPLsvZ35I88uGRyCCyTAjTd+ZkVvi
QlbXlV533TARUseDD3vF/Qh+xChc8FU53BcjZQiL2Jo4TnMscIF4moDyuaI/r9FK
PbEhrWXkVCcdkY0oxlG3h3RrmwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEWi47/b
ApNzS41cKN8BcZCugRkTMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjI1NkExMEMx
MTQ1MTFGMTgyNjJDMUMzMjEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBkE/AMA0GCSqGSIb3DQEBCwUAA4IBAQBFUw6hZAprh8p7W3V+5vDP
MKDNz+WBqYcGbgOXnUEaqZegCdhMahgIbzr8nQUokY4JYFlzO9trnnFA7tcU1MKS
ocsnAgs4+lXNlRi8VqPVtCvWSJVwbVwgJFeTaTHE2lhJyBbVObfP8K5xGr86KyEn
Xa2ozjsHF/rZ1311IviHKpb7iCHG5me/qOzdSLifaSm6l+iqmEJXwILSXENUwczq
bbayrxdQzRxwtBdX9VlrLzgQu73fPRVcca3XDKm60k4QuFJ0+xXUNr4YDQsHCz68
BeBy6Pjfoyx2lZxrvjqnqeGeMcCVvoIG6nQXX8m39YRpgr25BIMWplY1xU2ef5nY
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:45 2026 by rpki-client