Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/65B632F087F111F0925FD91AC4F9AE02.roa
File:                     65B632F087F111F0925FD91AC4F9AE02.roa (raw, json)
Hash identifier:          0AtCToyAJ7l48mKL3JXeNDu7r9lw10sVIf4dyWNXevs=
Subject key identifier:   BC:B5:2A:C4:4A:D2:5E:0A:5B:ED:D3:B1:50:B5:AF:D2:AA:1A:F5:0F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31E8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/65B632F087F111F0925FD91AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:26:28 +0000
ROA not before:           Mon 06 Jul 2026 16:26:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153956
IP address blocks:        144.79.232.0/23 maxlen: 23
                          165.99.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12776 (0x31e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:26:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd734-a535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:74:86:08:af:b6:3f:19:23:8e:a2:ec:05:
                    6a:54:66:a1:7b:2e:93:5c:fc:e9:13:4c:ae:3b:b4:
                    3e:12:71:92:b1:f5:e7:4a:11:28:a2:eb:28:70:73:
                    91:09:04:d5:02:42:1d:bf:11:84:6a:bc:2e:39:fb:
                    88:68:d6:39:55:01:78:b8:fd:c8:29:bc:db:53:59:
                    8b:32:a0:29:28:b1:c5:ff:96:ef:0c:36:d3:9e:d9:
                    4e:60:1b:dd:ca:5b:6c:04:84:af:35:86:e2:a8:ed:
                    ff:d1:13:c8:72:a2:87:7e:4c:22:b9:4c:0f:85:95:
                    77:1a:9e:20:13:04:2c:21:87:9c:bf:bf:01:3f:e3:
                    7e:c8:4f:98:7f:fe:30:eb:68:e2:b3:e8:d8:11:90:
                    ac:66:b6:a8:84:1f:6d:18:f6:90:4e:d8:fe:4d:25:
                    6c:d7:6f:1c:fb:36:05:05:36:5d:3c:a3:25:48:55:
                    a8:65:aa:4f:fb:aa:32:7d:ec:3b:89:24:a1:0a:78:
                    3c:87:d4:bb:91:0a:1e:ca:0c:12:5e:02:f7:58:cd:
                    23:96:56:2f:c9:e1:1e:a4:35:2b:75:55:fa:6d:61:
                    48:54:ac:42:5e:29:8d:f5:f4:91:04:3b:a4:3b:10:
                    47:29:92:fb:17:24:e0:ea:91:9b:d1:b8:7f:d4:6d:
                    37:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B5:2A:C4:4A:D2:5E:0A:5B:ED:D3:B1:50:B5:AF:D2:AA:1A:F5:0F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/65B632F087F111F0925FD91AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.232.0/23
                  165.99.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:c3:15:84:06:d1:01:af:23:78:4e:38:9b:1e:4a:40:a0:45:
         76:90:c6:a3:c3:e5:6c:50:87:d1:f3:6f:db:20:c8:ce:b3:70:
         68:21:50:8d:f3:05:87:bb:0f:9f:6c:63:ad:b3:8b:74:fe:7d:
         08:e6:3c:49:1b:65:6c:40:a8:4f:50:c0:1d:fe:7c:5c:44:15:
         17:e4:28:9f:08:31:fc:0a:a9:c6:e3:58:60:a0:c4:89:75:b6:
         ea:d0:27:26:57:0f:ed:fe:10:ca:2c:82:c3:79:a1:35:39:ef:
         f6:b4:51:5f:fd:77:16:b3:ae:92:1d:8d:30:4c:2c:af:a1:0f:
         32:82:99:69:0f:54:ad:b3:5b:46:6d:f3:5b:77:73:fb:e6:80:
         38:d1:19:9b:b5:c8:a5:da:a7:b9:d8:d7:98:48:56:0a:74:53:
         fd:82:23:da:00:3a:4e:a3:13:45:87:35:54:5d:e7:be:4e:f5:
         12:7d:01:3f:d2:b6:78:31:a8:fb:c0:25:23:2c:85:2b:07:64:
         55:3a:48:c8:fd:26:fb:86:c4:fa:c8:e8:ba:00:e7:e6:d7:33:
         01:21:2d:83:7f:b0:c3:2b:2e:b4:96:f8:f4:67:04:a8:dc:ce:
         53:45:22:c0:d3:9f:3c:15:46:a6:4a:c3:02:b0:ee:94:fb:07:
         7e:f9:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:37 2026 by rpki-client