Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6998246AD1D311F0976F4D75C4F9AE02.roa
File:                     6998246AD1D311F0976F4D75C4F9AE02.roa (raw, json)
Hash identifier:          9ZXBFc0xbpDa3Q4MNbU7m+wjzJ/Ei6CimMofoHcLKBQ=
Subject key identifier:   77:14:C4:48:23:5F:EE:1D:0F:95:14:3D:7F:F8:E5:6D:FD:F8:54:01
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FE2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6998246AD1D311F0976F4D75C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:29:45 +0000
ROA not before:           Sun 31 May 2026 16:29:45 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154403
IP address blocks:        144.79.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12258 (0x2fe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:29:45 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c61f9-60e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:84:18:47:d8:c0:fe:9f:92:00:90:19:83:
                    2b:53:ee:42:01:2e:1d:a2:72:cd:84:76:64:5e:0a:
                    20:ef:2b:44:73:75:0d:ff:85:eb:a5:f6:cb:55:fd:
                    2d:31:65:c3:ea:0a:27:3b:99:d7:d7:5e:0e:93:a3:
                    01:67:2b:62:a4:25:7e:00:46:85:b2:f5:c0:7f:04:
                    89:bf:04:54:04:c6:71:77:86:57:df:2b:16:ea:74:
                    c3:f1:77:0e:99:cf:b2:41:57:7f:c7:c2:e5:30:46:
                    8f:73:de:d9:f3:72:5d:92:0f:27:77:af:5d:54:ee:
                    00:2c:e0:7a:cb:b7:e1:96:ce:8d:cc:d1:b6:30:02:
                    59:80:c4:21:11:f0:d1:9a:37:f5:ff:b3:88:64:a1:
                    f2:ba:ed:6d:80:6e:c8:56:3d:24:74:fe:7e:2e:a1:
                    0e:64:4c:d4:3e:89:3b:c0:da:93:4d:d7:08:a1:4f:
                    74:da:f8:ed:82:90:9f:35:d1:ec:95:f9:56:cc:5b:
                    f1:c6:11:89:e6:81:d0:8a:a1:2a:f8:47:1a:42:ff:
                    6e:fb:1c:dd:f3:a8:80:13:8a:77:0e:97:97:c9:6c:
                    dd:d3:df:8e:14:28:61:27:52:29:ec:6b:02:92:44:
                    f5:3b:7d:e2:4c:a0:42:e4:70:11:c9:8b:0b:95:b2:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:14:C4:48:23:5F:EE:1D:0F:95:14:3D:7F:F8:E5:6D:FD:F8:54:01
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6998246AD1D311F0976F4D75C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:5c:85:35:e6:33:11:58:8f:6b:7e:f2:11:74:d6:05:54:12:
         4a:39:11:ed:bb:a1:01:47:80:ad:71:c8:f3:86:e9:11:f6:d4:
         b8:b0:15:2e:52:37:8e:ad:de:08:76:e0:06:1e:4a:6b:2b:85:
         df:74:69:4c:80:25:75:8f:5c:6c:71:70:d0:cf:e9:c1:e7:56:
         8d:9e:e8:87:0a:14:69:0c:d9:65:12:fd:e2:da:d9:18:3c:fd:
         bc:1d:e2:2c:d9:f2:0d:81:e5:7f:3d:43:1c:c8:4f:85:6d:a6:
         c6:33:3c:11:e2:51:58:36:b1:df:c1:df:5c:6d:b1:ad:48:1f:
         5e:54:19:bb:80:29:c9:d7:a9:39:2f:4e:c4:7b:ed:ba:64:d0:
         2e:a6:be:13:20:97:7c:b0:54:86:c5:2a:1a:c4:40:16:f8:78:
         39:f1:a3:4a:de:e6:0d:12:af:82:a0:eb:07:28:b4:b4:f9:65:
         68:54:5d:37:12:d6:5e:0b:a6:9b:3a:d5:63:13:d9:ab:51:61:
         5f:fe:63:98:e0:e2:97:0d:6f:7d:21:60:6f:da:3b:14:4a:9c:
         2d:a3:48:d1:68:49:54:df:01:3f:55:e5:f7:14:71:82:a8:94:
         40:7f:cb:f8:ee:09:d8:b3:a9:6b:d0:f2:3a:34:48:f2:a0:e8:
         dc:7e:e3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:09:27 2026 by rpki-client