Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7903579ECF6711F0B2E7B738C4F9AE02.roa
File:                     7903579ECF6711F0B2E7B738C4F9AE02.roa (raw, json)
Hash identifier:          wCx0C4p7StJDdv19UOUpNexzOkoNALCj3c1g9a6/Bnc=
Subject key identifier:   0C:A0:45:AA:DA:E7:C3:18:D9:4C:AE:26:34:87:9A:75:0F:16:A5:AB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30EC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7903579ECF6711F0B2E7B738C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:18:10 +0000
ROA not before:           Mon 06 Jul 2026 16:18:10 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138797
IP address blocks:        138.252.232.0/24 maxlen: 24
                          138.252.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12524 (0x30ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:18:10 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd542-95e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:60:23:02:52:b8:bb:e2:96:ba:c5:95:32:
                    cf:3d:ba:6e:fd:c3:e8:1b:34:ed:16:15:ef:4d:f2:
                    6a:d8:b4:7f:92:44:39:b1:5d:a6:5e:6b:06:f0:52:
                    00:93:ab:42:1e:43:5a:76:a7:8e:38:14:21:30:a2:
                    0a:ae:b9:23:70:df:c2:58:f1:93:d6:97:b2:ab:9c:
                    59:40:9f:c7:7e:77:f9:a9:3b:1c:da:fd:5c:7f:99:
                    28:1c:ed:76:cb:21:1d:02:8a:c9:cc:15:8e:f3:67:
                    0a:5c:b0:ac:e6:f4:2d:37:38:72:89:be:8c:f0:aa:
                    b7:96:75:43:fb:94:70:b9:68:34:74:2f:01:af:d8:
                    6b:40:b8:fc:1d:26:2b:6b:a4:b2:a1:04:8c:3f:c7:
                    4f:64:90:a3:6f:7a:c9:3b:4c:d9:6d:8c:17:35:1e:
                    97:75:37:c7:33:ac:6f:92:98:76:3c:f6:e1:61:fd:
                    32:26:14:0c:a4:e4:52:1b:0c:f5:89:67:8d:10:fc:
                    5d:af:b5:5d:d6:2e:e1:72:f4:ea:96:b5:12:57:76:
                    f8:8c:66:04:dd:04:ac:24:af:19:bc:46:c1:4b:57:
                    22:6b:d4:bf:23:bc:8a:94:a3:57:45:04:db:97:67:
                    a0:18:20:ff:9c:b5:d1:f5:a5:bc:b7:b7:bf:b8:01:
                    42:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:45:AA:DA:E7:C3:18:D9:4C:AE:26:34:87:9A:75:0F:16:A5:AB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7903579ECF6711F0B2E7B738C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:91:75:ca:53:0c:6d:01:26:63:a3:aa:aa:9c:52:2a:f8:c2:
         64:f2:d3:73:92:98:b8:92:07:1a:9f:68:e9:92:f6:3f:34:9f:
         4d:23:c6:6d:23:73:cb:32:39:ea:0c:9a:cc:45:f6:d8:cd:28:
         80:b7:48:75:d7:c1:98:c7:fe:74:69:02:07:25:e5:df:b5:9c:
         26:1b:fc:af:91:1d:f7:2b:96:ba:26:a6:78:2d:17:9c:11:67:
         c7:b6:25:a6:62:ef:8d:11:52:8b:b0:ea:73:8d:7e:c4:64:ac:
         cd:7c:a3:2d:db:59:09:18:2e:51:62:c5:09:03:df:3b:d8:1a:
         5f:02:6a:4f:72:4e:7f:08:cf:83:7b:05:6e:f1:d3:1d:4a:cf:
         a6:a5:4f:9d:ae:ab:7c:8b:d5:8c:65:0d:be:b3:86:0a:5a:6c:
         49:13:c3:77:b1:ba:ad:af:50:75:d4:be:61:7c:3d:76:b5:cf:
         1f:03:6a:3b:80:aa:c0:58:c1:75:8d:5a:cc:14:c5:6d:29:a4:
         e3:76:f4:1d:a1:07:5f:82:e1:fd:aa:42:81:4d:7c:1a:47:e2:
         ef:ca:b7:ff:44:81:c5:7c:53:18:b3:c0:58:bd:7c:f8:79:83:
         37:c0:f6:4f:5a:4d:40:e8:a0:41:81:1d:f5:80:ce:cb:46:0d:
         f9:17:a9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:58 2026 by rpki-client