Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/79283136D0F711F0B0254259C4F9AE02.roa
File:                     79283136D0F711F0B0254259C4F9AE02.roa (raw, json)
Hash identifier:          p1/d5SAvz2x/+Ln50V5wI605oWrmQCdIe5WQ6auPiQE=
Subject key identifier:   7A:76:1F:F4:28:60:D0:B1:88:14:E9:8C:C1:21:E8:8A:9C:8D:6E:C4
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       311E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/79283136D0F711F0B0254259C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:19:48 +0000
ROA not before:           Mon 06 Jul 2026 16:19:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     147224
IP address blocks:        138.252.204.0/24 maxlen: 24
                          157.15.98.0/23 maxlen: 24
                          160.30.84.0/24 maxlen: 24
                          165.99.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12574 (0x311e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:19:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5a4-131d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:22:f3:d5:c1:0d:74:c6:6e:25:a7:d2:d9:
                    d1:b6:6f:f6:a0:47:48:7f:58:0f:b3:65:7f:08:bb:
                    f5:e2:e6:64:69:8a:a4:8d:bb:27:30:b4:49:59:0a:
                    3e:1c:05:6c:9c:ef:c9:47:27:28:fa:5d:0e:ef:99:
                    47:91:9f:38:ad:66:86:5f:17:11:74:3d:c5:8d:e2:
                    eb:ff:90:a3:58:c8:8e:1c:97:e2:d2:3d:83:e8:28:
                    c8:9a:c3:74:e5:b4:57:bc:4e:71:1e:5f:e5:6e:be:
                    62:63:f6:00:0f:ed:3f:c8:46:4a:31:15:ba:42:b5:
                    74:54:a7:95:cf:97:7b:73:d8:fb:7d:21:8d:90:c8:
                    a0:fd:85:c8:7c:47:64:e1:64:af:ab:73:d6:16:af:
                    f1:6d:19:e4:6f:46:9e:94:18:84:5a:4e:91:ad:42:
                    39:9c:bb:92:68:4a:70:70:c1:73:39:c3:9e:d2:83:
                    a6:96:45:81:a6:2c:2a:b2:24:da:50:4c:d8:51:55:
                    07:70:c0:7e:d4:00:f8:27:c5:e4:f4:db:4d:e5:ad:
                    5e:15:a3:16:57:72:42:69:2a:ab:3b:f0:5b:f1:77:
                    23:e3:98:3e:97:ff:36:3c:ab:e7:5d:06:74:21:8f:
                    57:26:27:02:77:bd:24:53:83:6c:8f:c1:cc:1d:bb:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:76:1F:F4:28:60:D0:B1:88:14:E9:8C:C1:21:E8:8A:9C:8D:6E:C4
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/79283136D0F711F0B0254259C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.204.0/24
                  157.15.98.0/23
                  160.30.84.0/24
                  165.99.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:92:2d:5a:3b:eb:88:03:86:ec:bf:fb:54:e0:5a:03:b2:
         2a:79:c5:85:98:71:18:73:ff:55:fe:58:4b:f4:e6:c1:17:d0:
         52:c2:3b:8d:0f:1a:c9:f1:d4:48:f7:ad:72:09:f1:03:4f:fa:
         81:7d:b7:84:47:24:eb:74:0e:15:87:b1:49:24:a0:17:0f:ab:
         59:cb:39:b0:56:64:82:af:c0:27:33:63:1d:6f:24:12:80:c2:
         82:72:44:b6:a8:a0:e3:51:ab:49:3d:19:7c:95:c6:13:19:ce:
         b7:a0:d2:b9:95:a9:b0:de:7d:99:67:af:2e:70:60:6c:3b:45:
         bb:08:27:d4:31:00:db:82:a8:38:0e:da:8a:64:e6:f1:43:83:
         e5:93:25:b8:35:4d:fd:7b:ec:54:7f:a9:00:2f:f6:71:c1:e5:
         b2:d1:ae:94:e2:d2:d4:03:8c:1d:47:55:53:ca:31:88:90:94:
         df:08:25:76:bf:d5:b5:d2:9c:e2:66:ba:ca:39:b0:f2:4a:df:
         3c:b3:2b:9e:fe:35:4c:0d:90:84:4d:30:14:97:4e:3b:18:7a:
         0b:a3:43:aa:f7:3b:d6:ca:01:51:62:a8:55:c6:91:99:fb:f9:
         3f:66:e2:27:7b:31:63:f6:7a:ff:bb:ce:36:00:92:d2:46:67:
         6d:63:48:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:34 2026 by rpki-client