Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
File:                     7A2414A8C01C11EEAB088B48C4F9AE02.roa (raw, json)
Hash identifier:          TwbaGY2KygMRWvfg6wuoZiWqb/lKmz4u+1XpR5FJGtg=
Subject key identifier:   2E:93:51:82:51:BC:E9:D6:66:81:25:8C:08:E4:1F:27:43:60:BC:81
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30DE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:17:43 +0000
ROA not before:           Mon 06 Jul 2026 16:17:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138252
IP address blocks:        157.10.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12510 (0x30de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:17:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd527-b7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:73:c9:73:79:44:07:34:a5:96:7d:5f:62:
                    8c:52:ba:8c:59:1a:c1:f6:43:53:67:16:62:af:33:
                    fa:87:27:15:89:c0:4a:e3:4a:c1:54:90:66:cf:14:
                    b7:69:76:25:4c:37:7f:a7:bf:2a:73:c3:48:aa:9f:
                    ca:02:04:f1:d6:67:57:a7:7a:88:cd:d2:13:dd:62:
                    79:32:06:97:e6:5b:89:66:81:c0:99:11:d0:ad:67:
                    fc:6c:68:cb:36:eb:2e:61:7c:1e:fb:c9:c7:84:36:
                    ab:8b:9b:93:a6:b1:e3:44:c3:56:ee:37:6b:5a:cb:
                    c4:be:83:81:eb:26:79:1e:7b:45:19:6a:a8:cf:e9:
                    fd:7f:58:6d:7c:13:76:93:88:1e:12:d6:ca:3d:04:
                    1c:24:98:f9:6f:8e:d8:64:65:14:4d:34:58:9b:e3:
                    e2:11:83:35:2b:c3:71:03:87:a0:b5:44:37:b8:21:
                    bb:14:d3:1c:f2:b7:9c:21:12:e2:7c:28:61:22:3a:
                    a2:3a:05:89:9a:08:b7:64:c6:da:95:21:cf:32:83:
                    dd:64:db:bc:70:e5:d4:1e:a2:54:36:02:3b:76:e6:
                    ab:83:b1:73:39:3a:87:85:ff:fd:52:8e:a1:61:33:
                    a4:08:00:19:72:9d:b4:0a:34:06:71:37:6f:d4:71:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:93:51:82:51:BC:E9:D6:66:81:25:8C:08:E4:1F:27:43:60:BC:81
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7A2414A8C01C11EEAB088B48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:a5:75:53:e7:2d:c9:b6:b4:67:0d:84:f5:a5:c1:06:0c:66:
         25:bc:6d:b9:2d:d7:da:69:08:11:9a:fc:ab:7f:06:89:0f:83:
         94:a1:79:a9:1b:74:ce:9f:1f:44:cb:a5:f1:19:21:90:97:4f:
         97:7b:06:72:d6:57:44:99:44:16:de:32:17:c8:68:e7:17:cb:
         1b:8f:d1:50:f4:56:67:9e:61:46:bc:13:1d:01:63:90:f7:e4:
         3e:88:7b:71:21:69:d9:55:f9:03:d2:5a:dd:5b:7f:19:eb:f7:
         15:97:7a:2a:25:d9:0b:ab:85:2e:fa:1b:ee:f9:c4:0b:50:2f:
         62:03:b7:be:5e:3c:6b:5e:b5:39:89:d3:98:0a:53:bd:bd:8e:
         d7:0c:4a:9a:11:ee:5a:f8:0b:c1:90:b3:63:5b:59:30:62:21:
         35:1c:c1:8c:00:c7:29:ff:7a:31:5a:d8:1d:1e:87:d1:43:cd:
         45:6c:af:98:f6:1d:d1:c6:f9:7a:f7:87:5e:ca:ee:a6:13:79:
         9c:e4:c0:a0:3b:a4:fa:58:d8:a0:f7:37:08:f3:e9:b2:83:4e:
         99:20:c3:a6:b6:a2:55:f1:8e:b4:f9:d9:98:e2:ad:94:6b:fe:
         fb:f8:56:02:0c:97:f7:23:3d:7e:0f:5b:84:b1:07:18:e1:81:
         1d:5e:55:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:57 2026 by rpki-client