Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94066EF0FE5C11EF942E0982C4F9AE02.roa
File:                     94066EF0FE5C11EF942E0982C4F9AE02.roa (raw, json)
Hash identifier:          f0wJraboBY8qa1Y2mmx0EYyHqo2OqV+P7bzRHOpbseI=
Subject key identifier:   F4:2B:3B:F4:10:F4:BA:57:A9:4D:7D:94:CB:16:B7:A2:8D:01:45:2A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30B8
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94066EF0FE5C11EF942E0982C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:27 +0000
ROA not before:           Mon 06 Jul 2026 16:16:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135247
IP address blocks:        67.158.52.0/24 maxlen: 24
                          162.216.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12472 (0x30b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4da-1326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:e2:a2:5c:b0:c4:b9:e8:bf:02:9e:bb:69:
                    12:c8:db:56:c9:a4:7f:3e:e0:11:74:e7:bf:72:f8:
                    25:2e:86:08:e1:e8:53:46:4d:00:70:16:4b:dc:f8:
                    e3:da:b7:2e:16:43:68:b1:a6:19:54:86:db:d6:79:
                    2e:ce:b5:68:8f:9e:8a:8a:41:79:db:ac:e3:19:98:
                    4e:b9:d1:6e:c7:3f:94:5f:5e:97:71:69:43:37:00:
                    3a:05:47:e6:b9:a5:e9:35:03:76:c1:69:d4:51:ce:
                    75:0e:6d:b7:28:76:e2:9d:d4:07:86:e5:43:b1:cf:
                    dd:1a:f1:c4:8c:62:73:13:6c:78:71:4c:9c:17:64:
                    58:1c:35:d4:09:78:a2:d6:23:36:71:f7:74:76:db:
                    8b:f8:05:96:5a:d5:7b:93:07:d4:84:12:47:42:b2:
                    8f:57:55:0a:1c:63:9c:1f:98:cb:69:7d:1a:bc:81:
                    24:ab:03:76:70:9b:8a:70:1a:f6:6d:bd:a9:22:1c:
                    16:af:10:c5:e9:95:34:b2:39:86:c2:bb:8e:6f:f1:
                    f9:31:9b:f0:a4:8d:14:47:0f:a8:20:0b:9a:05:b3:
                    ac:18:7d:1b:8c:3f:e3:64:be:cf:4e:33:69:80:49:
                    39:b8:08:88:3c:b9:7d:7e:24:48:53:79:ca:78:fd:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2B:3B:F4:10:F4:BA:57:A9:4D:7D:94:CB:16:B7:A2:8D:01:45:2A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/94066EF0FE5C11EF942E0982C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.52.0/24
                  162.216.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:cd:b3:45:90:08:aa:7a:11:da:c8:9b:11:61:ac:34:fa:4c:
         c4:28:56:82:1a:05:a8:39:7c:b3:8e:e8:13:a5:ef:08:56:48:
         25:ff:32:ec:b9:3c:07:08:3d:78:50:53:ba:52:77:46:f2:f1:
         b7:03:d7:f1:3e:50:b0:3d:27:96:91:09:cb:ea:2a:f2:74:48:
         e3:04:bf:ec:ff:47:46:22:0a:aa:fd:89:9e:0f:3e:c9:7b:21:
         e0:ce:3c:ae:f8:63:7b:dc:6d:8d:42:69:96:f5:83:55:00:cf:
         9b:fb:56:ae:ef:ec:50:5c:8d:9d:94:ac:b0:1b:67:f8:f5:2a:
         86:5e:40:aa:15:a4:22:ce:3c:d9:d2:a6:0a:dc:a2:4f:85:4d:
         d6:77:26:78:f6:4d:53:ff:ad:a6:b6:87:d6:f1:71:06:32:62:
         ee:8c:4e:c3:22:1e:87:be:d1:fc:77:ae:10:26:73:08:b2:c6:
         ea:13:0d:6c:80:5a:7d:bf:3e:8c:78:7f:3b:47:0c:11:c3:e2:
         c5:ed:77:4c:ce:83:fa:f9:e0:e0:92:69:54:e1:24:dd:e3:07:
         88:fa:5f:0b:d4:94:94:12:a5:ed:61:83:9c:75:23:d1:18:35:
         9e:0f:92:95:52:ca:c5:78:93:d1:b8:74:ec:49:b4:ed:e1:d3:
         cd:9d:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:02 2026 by rpki-client