Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/96C7C3E471E511F09456DC2DC4F9AE02.roa
File:                     96C7C3E471E511F09456DC2DC4F9AE02.roa (raw, json)
Hash identifier:          yG7qZAkEhG0hKd4RDjL2QI3M+JGl05T+1Xxvg6FNBHo=
Subject key identifier:   CE:81:4A:E3:E8:21:21:81:46:29:F5:00:57:30:14:B6:EF:0E:3B:53
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3101
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/96C7C3E471E511F09456DC2DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:18:51 +0000
ROA not before:           Mon 06 Jul 2026 16:18:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141794
IP address blocks:        192.156.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12545 (0x3101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:18:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd56b-4714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:87:1b:72:06:90:77:86:1f:75:69:7b:06:
                    31:1d:1c:4d:9e:f5:69:a2:da:7f:59:96:a6:c6:75:
                    73:d6:42:8f:55:bf:b6:05:b4:54:8d:b5:74:85:25:
                    12:d5:1c:94:5b:68:e9:fc:51:98:92:ef:bd:22:68:
                    51:10:a4:c0:55:c7:a4:5c:50:21:c0:a5:1b:c7:da:
                    eb:2b:a2:f5:94:8c:d4:0f:83:76:8d:c3:3e:ee:d3:
                    0b:5e:16:8a:53:84:a5:7d:1d:e4:66:81:a9:65:0c:
                    89:35:33:74:9a:a8:f1:e7:ab:73:ea:4b:9f:24:ad:
                    9d:7f:22:02:33:2a:51:84:47:d0:96:b3:5e:74:bf:
                    18:89:25:23:a5:f0:c0:e1:80:6c:b5:15:93:ac:73:
                    61:54:9d:97:de:4f:09:50:93:85:04:d6:4d:63:72:
                    0b:e0:09:ec:85:24:40:d0:81:9a:b3:bc:c8:bb:14:
                    d6:4a:16:67:45:ec:dd:a2:1e:24:ce:68:23:cc:ee:
                    08:26:2a:cc:0c:83:28:ba:46:a3:a3:4d:48:22:e8:
                    eb:35:01:15:e3:a7:bf:64:7c:4c:ea:4b:a7:58:e8:
                    71:5a:2c:2f:9a:33:bc:c9:6e:bb:41:94:94:ba:37:
                    98:2e:02:f2:24:4b:e5:13:b0:49:bb:d2:99:ef:f2:
                    48:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:81:4A:E3:E8:21:21:81:46:29:F5:00:57:30:14:B6:EF:0E:3B:53
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/96C7C3E471E511F09456DC2DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e0:e6:02:16:51:01:86:8e:c5:61:35:f5:e6:5d:39:05:60:
         59:d7:fe:d2:bd:19:f5:ad:c3:cc:ed:d1:3c:9f:cf:46:75:88:
         c9:41:59:b0:d5:96:df:64:44:96:b6:f9:18:23:0f:be:c0:25:
         02:04:c8:c5:97:2d:f2:aa:39:d7:16:0e:69:9f:5e:af:f2:1a:
         07:78:41:29:a3:46:ca:68:d7:76:1d:4f:2b:20:7e:b2:7d:c4:
         a1:74:a3:b2:43:1e:fa:41:b3:27:56:6b:ea:e3:0f:4a:bc:d5:
         5e:ed:76:4e:ec:e3:2d:a1:6e:b4:cb:34:2a:01:6a:02:40:26:
         8d:23:12:bb:f2:5c:e4:c2:a8:01:99:d0:47:97:9e:b2:43:c3:
         30:ab:d0:de:f5:0a:b2:0f:31:7b:de:f4:e9:e8:cf:b5:e5:0e:
         13:f6:08:5d:85:66:35:c6:65:57:fe:d9:aa:77:48:56:5f:68:
         0e:7d:f0:fb:98:6c:83:1a:35:e7:31:48:c0:73:39:92:c0:31:
         46:0f:b9:b8:03:d6:ff:52:a4:a3:19:41:5a:4f:50:86:61:71:
         d7:73:06:ac:e2:0b:c5:17:63:78:69:a1:4b:e2:ee:6c:50:4c:
         6e:34:57:69:a9:23:b1:43:11:4d:75:3a:9f:96:6b:65:e1:14:
         df:82:e0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:37 2026 by rpki-client