Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/97E2794A58DA11F1A037689FA9833773.roa
File:                     97E2794A58DA11F1A037689FA9833773.roa (raw, json)
Hash identifier:          jH9ut3ukeVh8WPFDakX3CtR6gPpNv7euYhQsaFrkKvM=
Subject key identifier:   EB:D4:F9:4F:8B:45:96:57:25:5A:8B:FF:EF:D2:6E:04:ED:FC:95:1B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3220
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/97E2794A58DA11F1A037689FA9833773.roa
Signing time:             Mon 06 Jul 2026 16:28:24 +0000
ROA not before:           Mon 06 Jul 2026 16:28:24 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154691
IP address blocks:        162.4.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12832 (0x3220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:28:24 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd7a8-4c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:17:45:f3:99:f8:c8:0a:66:e3:cd:36:f5:
                    7f:44:be:15:23:ba:98:29:fd:00:19:71:f2:5b:f2:
                    ec:fd:40:b2:5b:43:b3:b1:f0:9e:36:a4:42:b6:75:
                    12:e0:65:0d:85:08:de:07:6d:57:bc:f6:8c:7c:f1:
                    1f:ec:ae:07:30:8b:a5:4e:62:11:f0:a8:ad:ec:ef:
                    fd:2b:f0:e2:d6:ef:82:3a:b8:b9:53:51:d8:23:c2:
                    79:17:9d:20:3a:31:2e:8a:53:c9:58:ff:fa:51:27:
                    ff:d2:ec:e2:1c:1d:4a:55:00:50:dc:8a:4b:50:39:
                    6f:97:78:ac:e2:b2:dd:4c:2c:2e:8b:4a:a0:3b:bf:
                    45:65:fa:85:af:70:a1:9d:f3:de:4e:24:7b:9d:4f:
                    fb:84:c4:f7:ce:ad:90:f0:8a:5a:bb:8d:84:55:92:
                    7e:5d:80:1b:49:25:6b:78:ec:2c:0c:c2:b9:ee:02:
                    45:ec:c9:49:ba:07:8c:78:b3:40:d9:67:2a:fc:f0:
                    9b:5b:55:fd:0d:5c:ee:43:aa:59:50:e4:5e:a7:11:
                    2f:2d:6e:d7:c4:3c:46:9a:47:7d:41:23:13:9a:2a:
                    40:2e:d4:f8:c6:76:cc:4d:c8:bc:ae:f3:32:83:b8:
                    a9:38:02:41:b8:ff:dd:6c:51:1c:8b:0f:ac:29:97:
                    02:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D4:F9:4F:8B:45:96:57:25:5A:8B:FF:EF:D2:6E:04:ED:FC:95:1B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/97E2794A58DA11F1A037689FA9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:de:14:63:f9:c3:61:b1:4c:66:59:20:07:fc:64:26:ef:fb:
         ef:e1:6b:7b:e0:2a:ac:49:30:22:57:35:84:c2:54:e8:ad:00:
         9a:10:4a:5e:d5:da:d2:31:f3:18:40:9e:42:66:2a:bd:70:c9:
         91:30:b5:d4:54:08:6e:4d:b6:a1:8c:5d:7b:d6:85:00:9e:27:
         a5:97:bb:97:69:5f:1e:ec:ab:61:0b:6d:d3:5d:4b:78:4c:b7:
         b8:62:0f:a0:82:90:03:a2:b6:b4:4e:73:80:53:fa:3a:43:26:
         3b:7a:5c:a1:7c:9a:80:b8:8e:76:23:f3:71:f2:e1:e1:ff:23:
         55:bb:bd:0c:81:0e:eb:a8:42:fc:2b:3b:98:bf:0a:4a:92:c6:
         5d:52:ef:69:36:61:97:44:45:0d:9a:a9:bd:d7:c9:20:b0:46:
         a2:3e:e2:08:b9:7c:40:f4:60:9a:90:28:7b:12:b6:cf:8d:34:
         57:d3:c4:81:01:2d:21:08:d2:d9:57:33:fc:cf:d2:5f:97:fd:
         30:3f:19:e7:de:29:71:9b:7e:82:34:b7:90:a7:0c:25:f8:b4:
         f2:b1:98:bd:21:e5:d2:6b:73:b4:6a:62:f8:8c:ed:73:9b:eb:
         20:ba:44:f0:31:35:0f:36:2a:c0:2a:84:49:99:34:21:3e:44:
         0b:9d:68:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:51 2026 by rpki-client