Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B97B96023FC11F08333A921C4F9AE02.roa
File:                     9B97B96023FC11F08333A921C4F9AE02.roa (raw, json)
Hash identifier:          1/Eq1cn9YGqxKk7vsDp4rKIXx2POypTCKytNWO3xL/I=
Subject key identifier:   EA:D0:08:56:FB:F2:90:74:12:06:32:48:8C:31:ED:32:84:91:C7:76
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FA4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B97B96023FC11F08333A921C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:41 +0000
ROA not before:           Sun 31 May 2026 16:27:41 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153282
IP address blocks:        161.248.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12196 (0x2fa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:41 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c617d-1e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:69:ef:b4:40:7f:2f:d3:8d:67:23:7e:2b:
                    c8:a1:03:6e:03:e3:7e:23:7b:38:a2:c3:77:01:d7:
                    24:74:83:7d:58:c5:42:5a:e0:18:6b:52:6c:b6:da:
                    10:01:3b:58:62:3d:da:76:01:94:ab:43:56:f6:30:
                    4b:d6:13:da:e9:40:f6:10:d6:60:2e:5c:44:0f:11:
                    d1:a1:d1:fe:08:58:50:28:de:d2:59:3d:fb:ec:98:
                    d3:6c:7d:35:ac:2b:29:78:b0:2a:dc:2b:c7:38:8d:
                    14:d3:fd:6d:7b:04:bc:b4:db:78:02:15:21:7f:a5:
                    18:41:d6:bf:d7:72:3d:d8:92:f5:42:8a:8c:0e:ec:
                    14:41:13:8e:8f:53:b5:5a:1d:ca:36:d1:51:a8:89:
                    91:9b:9b:39:11:b7:ba:12:1a:9c:19:3c:4a:0f:ee:
                    a1:be:33:2d:29:de:ef:ff:f4:43:f4:4d:62:56:3f:
                    5f:12:61:49:26:12:0a:8c:ce:e5:80:98:18:bf:c2:
                    c0:b1:b7:14:9f:d0:7f:fc:c3:54:f7:57:f8:00:b3:
                    e0:0e:19:20:cf:5a:ba:96:33:99:db:86:8f:48:6a:
                    8c:c3:5f:f4:8e:5e:62:0a:e0:9a:bd:db:da:37:3d:
                    20:49:b5:35:b8:6a:3a:48:45:83:66:f1:1d:1a:0f:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D0:08:56:FB:F2:90:74:12:06:32:48:8C:31:ED:32:84:91:C7:76
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9B97B96023FC11F08333A921C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:ef:07:62:29:75:7e:b4:9d:39:03:fb:e4:75:a4:25:47:
         e3:61:02:54:b7:70:ed:9f:1f:61:4b:6a:83:1e:3c:19:92:09:
         8e:82:90:d2:db:aa:67:c7:67:43:ff:87:03:56:ff:b6:d8:13:
         6c:49:f1:36:ce:27:29:e6:9e:4d:7c:a7:6a:70:1a:44:c6:dd:
         71:86:7d:56:21:4a:3e:09:ce:46:49:21:c1:64:6c:66:0d:c6:
         03:2f:13:3c:de:a9:e6:4c:bb:92:51:fd:4f:fa:3a:13:86:2a:
         76:bd:af:44:40:20:3e:49:d0:fc:c3:d4:15:10:c0:c0:97:84:
         bc:cc:f5:66:e5:3e:87:ae:2f:22:2d:3d:87:ce:54:59:26:3a:
         f5:1f:83:0b:e4:d3:70:6f:54:c5:0a:7b:5c:2f:6b:1d:cf:6d:
         04:50:ee:0d:63:9b:f8:67:17:26:ee:0f:61:0b:39:75:d7:ab:
         51:01:d3:20:79:c6:21:f0:86:18:03:0c:92:62:03:84:cf:49:
         b4:72:97:c2:8c:19:45:48:5b:27:95:6f:80:5e:cc:e6:47:cb:
         5c:bd:46:03:9b:e9:9b:38:2e:82:5c:2d:8e:0f:55:5e:33:25:
         72:ce:09:bf:0c:d2:04:22:79:bc:96:32:4b:28:89:67:12:83:
         cb:20:9a:80
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNzQxWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjE3ZC0xZTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvbJp77RAfy/TjWcjfivIoQNuA+N+I3s4osN3AdckdIN9WMVCWuAYa1JsttoQ
ATtYYj3adgGUq0NW9jBL1hPa6UD2ENZgLlxEDxHRodH+CFhQKN7SWT377JjTbH01
rCspeLAq3CvHOI0U0/1tewS8tNt4AhUhf6UYQda/13I92JL1QoqMDuwUQROOj1O1
Wh3KNtFRqImRm5s5Ebe6EhqcGTxKD+6hvjMtKd7v//RD9E1iVj9fEmFJJhIKjM7l
gJgYv8LAsbcUn9B//MNU91f4ALPgDhkgz1q6ljOZ24aPSGqMw1/0jl5iCuCavdva
Nz0gSbU1uGo6SEWDZvEdGg+5AQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOrQCFb7
8pB0EgYySIwx7TKEkcd2MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUI5N0I5NjAy
M0ZDMTFGMDgzMzNBOTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBofgaMA0GCSqGSIb3DQEBCwUAA4IBAQC6AO8HYil1frSdOQP75HWk
JUfjYQJUt3Dtnx9hS2qDHjwZkgmOgpDS26pnx2dD/4cDVv+22BNsSfE2zicp5p5N
fKdqcBpExt1xhn1WIUo+Cc5GSSHBZGxmDcYDLxM83qnmTLuSUf1P+joThip2va9E
QCA+SdD8w9QVEMDAl4S8zPVm5T6Hri8iLT2HzlRZJjr1H4ML5NNwb1TFCntcL2sd
z20EUO4NY5v4Zxcm7g9hCzl116tRAdMgecYh8IYYAwySYgOEz0m0cpfCjBlFSFsn
lW+AXszmR8tcvUYDm+mbOC6CXC2OD1VeMyVyzgm/DNIEInm8ljJLKIlnEoPLIJqA
-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:48 2026 by rpki-client