Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
File:                     A2EC7F44DC0111F0AD21AAB7586F56BC.roa (raw, json)
Hash identifier:          C4Poq/wBA9qe5q4XOAv9NbS//li6G7ZBTfEDWvszWkM=
Subject key identifier:   2B:F4:21:69:E2:C3:C3:28:07:33:18:7E:FA:40:24:36:14:9D:73:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FE4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
Signing time:             Sun 31 May 2026 16:29:49 +0000
ROA not before:           Sun 31 May 2026 16:29:49 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154426
IP address blocks:        144.79.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12260 (0x2fe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:29:49 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c61fd-6217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:fe:35:a0:a6:11:56:42:82:ec:e5:bc:1a:
                    7d:c4:22:c0:c8:5f:20:fb:09:04:e4:23:69:1e:54:
                    bf:ee:dc:5e:fb:e7:19:40:67:c4:44:0b:f0:ea:e2:
                    45:f0:95:71:93:45:de:6e:a5:6e:17:77:60:5e:bf:
                    11:84:c9:56:dd:55:db:88:42:25:30:ca:02:7c:dd:
                    53:e5:dc:53:e9:a1:61:e0:68:e3:83:b4:17:60:2b:
                    fb:d6:a1:72:0e:65:00:d2:c7:72:78:08:16:e0:49:
                    f9:79:2d:7f:5f:61:13:b3:90:24:10:29:cd:2a:12:
                    83:08:e4:4c:cd:2f:66:fb:7f:44:1a:d0:7e:61:f2:
                    0b:ca:f7:f6:87:16:4a:87:34:58:cf:db:f5:54:9b:
                    5e:0b:ba:69:8d:d8:92:36:c3:d9:a9:b8:99:27:e5:
                    18:f2:b9:2e:e5:58:3c:c2:ea:e0:55:0f:2c:bd:5f:
                    74:9b:73:62:74:dd:9c:08:86:44:37:86:3e:25:0c:
                    50:5b:d6:81:26:4d:8f:79:0d:8f:32:aa:8a:c4:7f:
                    40:86:28:fa:cf:ad:5e:5f:42:5e:3f:2f:61:79:9d:
                    85:09:a6:d0:b7:13:27:d3:bf:7c:f9:0f:ae:77:13:
                    0f:ba:f4:a8:cc:65:f2:d4:c4:6d:d0:4a:e6:ec:3b:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F4:21:69:E2:C3:C3:28:07:33:18:7E:FA:40:24:36:14:9D:73:0E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:1c:b1:a8:8d:43:ed:95:88:b6:6c:b2:41:d2:8b:58:16:9c:
         58:ca:bd:75:db:2f:58:ab:f6:40:2d:ad:ba:fb:32:1e:b0:16:
         b4:4e:a6:6a:8b:98:7f:39:89:26:f6:e5:a4:80:37:8b:9c:5e:
         83:ff:a5:ef:63:bc:96:dd:84:75:22:7e:6a:4b:b2:f9:9a:5d:
         70:7f:1c:61:6b:f5:58:e6:ad:e4:3c:3a:4e:de:15:e7:25:b4:
         54:c6:41:22:20:78:a7:c3:b9:48:71:87:56:f2:07:53:1f:42:
         bd:c1:15:17:99:42:09:63:59:4f:eb:5a:9d:c8:4f:e8:ce:85:
         0d:00:66:05:86:c7:62:cb:80:31:87:24:60:74:2b:4d:45:23:
         45:fa:f9:29:cc:5d:7b:20:80:a6:58:bd:e8:f4:96:bb:2d:bd:
         20:9e:d3:ad:72:24:2b:62:71:59:a4:d3:1e:c7:52:08:fe:7d:
         cf:45:35:ac:aa:2c:d5:af:e4:32:88:af:01:e9:11:17:32:15:
         9d:b9:61:e3:c3:00:e5:73:33:37:65:dc:06:6a:52:49:80:cc:
         5f:20:10:88:59:61:65:8a:c3:fc:7c:47:1a:f1:ab:8f:c5:a4:
         56:18:10:4a:1f:06:1b:57:74:e1:9b:1d:5e:bc:45:a3:b1:f3:
         aa:fe:cc:2e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyOTQ5WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjFmZC02MjE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv57+NaCmEVZCguzlvBp9xCLAyF8g+wkE5CNpHlS/7txe++cZQGfERAvw6uJF
8JVxk0XebqVuF3dgXr8RhMlW3VXbiEIlMMoCfN1T5dxT6aFh4Gjjg7QXYCv71qFy
DmUA0sdyeAgW4En5eS1/X2ETs5AkECnNKhKDCORMzS9m+39EGtB+YfILyvf2hxZK
hzRYz9v1VJteC7ppjdiSNsPZqbiZJ+UY8rku5Vg8wurgVQ8svV90m3NidN2cCIZE
N4Y+JQxQW9aBJk2PeQ2PMqqKxH9Ahij6z61eX0JePy9heZ2FCabQtxMn0798+Q+u
dxMPuvSozGXy1MRt0Erm7DuULwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCv0IWni
w8MoBzMYfvpAJDYUnXMOMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQTJFQzdGNDRE
QzAxMTFGMEFEMjFBQUI3NTg2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAkE9yMA0GCSqGSIb3DQEBCwUAA4IBAQBkHLGojUPtlYi2bLJB0otY
FpxYyr112y9Yq/ZALa26+zIesBa0TqZqi5h/OYkm9uWkgDeLnF6D/6XvY7yW3YR1
In5qS7L5ml1wfxxha/VY5q3kPDpO3hXnJbRUxkEiIHinw7lIcYdW8gdTH0K9wRUX
mUIJY1lP61qdyE/ozoUNAGYFhsdiy4AxhyRgdCtNRSNF+vkpzF17IICmWL3o9Ja7
Lb0gntOtciQrYnFZpNMex1II/n3PRTWsqizVr+QyiK8B6REXMhWduWHjwwDlczM3
ZdwGalJJgMxfIBCIWWFlisP8fEca8auPxaRWGBBKHwYbV3Thmx1evEWjsfOq/swu
-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:17 2026 by rpki-client