Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAEC4C706E0811F1A7372C7B6AA30FBC.roa
File:                     BAEC4C706E0811F1A7372C7B6AA30FBC.roa (raw, json)
Hash identifier:          YNYeBh+FTDco5CHLXp69sbXwgSz95y2nC5xjzLMstiQ=
Subject key identifier:   8E:E3:8F:8D:A4:B8:E2:B3:CA:E0:CC:97:35:83:72:31:AB:52:6E:B3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       321E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAEC4C706E0811F1A7372C7B6AA30FBC.roa
Signing time:             Mon 06 Jul 2026 16:28:20 +0000
ROA not before:           Mon 06 Jul 2026 16:28:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154678
IP address blocks:        162.4.124.0/24 maxlen: 24
                          162.4.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 15:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12830 (0x321e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:28:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd7a4-6e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:18:19:96:32:72:ea:58:e8:76:b1:7b:91:
                    f2:ed:77:01:45:a2:b1:f5:68:a4:07:49:b5:d0:04:
                    da:4a:e9:4a:66:92:ec:73:74:68:d6:27:07:71:da:
                    47:e0:0b:a8:03:fd:56:0b:51:b2:cd:29:11:4b:e8:
                    8e:b3:e5:14:5c:d4:cc:2f:e8:4b:e5:69:76:03:fa:
                    df:0c:a8:af:e1:90:a9:db:a4:d6:86:7e:3f:ac:e9:
                    08:c4:6e:fc:98:7a:6c:4c:6e:98:51:59:e0:a6:fe:
                    5e:0b:b7:ca:c1:69:22:3d:d9:f6:fe:9f:72:0e:d6:
                    11:de:18:29:5c:5d:fa:98:eb:b4:d0:b6:f2:84:88:
                    19:b7:29:3b:ce:1e:1f:48:69:6c:01:35:be:5b:3a:
                    5e:76:c8:91:61:d1:cc:d4:75:d3:20:bb:0d:d9:c1:
                    45:7f:32:9d:a2:bd:ff:4b:5d:86:41:99:d5:3b:49:
                    1d:06:d0:8f:c6:40:89:35:e5:46:33:20:24:c5:07:
                    7e:db:82:3b:b1:8a:93:43:48:54:35:b7:69:b2:19:
                    ca:30:b4:ed:43:d5:da:88:8a:eb:d9:41:c7:ed:a8:
                    11:f9:c5:ca:ae:e2:cb:64:85:4b:ea:c6:d4:6d:2b:
                    7c:fe:03:26:aa:79:93:81:b6:64:8b:70:e4:42:35:
                    26:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E3:8F:8D:A4:B8:E2:B3:CA:E0:CC:97:35:83:72:31:AB:52:6E:B3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BAEC4C706E0811F1A7372C7B6AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:33:9e:5e:64:b5:20:68:f2:03:60:75:c3:64:81:92:f6:ee:
         c7:36:14:ac:f6:74:3d:18:cf:78:4c:70:d8:53:4f:21:35:c6:
         6f:f3:39:cc:71:15:cf:e5:6d:0a:7a:86:6e:6d:eb:7f:7e:4a:
         bf:15:e5:00:48:41:87:d0:2c:6d:2f:b0:80:55:c8:95:a1:c0:
         53:32:a2:23:ec:51:9e:73:e4:a5:f0:fb:5a:e1:8c:2d:e4:ec:
         fe:30:52:ce:57:26:b0:5a:92:2a:b3:56:0b:fc:97:35:6d:79:
         1a:d8:a2:3d:2f:fd:24:5d:8c:62:db:0a:d2:bb:df:b3:29:b0:
         a4:77:82:d1:7e:fe:d1:23:92:9e:91:01:13:2b:9b:6c:14:70:
         25:f1:59:fe:0e:96:2f:c6:61:34:83:46:3b:1c:e3:35:04:1b:
         2e:49:bc:32:d1:0e:f7:2b:bd:80:e2:30:94:e4:c3:f2:1e:f5:
         c9:f9:14:88:07:4a:2c:54:88:48:31:68:fd:77:ce:ec:58:e5:
         6c:01:8a:f5:eb:ed:11:de:ea:33:df:de:d1:55:c0:ba:1c:78:
         db:c2:8f:8c:d1:ec:1b:7b:56:f8:74:b7:98:cf:ae:2d:1c:b3:
         e1:a3:db:e8:ee:3e:07:c5:26:c1:f1:cd:e4:d6:6f:71:94:3f:
         bd:29:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:05:02 2026 by rpki-client