Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C0616C76888511F08780954CC4F9AE02.roa
File:                     C0616C76888511F08780954CC4F9AE02.roa (raw, json)
Hash identifier:          Kfli5ahQxzbFtyOWtCFvg5h6SiIViswOS24EoIRU9OA=
Subject key identifier:   D1:56:23:84:A5:98:0A:E2:DA:90:5D:0A:A3:3A:E4:58:A7:26:96:0B
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F14
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C0616C76888511F08780954CC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:23:10 +0000
ROA not before:           Sun 31 May 2026 16:23:10 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151109
IP address blocks:        198.56.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12052 (0x2f14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:23:10 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c606e-f0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:6d:e7:d0:7b:49:7e:73:e7:a1:c2:69:f6:
                    aa:44:8c:2a:d6:c0:48:15:0c:1f:84:ef:19:e6:23:
                    70:eb:9e:e1:f2:7a:b4:a9:8b:d1:98:2f:51:32:3d:
                    22:a2:ce:3b:95:11:8a:56:06:c9:93:13:ed:4f:eb:
                    68:ec:4b:d8:47:db:a9:e3:22:a4:f8:f4:75:3d:6e:
                    33:1f:0b:04:76:59:bd:fb:4c:84:55:97:5a:da:af:
                    ac:45:d3:9b:ab:52:35:3f:a4:93:9f:78:2b:76:6f:
                    14:e9:db:7c:d5:ef:5c:37:3c:f7:81:54:67:a5:e0:
                    10:b8:eb:f0:d8:7b:85:ea:b1:9f:03:92:5c:f1:93:
                    b1:68:4f:ed:ed:7e:64:5a:2c:3f:d2:af:c4:31:b8:
                    3f:a7:70:24:cc:2e:f6:37:b2:ed:8c:5a:0a:f2:8a:
                    4c:f8:69:bf:93:87:46:f5:f4:eb:ee:1a:66:f5:d8:
                    8d:31:e8:8b:51:bb:90:0e:ee:1c:34:62:a7:03:2b:
                    f4:26:af:69:1c:e6:06:74:b8:f9:8f:cf:4d:41:a1:
                    5a:5c:95:b6:a2:e8:3a:81:81:ed:62:4d:51:b8:1c:
                    f0:27:e2:c1:37:9d:1f:64:86:f5:d1:c3:86:f7:54:
                    f9:53:a8:e3:62:2b:5f:30:06:b8:01:e4:80:2a:ec:
                    54:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:56:23:84:A5:98:0A:E2:DA:90:5D:0A:A3:3A:E4:58:A7:26:96:0B
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C0616C76888511F08780954CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.56.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:f3:9d:11:e4:62:e1:b3:ef:a0:cf:00:3b:a0:05:ac:e0:14:
         5c:af:cd:67:28:a4:a6:83:6d:2b:c4:64:92:3c:5e:49:92:eb:
         5c:5f:98:fb:d9:6d:0b:70:6d:ac:3f:52:48:e5:73:d7:8b:4d:
         11:46:d5:ca:4c:de:87:bc:f5:7e:bb:03:ef:07:b7:47:5e:87:
         0f:c9:45:28:93:f5:48:27:47:09:24:3e:c3:2b:ba:36:08:f7:
         0d:4c:47:12:db:96:2c:c3:f8:4f:dd:bc:ae:14:ed:67:18:76:
         eb:78:cc:04:f9:36:06:67:de:a7:6f:d2:a4:91:24:88:28:3f:
         80:75:17:1e:1f:ca:6f:02:cc:08:7a:11:1a:24:ec:32:78:15:
         6c:ec:b6:e7:6a:9e:7e:25:8d:17:e3:a9:ba:3e:9c:d0:f8:81:
         fa:39:ba:6c:8e:23:13:1f:c0:ee:ec:6d:a8:43:fd:be:93:48:
         80:ed:88:fc:60:e9:fa:1c:a4:8a:c8:34:ca:e7:2b:6a:54:04:
         ad:20:d6:f5:7c:b1:0e:f2:24:78:d3:25:19:bf:0a:23:30:64:
         ea:49:ca:65:de:b6:6e:ef:d7:92:c7:75:84:ad:18:4f:1b:80:
         73:4d:a9:81:a3:bd:53:dc:90:15:f0:ef:a5:aa:9b:8b:b5:4f:
         5c:ed:fc:c1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLxQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyMzEwWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjA2ZS1mMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxkJt59B7SX5z56HCafaqRIwq1sBIFQwfhO8Z5iNw657h8nq0qYvRmC9RMj0i
os47lRGKVgbJkxPtT+to7EvYR9up4yKk+PR1PW4zHwsEdlm9+0yEVZda2q+sRdOb
q1I1P6STn3grdm8U6dt81e9cNzz3gVRnpeAQuOvw2HuF6rGfA5Jc8ZOxaE/t7X5k
Wiw/0q/EMbg/p3AkzC72N7LtjFoK8opM+Gm/k4dG9fTr7hpm9diNMeiLUbuQDu4c
NGKnAyv0Jq9pHOYGdLj5j89NQaFaXJW2oug6gYHtYk1RuBzwJ+LBN50fZIb10cOG
91T5U6jjYitfMAa4AeSAKuxUwwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNFWI4Sl
mAri2pBdCqM65FinJpYLMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzA2MTZDNzY4
ODg1MTFGMDg3ODA5NTRDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBxjgQMA0GCSqGSIb3DQEBCwUAA4IBAQC3850R5GLhs++gzwA7oAWs
4BRcr81nKKSmg20rxGSSPF5JkutcX5j72W0LcG2sP1JI5XPXi00RRtXKTN6HvPV+
uwPvB7dHXocPyUUok/VIJ0cJJD7DK7o2CPcNTEcS25Ysw/hP3byuFO1nGHbreMwE
+TYGZ96nb9KkkSSIKD+AdRceH8pvAswIehEaJOwyeBVs7Lbnap5+JY0X46m6PpzQ
+IH6ObpsjiMTH8Du7G2oQ/2+k0iA7Yj8YOn6HKSKyDTK5ytqVAStINb1fLEO8iR4
0yUZvwojMGTqScpl3rZu79eSx3WErRhPG4BzTamBo71T3JAV8O+lqpuLtU9c7fzB
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:00 2026 by rpki-client