Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2DAB63A1B8111F1AA40C699363D8C67.roa
File:                     C2DAB63A1B8111F1AA40C699363D8C67.roa (raw, json)
Hash identifier:          LMbVm3DMufpgWQTRpVGWt7FXKbnb+aH/hMY9U+obd2Q=
Subject key identifier:   F2:81:44:1A:EC:56:8D:AD:AD:FE:E7:0D:9C:E0:2E:66:E1:F5:FD:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FE6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2DAB63A1B8111F1AA40C699363D8C67.roa
Signing time:             Sun 31 May 2026 16:29:53 +0000
ROA not before:           Sun 31 May 2026 16:29:53 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154445
IP address blocks:        144.79.144.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12262 (0x2fe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:29:53 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6201-fe82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:eb:c8:96:2e:eb:11:16:cb:9f:47:d2:96:0a:
                    80:97:33:fd:92:0f:fe:ca:d7:a0:84:b2:38:6a:76:
                    82:8e:b9:da:a0:87:b6:2b:43:74:cf:3e:80:31:cb:
                    97:f4:3b:83:3d:5d:49:c1:9f:1f:b3:cb:be:e9:35:
                    0f:9a:07:39:b7:b1:6a:09:6f:17:e3:6b:aa:a7:fe:
                    ae:bb:52:1c:d5:1a:8a:db:e7:83:4a:a7:bd:cd:ad:
                    de:f1:a8:2a:80:a5:a0:61:c0:ef:c8:f1:28:0a:83:
                    da:f6:92:00:f0:17:a4:43:9f:b5:e4:8a:5e:35:5e:
                    ef:49:d4:e8:8d:57:75:67:39:31:20:32:ca:98:1b:
                    9a:db:63:bc:d0:72:12:bf:27:b0:4d:36:ab:06:de:
                    e7:8f:2a:52:27:0c:2f:44:3e:12:70:56:3c:15:b6:
                    19:ba:c5:af:5d:3a:d3:61:0d:10:61:19:8e:fa:5e:
                    f9:ca:2c:79:7e:6b:7e:e3:7b:a4:97:86:73:ff:3d:
                    6f:56:0b:8e:24:4e:0a:fc:1f:16:b8:94:ba:e4:f6:
                    40:0b:8d:90:08:fc:fe:3d:e6:68:66:32:70:44:ad:
                    d1:08:58:69:68:b2:4b:39:ef:18:3c:cc:7a:22:c6:
                    7d:f8:e7:dd:c3:c6:e2:32:a8:6c:5d:4f:a0:ec:03:
                    41:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:81:44:1A:EC:56:8D:AD:AD:FE:E7:0D:9C:E0:2E:66:E1:F5:FD:CE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2DAB63A1B8111F1AA40C699363D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:c0:41:81:6b:98:15:98:99:fc:09:ed:2d:27:36:95:f4:49:
         8e:0d:46:b1:b0:1a:a3:c2:5d:cb:3b:48:02:e4:70:86:2f:e9:
         36:54:b9:a9:4a:9d:45:71:1a:40:b8:89:c7:e4:a4:10:7d:21:
         c6:a1:3d:5e:82:0a:d5:e5:de:c6:29:72:65:40:71:26:98:8e:
         ae:ce:e7:ec:5a:2b:4a:f5:35:ae:c6:ca:4b:67:35:6b:56:8c:
         f6:54:5a:50:f9:f3:8c:11:b0:1e:a8:f4:49:aa:9b:7c:93:a8:
         15:34:1e:d1:59:f3:cb:d2:47:8a:38:48:67:83:a2:b6:bb:b3:
         23:c1:21:e8:0a:10:51:18:12:fd:2a:77:78:95:0d:fa:14:a9:
         6a:bd:06:c1:25:7f:e3:d5:48:64:f8:d4:03:03:a1:a2:79:bb:
         e6:ef:74:68:20:4b:0f:73:eb:54:18:0d:2f:7f:cb:07:bf:69:
         99:5d:aa:6e:b1:4a:ed:ad:4a:2b:92:04:37:42:82:eb:91:44:
         e8:09:d3:55:02:44:24:16:25:a9:49:9e:89:0b:ff:41:06:b3:
         6c:c9:79:77:c1:81:77:65:48:23:8b:06:6a:53:58:6a:8c:04:
         f6:b8:f3:ac:a9:40:0a:ee:60:74:e3:42:0c:23:56:50:33:64:
         e6:16:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:45 2026 by rpki-client