Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2E1C8F4FC2211F085F4FE113C6F56BC.roa
File:                     C2E1C8F4FC2211F085F4FE113C6F56BC.roa (raw, json)
Hash identifier:          YGmsPIi8DNF7JRfBpXgK6Uin7TaH+u4TCCz9csM6ozE=
Subject key identifier:   02:75:D4:52:FC:78:3D:B1:C2:2F:36:A3:CA:2E:6B:85:0F:5A:3E:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3109
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2E1C8F4FC2211F085F4FE113C6F56BC.roa
Signing time:             Mon 06 Jul 2026 16:19:07 +0000
ROA not before:           Mon 06 Jul 2026 16:19:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142176
IP address blocks:        192.232.40.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12553 (0x3109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:19:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd57b-821d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:73:ec:56:21:fe:56:f8:29:69:40:13:41:
                    22:75:16:2f:de:df:d6:c3:41:81:92:7e:fa:a4:2c:
                    07:42:88:ad:34:3b:43:db:7c:67:2c:f9:16:a9:2b:
                    cd:c0:f1:1f:c1:9d:31:11:75:fb:4a:dc:10:77:a3:
                    01:97:52:c3:b1:b0:bd:de:9e:37:92:44:65:d3:ed:
                    08:f2:c3:4b:46:6e:87:1b:4c:3f:e0:92:eb:60:bb:
                    e3:79:ee:3a:a0:53:55:eb:15:53:5d:3f:e2:97:2b:
                    dc:e3:8a:61:60:48:56:14:f5:56:a7:b4:94:94:63:
                    9e:cb:38:80:21:9b:5a:99:0d:17:db:a7:d8:dc:7f:
                    a1:be:75:ba:36:d1:02:36:7b:f1:e0:f1:cf:db:ba:
                    24:1a:8e:05:75:3b:6b:74:5b:08:b3:7b:9b:34:86:
                    f4:0e:96:43:cc:e8:30:6a:62:06:3e:3f:6e:86:b1:
                    a0:7a:64:a8:00:a8:82:bc:24:2d:12:1a:f9:2d:b5:
                    41:12:a9:96:33:e1:05:f6:cc:14:d5:a9:19:8e:66:
                    c3:63:a8:09:d0:e3:81:87:67:00:a7:27:13:d4:e4:
                    b5:a5:65:8f:43:4f:77:20:7e:0a:74:73:58:ff:b3:
                    26:04:03:a9:42:17:60:ec:fd:6d:93:9f:84:eb:eb:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:75:D4:52:FC:78:3D:B1:C2:2F:36:A3:CA:2E:6B:85:0F:5A:3E:ED
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C2E1C8F4FC2211F085F4FE113C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:63:cc:6e:30:fe:5d:de:6b:d9:87:d9:2a:e8:79:8a:6c:0f:
         64:bd:2d:30:98:ac:a6:31:18:9e:ce:e0:2a:5b:1b:9c:5f:aa:
         2f:79:4c:0e:9f:59:19:b5:7f:9b:66:1d:a3:f2:63:81:7a:5a:
         91:bb:a9:fa:07:e3:18:03:38:0d:a1:a5:b9:2d:ab:cd:9e:77:
         ae:33:74:68:8a:4b:6a:39:c7:93:f1:85:92:ff:06:91:f1:37:
         87:20:69:0d:9c:44:2e:46:4a:e4:1c:6f:f9:7f:23:af:02:66:
         d4:28:23:18:5c:6e:03:3a:15:b6:06:e3:c3:e0:17:af:cc:89:
         32:cb:2a:92:13:97:c3:89:b7:19:65:88:30:e7:8c:67:44:1c:
         d6:be:d4:e9:27:0a:63:2c:84:cb:74:5c:8b:32:1a:69:02:ac:
         dd:36:13:87:91:23:12:e3:2d:e7:3b:aa:6b:a5:4d:6c:18:99:
         82:d7:71:0c:2f:5e:d5:27:fc:48:85:51:70:eb:3b:b6:10:45:
         04:b7:89:78:2d:e0:eb:b3:c5:ee:90:c3:62:d9:64:f1:56:74:
         f5:b9:05:da:63:f1:69:58:5f:28:06:72:4c:71:95:9c:8a:4f:
         22:66:3f:ef:ad:b4:98:62:15:c6:25:e2:2a:4f:f7:ad:ef:27:
         45:d9:fa:20
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxOTA3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDU3Yi04MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvhBz7FYh/lb4KWlAE0EidRYv3t/Ww0GBkn76pCwHQoitNDtD23xnLPkWqSvN
wPEfwZ0xEXX7StwQd6MBl1LDsbC93p43kkRl0+0I8sNLRm6HG0w/4JLrYLvjee46
oFNV6xVTXT/ilyvc44phYEhWFPVWp7SUlGOeyziAIZtamQ0X26fY3H+hvnW6NtEC
Nnvx4PHP27okGo4FdTtrdFsIs3ubNIb0DpZDzOgwamIGPj9uhrGgemSoAKiCvCQt
Ehr5LbVBEqmWM+EF9swU1akZjmbDY6gJ0OOBh2cApycT1OS1pWWPQ093IH4KdHNY
/7MmBAOpQhdg7P1tk5+E6+uXPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAJ11FL8
eD2xwi82o8oua4UPWj7tMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzJFMUM4RjRG
QzIyMTFGMDg1RjRGRTExM0M2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBwOgoMA0GCSqGSIb3DQEBCwUAA4IBAQCqY8xuMP5d3mvZh9kq6HmK
bA9kvS0wmKymMRiezuAqWxucX6oveUwOn1kZtX+bZh2j8mOBelqRu6n6B+MYAzgN
oaW5LavNnneuM3RoiktqOceT8YWS/waR8TeHIGkNnEQuRkrkHG/5fyOvAmbUKCMY
XG4DOhW2BuPD4BevzIkyyyqSE5fDibcZZYgw54xnRBzWvtTpJwpjLITLdFyLMhpp
AqzdNhOHkSMS4y3nO6prpU1sGJmC13EML17VJ/xIhVFw6zu2EEUEt4l4LeDrs8Xu
kMNi2WTxVnT1uQXaY/FpWF8oBnJMcZWcik8iZj/vrbSYYhXGJeIqT/et7ydF2fog
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:43 2026 by rpki-client