Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C325B458EF9611F093C4B61F666F56BC.roa
File:                     C325B458EF9611F093C4B61F666F56BC.roa (raw, json)
Hash identifier:          DXWnnL4mqjfRgsONYJI0kwZgE6tRPBpI562PPOfo1v4=
Subject key identifier:   15:79:46:BF:43:AB:DA:AC:77:A0:32:7E:B8:D0:02:B8:32:4A:56:C4
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3216
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C325B458EF9611F093C4B61F666F56BC.roa
Signing time:             Mon 06 Jul 2026 16:28:03 +0000
ROA not before:           Mon 06 Jul 2026 16:28:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154466
IP address blocks:        144.79.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12822 (0x3216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:28:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd793-f8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0e:6f:87:f9:7b:a4:20:20:fa:cd:04:36:1b:
                    d0:07:f4:e1:38:34:ad:79:8f:7e:4c:46:dc:24:c4:
                    1c:3a:ce:b1:d6:4b:ca:a1:eb:34:36:ef:61:6b:62:
                    4a:ec:1f:73:26:48:78:b4:2e:86:d3:ae:9d:1e:2b:
                    5a:0e:ee:62:95:dc:6c:4f:d5:d6:e2:c5:04:de:c0:
                    f2:f6:01:45:9d:61:e9:90:b1:e5:9e:11:3d:d8:8a:
                    ab:56:c5:71:0b:fa:c4:62:fd:ee:30:d0:15:ba:f9:
                    6e:c1:dc:ae:e5:b0:9a:54:43:e7:da:38:4e:97:6a:
                    2b:e7:8a:23:5a:11:00:91:e6:06:5d:8c:08:d7:7a:
                    ed:14:6a:05:fb:eb:b9:9b:12:3a:df:cf:0c:7d:05:
                    be:b0:b4:0f:cf:29:f5:27:d6:75:65:2f:ce:2e:67:
                    ea:3a:75:65:37:b0:1f:56:e0:bb:7f:f4:57:36:38:
                    28:75:a5:69:12:b7:6b:67:99:71:69:d0:67:bd:f6:
                    78:fd:11:6b:0e:1b:49:fb:bc:77:17:63:09:bd:e4:
                    c3:2d:cc:ba:51:65:cd:15:65:69:7a:50:76:76:99:
                    3e:df:75:7e:89:f5:b4:38:af:56:65:af:4b:be:66:
                    ff:c2:d0:0b:25:c3:6a:20:70:a2:3b:d7:6c:ca:86:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:46:BF:43:AB:DA:AC:77:A0:32:7E:B8:D0:02:B8:32:4A:56:C4
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C325B458EF9611F093C4B61F666F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:84:3f:49:71:ed:62:6a:eb:54:ee:7c:1e:c4:91:9c:4c:b6:
         d6:66:e1:fe:68:79:7d:c3:1b:e2:b9:ab:d0:f3:e8:e8:ee:93:
         b6:99:e3:dc:5d:26:e2:fb:de:cd:4b:93:78:fe:4b:d2:f8:03:
         2b:14:14:83:2a:c3:65:c5:32:35:d0:35:f8:da:6e:ae:00:26:
         b5:a5:9a:d7:ea:f6:d9:66:ce:7f:6c:80:27:7d:1d:5b:e8:92:
         60:c2:e1:db:45:24:51:ac:dc:8e:96:7d:92:f4:bb:1f:4e:1f:
         4f:9a:f9:71:07:23:b7:4a:ea:60:8e:b5:b5:be:de:0b:6e:3d:
         61:e4:dd:25:7a:da:a1:79:f0:f2:08:cf:98:43:18:00:ec:cb:
         7a:a6:98:f0:5b:65:37:09:9a:80:6e:8b:bc:68:94:6d:93:a0:
         28:89:49:cd:cc:b2:36:71:2a:e7:a2:63:3c:a4:4f:2c:82:ab:
         fa:61:e5:14:17:00:f4:dc:d7:2f:a4:7c:f6:f7:b7:97:b4:5d:
         72:38:74:90:5e:26:e0:c3:9d:79:30:0c:d5:02:6a:75:b8:30:
         64:d8:e8:88:08:f6:6e:06:56:9b:aa:72:00:fd:7f:ea:39:d8:
         d5:83:7e:22:7d:f1:7c:49:5b:74:dc:48:06:56:4f:10:92:d9:
         f7:75:6f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:04 2026 by rpki-client