Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1092D4EADED11EE98CBFB61C4F9AE02.roa
File:                     D1092D4EADED11EE98CBFB61C4F9AE02.roa (raw, json)
Hash identifier:          o7qUTfLhn0qVZlnUyc4luV8d8UlJLF86xwX5Ui8LsTE=
Subject key identifier:   4D:59:B6:B6:A8:72:6B:08:90:62:06:CD:71:59:E1:40:10:E8:68:37
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EA6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1092D4EADED11EE98CBFB61C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:19:38 +0000
ROA not before:           Sun 31 May 2026 16:19:38 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136330
IP address blocks:        157.10.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11942 (0x2ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:19:38 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f9a-2482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:23:5d:18:2c:eb:70:7a:bf:54:91:98:b3:ef:
                    c0:6e:cc:6a:c6:72:fe:ed:63:05:d0:1d:68:b2:78:
                    d0:53:6b:c7:ba:fa:ec:29:94:8c:2b:71:56:6f:35:
                    da:6e:70:a9:fb:53:ac:55:85:d6:e7:9a:65:00:83:
                    a7:30:db:96:9f:04:4d:e6:52:2f:0e:1c:65:1a:7c:
                    59:af:d2:41:9c:61:11:5e:b8:c4:51:3e:76:bd:0b:
                    75:8e:23:e1:66:1c:16:02:8a:f3:e2:54:28:73:fd:
                    8c:b1:00:35:e5:72:b7:ac:10:91:70:63:9e:b6:6f:
                    9f:43:c1:e2:96:41:e8:0e:ed:01:5d:62:39:5e:02:
                    16:7d:fd:8e:b3:5a:c3:a1:a4:c0:e5:1c:46:d3:cc:
                    30:b3:a2:5e:8a:8e:25:6d:96:d6:30:89:99:5a:08:
                    5b:c4:89:57:14:27:a9:52:61:c7:4a:bd:ef:15:c8:
                    a7:91:a8:bd:c6:d8:e7:c5:76:44:60:21:ab:7e:2e:
                    79:5c:78:8f:9b:b9:d8:2c:6a:75:f6:2f:6c:7d:79:
                    07:d6:86:ce:57:2f:95:32:fe:a3:fb:6e:e0:90:cc:
                    0f:be:f2:0c:83:4a:01:bf:74:92:ed:27:f0:71:99:
                    f3:fc:38:64:d5:35:a2:5b:0e:aa:9d:23:b6:4a:e2:
                    c2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:B6:B6:A8:72:6B:08:90:62:06:CD:71:59:E1:40:10:E8:68:37
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1092D4EADED11EE98CBFB61C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d5:e8:3a:63:67:a1:19:e9:05:66:af:08:7b:cb:17:28:a1:
         9e:b4:ae:a0:35:73:f6:05:d6:42:eb:2a:dc:81:1b:66:0b:4e:
         0b:8d:62:26:16:bb:eb:aa:da:7c:92:62:ac:0f:c9:e8:e5:3f:
         70:9a:4c:b2:00:42:ee:c9:67:9e:81:ef:c2:bb:5e:ca:f9:ed:
         7d:61:69:a6:43:f3:39:3d:be:d1:c4:d1:23:61:ef:12:29:f4:
         b3:a6:bb:7a:9e:41:e0:8e:39:07:95:da:e4:f4:b1:d6:c9:66:
         18:21:2e:05:5b:10:b3:80:97:9e:ce:9c:2e:07:3c:ab:ac:32:
         09:c4:76:95:e6:66:8d:28:c3:12:e7:7c:23:b9:26:c7:84:6b:
         43:31:37:82:58:12:6f:ae:3d:77:8a:77:08:55:ca:1a:c6:d8:
         5b:e7:69:92:e3:7c:16:16:c6:21:b9:2e:7d:54:d0:f7:f9:71:
         16:34:4d:6d:77:e7:46:30:1a:b4:3a:91:df:f5:87:9c:23:f0:
         f1:7b:85:bd:27:08:e0:dc:7d:9a:fa:86:6a:a0:81:35:84:6c:
         3a:26:dc:9a:0e:13:6a:5a:f5:45:6a:aa:b1:c8:b4:ee:c5:11:
         b9:7d:22:6c:14:99:c5:77:e5:56:2d:ca:1c:b5:ad:5b:1d:d5:
         0d:7c:87:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:50 2026 by rpki-client