Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
File:                     D1E157DAD99411F0B61ED2F763D3641D.roa (raw, json)
Hash identifier:          YQT/3XvcIqYf/Qj0aeP6E6EC0R4VuHWfZlM5F0iyKyc=
Subject key identifier:   FD:B9:3C:DE:F6:6E:B3:ED:C5:D1:FD:27:33:F2:2A:94:6C:1D:48:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30D0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa
Signing time:             Mon 06 Jul 2026 16:17:15 +0000
ROA not before:           Mon 06 Jul 2026 16:17:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136904
IP address blocks:        138.252.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12496 (0x30d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:17:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd50b-919f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:23:f0:9a:0b:ba:90:1b:1c:7e:d6:f4:85:
                    98:52:d5:81:16:d7:71:44:66:27:95:2d:58:a6:97:
                    7f:37:37:c7:a6:73:0f:f9:32:9b:69:e9:30:1d:93:
                    94:50:58:e3:28:b1:17:cb:aa:9b:f2:12:0f:ec:ea:
                    aa:67:9c:71:5b:a0:11:28:b5:f5:f7:a9:1b:b7:b4:
                    c9:de:74:02:64:b9:b0:bb:80:e8:cd:f2:be:4f:37:
                    05:ea:51:32:3d:be:17:9f:dd:74:ca:62:5d:99:67:
                    bb:55:46:45:0c:23:ab:8b:b1:5d:fa:58:5f:45:4e:
                    93:cd:ce:6a:cc:56:97:f4:3d:b9:f2:75:03:85:a6:
                    bb:38:f9:48:26:c5:df:99:fa:1e:f9:33:b4:0b:8e:
                    a9:49:ad:e0:8e:03:4c:fe:bd:57:40:fd:59:6b:e8:
                    42:85:20:f5:36:73:73:9c:f5:b5:dc:37:65:38:34:
                    e5:9a:58:89:7e:1c:17:42:a6:06:99:72:7f:4e:3b:
                    8b:95:9a:ac:4e:f6:a6:ed:9f:27:f8:8e:70:88:14:
                    c8:1b:c3:15:52:c7:b4:7a:8b:34:fc:ab:73:05:88:
                    d9:d5:27:dc:a0:3a:44:0f:fc:00:ee:c6:95:80:d0:
                    22:0b:61:82:69:a6:72:15:b2:ac:59:f9:99:99:eb:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:3C:DE:F6:6E:B3:ED:C5:D1:FD:27:33:F2:2A:94:6C:1D:48:C9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D1E157DAD99411F0B61ED2F763D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:2b:54:f4:8e:7d:e7:ac:3e:3c:2b:d4:5a:e4:68:71:2e:
         ff:af:13:b1:ad:0f:f7:77:6c:02:53:32:3e:90:63:1f:63:47:
         43:87:20:d3:4d:01:f9:33:11:65:cb:d5:b4:46:7d:94:04:0d:
         fd:8c:4d:fc:90:a5:29:b0:6d:dc:39:79:ec:d4:1b:4b:f8:41:
         5e:3e:b5:9f:5d:3d:c9:a7:75:fc:5e:72:20:c9:9f:4c:47:3e:
         e2:33:0c:b4:f9:69:bc:a8:a2:38:c2:f8:81:ee:26:c9:e1:1e:
         d4:ee:4b:f8:c2:c1:b9:e9:af:98:02:3b:a7:c3:5c:32:9b:19:
         a8:11:15:ba:8e:ca:c1:d9:a1:cc:51:92:4f:e7:b1:c6:78:1e:
         d8:22:7b:dd:d0:b7:21:bd:b2:7f:05:ad:7c:6b:e3:07:72:a0:
         e3:e9:0c:88:77:84:74:43:a5:c7:ad:51:e3:59:ad:09:11:4f:
         93:f9:8b:31:ba:63:09:a3:23:8a:c7:2b:90:05:42:22:c9:db:
         8d:48:49:cc:92:1c:f1:15:92:91:d7:86:46:60:a7:46:e2:98:
         65:dc:d6:61:6e:d7:db:5a:8e:78:1f:fe:a9:a1:42:cc:1a:16:
         8d:ec:7e:5a:29:c3:c7:c8:55:ce:f8:55:40:78:11:b1:89:8a:
         c9:25:11:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:28 2026 by rpki-client