Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D2D33C94D97711EF8509CD86C4F9AE02.roa
File:                     D2D33C94D97711EF8509CD86C4F9AE02.roa (raw, json)
Hash identifier:          QVIqcxNYSmneFcUQzce/bX5xw0maor3o86sXFiOHyYE=
Subject key identifier:   35:A8:14:30:7C:8E:C7:7A:B6:27:22:1E:0E:0B:FD:11:99:CF:A8:2A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FA6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D2D33C94D97711EF8509CD86C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:45 +0000
ROA not before:           Sun 31 May 2026 16:27:45 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153288
IP address blocks:        161.248.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12198 (0x2fa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:45 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6181-d878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:49:a1:1c:42:a0:90:2b:bb:f0:2d:81:26:1c:
                    af:d9:c5:a8:f7:50:c5:bf:ad:77:66:fd:82:84:3e:
                    43:c1:04:af:a4:68:5d:47:f2:26:19:47:b6:47:68:
                    bf:a1:92:fb:ee:2c:4e:6c:0b:33:83:bf:69:31:a9:
                    57:5b:1b:7f:52:78:c7:42:c8:8f:b2:1d:ca:62:20:
                    18:41:39:85:75:e1:50:d7:41:d5:88:46:ad:9f:98:
                    74:24:e3:a5:77:df:dd:ec:05:c2:6d:f6:86:dc:2c:
                    fe:78:76:1d:b8:d3:bf:82:c8:64:6c:36:ce:3a:07:
                    8c:9d:bd:76:ec:22:70:bb:36:c2:38:09:ce:90:6f:
                    21:84:f1:a3:b3:f6:89:2e:64:7c:a5:4d:ca:4a:20:
                    bc:2b:e7:e8:d0:42:43:5a:d4:0b:fb:99:0d:c3:d9:
                    81:e0:35:88:88:73:40:af:2f:0f:6e:51:28:0b:4f:
                    95:07:4a:9a:e9:9b:e6:d6:54:04:9e:28:2b:9c:30:
                    f2:38:0c:3b:de:46:70:4f:5b:a1:64:36:cb:2d:5c:
                    5a:71:35:49:5f:89:98:a5:e0:d7:ef:5d:55:88:49:
                    3e:6b:ee:b6:0d:65:39:39:72:37:7d:f0:24:47:3b:
                    9f:d5:9b:c6:34:f9:eb:c2:2d:a1:af:25:64:52:a6:
                    6a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A8:14:30:7C:8E:C7:7A:B6:27:22:1E:0E:0B:FD:11:99:CF:A8:2A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D2D33C94D97711EF8509CD86C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:21:ae:e3:74:cb:28:2c:92:bc:d1:a6:6c:59:27:a3:b8:
         f8:de:bf:4b:ab:9f:3e:6f:59:ec:93:ce:bb:5c:c2:fe:a2:31:
         2d:3b:a5:a9:7e:41:4c:d4:32:2c:5a:7a:ac:72:32:44:b6:c8:
         66:1c:74:bf:c8:0b:14:c9:a8:c1:15:a2:8a:1f:5f:c6:c6:85:
         9c:09:67:46:0f:6b:c7:ec:54:78:0f:19:c6:53:8b:c0:01:af:
         73:9d:9d:57:d4:bf:47:39:0d:20:2e:d5:4a:5b:82:bd:39:c4:
         bd:d9:d1:57:55:0d:bf:a7:fc:c7:96:9a:76:8a:c5:3e:ed:20:
         8c:6d:93:b9:86:ec:01:63:79:28:89:a4:c2:bd:e4:a8:f0:46:
         42:9f:cf:a7:28:6b:f3:51:2c:b1:3f:34:f5:97:52:ad:7f:11:
         96:2b:3c:9e:1f:40:c1:fa:84:64:02:cf:0e:7e:5f:5d:c2:6c:
         49:15:24:aa:c6:27:7d:28:fc:f9:a9:53:55:59:31:33:70:c8:
         88:8d:cb:d8:01:c4:3f:e4:66:02:c8:4e:3d:71:63:85:e8:ad:
         d5:1a:ad:34:4e:2f:55:19:63:1f:94:c1:08:46:ca:5b:b9:30:
         4c:26:55:1e:90:04:fc:22:68:d7:bc:98:68:7f:68:ac:f5:02:
         be:33:0e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:25:59 2026 by rpki-client