Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E0CE0D7E3A2F11F0BAB10036C4F9AE02.roa
File:                     E0CE0D7E3A2F11F0BAB10036C4F9AE02.roa (raw, json)
Hash identifier:          WcH63XIhFhj2MaswfKKiiWixJ8ONhSMjQI5XgyYaeNA=
Subject key identifier:   4C:94:91:4D:D2:8A:1B:9B:46:E4:27:C1:AE:C1:B1:84:A4:70:56:21
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EF7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E0CE0D7E3A2F11F0BAB10036C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:22:14 +0000
ROA not before:           Sun 31 May 2026 16:22:14 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     147306
IP address blocks:        165.99.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12023 (0x2ef7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:22:14 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6036-9041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cf:5e:05:9d:c3:2b:f1:02:74:06:c6:9b:61:
                    3d:7e:13:db:5b:d7:16:1d:0e:79:84:ad:a2:ef:02:
                    8a:83:2e:9b:93:51:16:e1:8e:eb:54:47:60:0f:f0:
                    ef:9e:76:75:cd:e6:79:2f:c7:fb:9c:d1:ab:f5:94:
                    1f:05:85:40:b1:85:08:7a:12:0c:3f:ed:bd:89:d1:
                    0e:60:92:26:7f:ef:15:6a:e2:85:39:47:78:45:2f:
                    48:fd:38:8b:4e:51:03:fa:e5:da:d3:21:ac:f1:2a:
                    ed:25:ff:c1:9f:30:df:b2:46:06:e2:de:0f:8a:2f:
                    3f:5d:86:6f:a9:4f:a5:c2:52:07:b5:03:7c:f6:64:
                    cc:ec:71:e0:9e:2b:b5:39:3d:87:4f:e8:31:b6:d5:
                    dd:64:9c:1a:c3:f7:ad:7d:4c:67:99:b1:b8:9f:3a:
                    f2:6e:a5:60:b6:43:eb:c0:97:b7:01:d8:b3:2e:95:
                    0d:5a:c7:b8:5b:51:0e:e6:fa:0c:a6:2a:bb:35:e0:
                    48:43:18:be:a6:a1:37:26:84:ea:e0:4e:ca:70:97:
                    0d:1a:12:e3:64:41:d0:78:3b:d8:39:b8:3a:f1:a9:
                    3f:45:ac:19:e3:80:9a:50:a2:c8:31:93:1d:30:d7:
                    59:ca:16:20:c3:80:52:a1:89:6b:ee:2e:d1:21:d7:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:94:91:4D:D2:8A:1B:9B:46:E4:27:C1:AE:C1:B1:84:A4:70:56:21
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E0CE0D7E3A2F11F0BAB10036C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.99.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:33:65:b5:b2:4f:68:ee:39:60:4a:e3:9d:31:3a:e0:94:
         85:1b:39:78:cb:c5:03:60:90:92:6a:30:be:aa:46:2d:48:00:
         a6:e9:f2:d5:da:78:a4:8a:29:dd:b2:48:89:46:75:79:40:44:
         b9:54:2f:72:1b:77:55:7c:1a:12:4d:dc:bc:bd:31:24:00:49:
         22:a1:d1:cc:c5:13:da:25:4e:49:50:50:c3:55:7d:37:a1:94:
         c0:b3:05:a5:c7:7f:58:50:8a:46:f7:80:c3:54:77:f6:2a:3a:
         65:05:d7:68:cd:36:b8:37:80:12:4f:6f:1d:da:a1:21:33:88:
         31:32:5f:3d:95:0c:93:d3:e8:27:29:d3:b9:dc:b9:bf:96:e0:
         f5:79:59:6e:9e:cd:16:cc:f4:d2:d5:f1:03:d1:f1:47:c5:9d:
         44:32:3e:94:c8:56:4f:62:44:3a:8c:fb:12:a6:71:47:a2:76:
         a8:78:42:89:8d:10:00:f4:69:66:92:b2:35:fc:32:95:6d:a9:
         3a:a6:90:47:46:db:f0:2b:a8:af:0c:cb:de:46:4c:9d:a0:4a:
         a6:0e:19:b7:6b:53:e3:65:53:34:fe:ce:1f:48:97:44:13:48:
         17:98:a1:fe:0a:18:1b:9b:8a:c5:56:d3:03:d1:ec:8b:6a:73:
         d7:39:71:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:15 2026 by rpki-client