Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
File:                     ED06EA341BA711F19ED09D39093D8C67.roa (raw, json)
Hash identifier:          4DA7kKiYjFRtg6lQjcUjoCAKynCQSWwl1mXr/vz8fqc=
Subject key identifier:   31:7E:C2:0F:8D:05:FB:C0:8C:BF:27:A2:33:7A:13:3D:CA:CB:E2:51
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       309F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
Signing time:             Mon 06 Jul 2026 16:15:35 +0000
ROA not before:           Mon 06 Jul 2026 16:15:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133645
IP address blocks:        192.232.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Jul 2026 14:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12447 (0x309f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:15:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4a7-a4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0b:eb:63:15:77:5a:f1:65:f6:0c:80:e8:73:
                    e9:ad:f2:37:07:6d:b6:e7:c4:f5:d6:f2:fa:71:d8:
                    9d:93:c5:72:0b:a4:02:5a:12:d2:32:e2:f4:5b:c2:
                    f3:52:27:9c:86:fa:fe:02:83:8d:77:d9:0e:16:3e:
                    d5:ba:ae:7f:89:43:93:b5:35:4c:b1:23:fe:3a:52:
                    a3:66:c7:14:18:aa:7c:46:f3:94:da:8d:b3:3c:a1:
                    af:a4:25:08:80:8f:a9:3d:c0:e3:c3:bc:db:cf:e9:
                    0e:53:5e:f5:9d:5d:5f:63:ec:34:af:15:7d:f2:36:
                    b9:fc:ef:53:36:e0:51:5a:89:bf:8b:76:79:07:9a:
                    61:cb:b5:1d:a8:bf:a3:81:17:11:0e:cf:10:a6:57:
                    42:ae:56:8a:8c:e6:02:49:bd:00:74:56:f6:cf:15:
                    17:3e:93:64:f7:75:60:51:8b:90:e6:37:45:a4:de:
                    2f:83:f8:02:fd:1b:6a:a2:35:7c:43:24:00:85:df:
                    05:a3:a3:d1:9f:56:42:b8:2e:26:b9:9c:eb:f4:5c:
                    13:b4:dd:ec:ca:37:f6:10:c8:da:37:2d:be:b0:3d:
                    37:cd:1b:05:85:dd:0e:cf:8f:3e:ad:a4:ac:3b:c2:
                    1f:54:b7:e1:21:9c:5c:e7:29:62:57:39:7b:c2:49:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7E:C2:0F:8D:05:FB:C0:8C:BF:27:A2:33:7A:13:3D:CA:CB:E2:51
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6c:76:87:e9:ab:29:d7:56:c9:c1:80:39:b2:33:c1:06:a2:
         1a:f7:d5:37:6a:76:88:c4:f7:9a:bf:ae:22:ec:7d:a5:ef:12:
         f5:4c:9e:b7:89:24:a2:b1:71:07:4a:6f:76:e6:30:b5:43:33:
         ac:00:c7:3e:51:73:c2:4a:7a:a1:3e:5d:b5:84:02:da:a2:0e:
         b0:87:2a:c7:6e:c5:ae:84:b6:c6:48:6b:df:42:b1:2b:a2:26:
         40:75:84:2c:86:fb:df:0f:8a:69:e6:7e:ba:1b:13:59:61:f3:
         7b:1f:2d:38:3b:eb:d7:6a:45:86:83:63:96:24:56:9d:4e:ab:
         0a:cd:d9:4d:aa:65:68:05:30:0a:70:df:69:1a:d9:ed:86:42:
         24:84:15:d5:69:c3:95:59:c6:8f:ef:62:56:4d:ac:0c:39:6f:
         2a:f7:f2:ce:7e:13:36:10:83:48:2b:80:c7:6a:a2:b2:d6:bb:
         b0:a3:9a:60:b6:78:43:3c:f5:0f:ad:ee:d6:38:1e:c0:de:92:
         72:0e:b4:03:78:99:1b:0f:4c:a1:e4:28:d8:aa:78:e6:4a:4f:
         13:4c:47:4f:a9:0e:18:9b:87:83:fe:0d:7b:df:08:fb:50:b6:
         b3:27:95:fc:66:ef:e6:7f:56:57:7c:3f:fd:e4:bc:94:af:a9:
         d6:8d:59:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 19:35:51 2026 by rpki-client