Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF717A5CF39111F0878981CB736F56BC.roa
File:                     EF717A5CF39111F0878981CB736F56BC.roa (raw, json)
Hash identifier:          c/0aEiMORGC4FKq2G6Q83nqC6FSrfu8wsxCh2RgFUrQ=
Subject key identifier:   6C:36:22:66:43:1B:67:E7:5F:C7:92:51:FF:DE:F6:86:F8:F1:B0:ED
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EBC
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF717A5CF39111F0878981CB736F56BC.roa
Signing time:             Sun 31 May 2026 16:20:21 +0000
ROA not before:           Sun 31 May 2026 16:20:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     138364
IP address blocks:        144.79.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11964 (0x2ebc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:20:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5fc4-43de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:6f:d9:f5:5e:41:c6:f1:ad:f0:d3:ac:26:
                    da:95:3b:7f:0b:b7:a9:86:bb:00:f6:24:de:2f:ed:
                    2b:98:bc:96:7e:65:bf:dc:9a:af:f4:71:bf:4d:bf:
                    ea:ad:1b:c7:50:97:a6:30:7b:37:c6:56:50:a0:0c:
                    ef:5c:64:d5:84:72:ee:d2:63:1e:a3:e7:ba:8e:70:
                    ca:44:0c:6b:56:a7:1f:ee:0f:74:7a:8b:d3:2f:ee:
                    cd:da:b8:04:57:c2:f7:58:fc:57:07:15:60:08:e8:
                    1e:8a:b2:95:10:7b:42:25:f5:b9:1f:b7:8f:35:c4:
                    99:26:d8:36:a1:3b:17:a6:7e:b7:a2:bb:30:4a:35:
                    14:b4:f2:16:68:3a:eb:c0:c6:38:db:97:d9:4d:d2:
                    e6:b0:f1:d0:44:98:c5:aa:41:bc:ab:d2:63:3f:c1:
                    3b:8b:01:8f:b6:a1:4c:ff:db:55:33:c0:e7:98:c5:
                    00:89:a2:cd:b8:62:1e:b8:8a:ac:57:99:28:57:b5:
                    2e:04:d7:5a:df:94:51:49:8e:60:62:81:26:da:df:
                    18:31:72:1e:f9:44:58:d0:ad:85:5f:5b:1f:8e:c8:
                    59:38:79:d7:2a:b7:4b:b7:a7:37:fd:aa:87:e9:91:
                    fb:9b:ce:14:c6:58:a8:93:10:ef:5f:96:3c:95:aa:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:22:66:43:1B:67:E7:5F:C7:92:51:FF:DE:F6:86:F8:F1:B0:ED
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/EF717A5CF39111F0878981CB736F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ad:0a:25:54:ca:90:49:ba:56:ab:61:c4:4c:87:0b:ec:09:
         6c:a9:f1:dc:cc:05:20:fd:33:d0:4d:b5:01:4e:7b:1d:b2:ba:
         a3:7b:59:e5:61:fc:bc:11:cd:aa:d2:04:02:08:4e:ef:01:f1:
         bb:5c:6e:b4:6a:e1:5b:91:92:77:61:b6:54:ee:2d:d5:33:80:
         ec:f1:ee:25:f5:b0:2e:19:d0:c4:03:95:40:1f:10:db:a3:b9:
         25:12:8f:18:29:ce:c4:57:91:ba:8e:e4:d4:9f:53:d9:ee:c7:
         a9:af:bb:32:b0:dc:39:e8:c5:9b:c7:b7:20:75:e7:30:7b:04:
         e6:33:0a:2a:fc:ec:b7:41:b1:4b:9f:47:39:6f:83:bf:bb:74:
         e8:d5:0f:f4:d1:63:ad:f1:65:64:55:d1:21:1d:f0:08:f7:64:
         5c:8c:41:fd:0b:5a:9f:8c:c1:2e:f0:8a:22:9a:3c:fc:97:f2:
         5a:b1:3f:92:de:8e:37:f3:ca:9e:ce:0d:34:e9:cd:6b:12:f8:
         34:28:43:ca:64:bc:54:a5:7d:06:9d:1c:56:2b:51:da:c2:08:
         1b:3f:81:55:1d:ae:4c:94:dc:13:d2:0d:1e:a5:ce:5e:31:2c:
         8e:3a:f6:11:68:ee:ff:a0:d0:1a:9c:11:a0:c6:b5:d7:62:b4:
         5a:82:52:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:05 2026 by rpki-client