Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F47DECF0EE1011F08D41E772426F56BC.roa
File:                     F47DECF0EE1011F08D41E772426F56BC.roa (raw, json)
Hash identifier:          LU/muOO5VgivnIkATfcHuVdOPopP0bcEERnZxWZSQXU=
Subject key identifier:   B9:14:7F:31:A3:49:D4:A6:D7:B3:B2:A9:43:51:9D:E1:1E:2E:CF:83
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30F6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F47DECF0EE1011F08D41E772426F56BC.roa
Signing time:             Mon 06 Jul 2026 16:18:30 +0000
ROA not before:           Mon 06 Jul 2026 16:18:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     141170
IP address blocks:        144.79.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12534 (0x30f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:18:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd555-d9fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:25:1e:d8:ba:4f:4e:bf:32:6f:af:59:45:c2:
                    ce:59:86:0e:e0:e8:63:82:48:3b:df:4b:49:c6:90:
                    8b:2d:6b:32:36:e7:ad:ce:2e:25:1e:e2:ff:ea:e7:
                    c0:81:a5:e1:e3:81:a9:e4:18:2e:b2:a1:11:e9:8c:
                    a0:23:a6:3a:18:34:04:7c:70:89:95:49:be:7c:05:
                    e8:d9:ff:e4:e3:44:50:28:e0:e4:fa:35:48:cb:47:
                    1b:d5:34:62:23:e1:ec:0b:76:f8:2d:f0:4a:15:a4:
                    bb:e4:14:9b:07:a0:a3:84:ec:06:84:9f:0f:fa:fd:
                    cd:79:a3:3d:27:55:e2:dc:8b:ba:09:7a:53:d5:0c:
                    52:1b:66:45:24:06:8e:99:21:78:1b:e6:24:28:2e:
                    d6:8a:f2:64:b0:11:5f:b6:f2:dc:45:fc:a2:81:ad:
                    81:3e:9d:e7:46:76:f4:f6:39:6c:18:05:99:63:06:
                    8d:af:68:e9:83:07:19:7b:52:c9:bf:3d:a3:d7:09:
                    7e:10:98:c2:0a:24:d4:89:eb:42:36:e4:2d:ef:fa:
                    57:64:f8:2b:4f:63:94:47:7a:5d:cf:f9:c6:6f:f6:
                    35:55:d7:4a:e3:dc:41:4c:11:ed:19:0f:4b:48:a6:
                    53:06:83:2c:db:42:68:dd:c8:6b:83:80:cc:fa:b8:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:7F:31:A3:49:D4:A6:D7:B3:B2:A9:43:51:9D:E1:1E:2E:CF:83
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F47DECF0EE1011F08D41E772426F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:c2:d1:70:f1:ce:9c:ed:dc:e5:23:d7:e3:32:06:fa:ea:48:
         6e:4c:47:fb:6d:87:6d:99:bb:05:02:dc:61:f0:93:20:09:1f:
         c9:21:ca:8c:41:ee:be:e9:fc:c2:35:8a:bc:63:6c:8a:dd:0c:
         85:12:0d:6e:78:d0:aa:db:1e:77:34:53:71:9a:17:7a:97:50:
         c3:aa:5a:22:35:13:80:5e:1c:81:db:ea:a7:86:f6:9e:2e:de:
         83:d6:bd:49:78:32:d0:40:ad:02:59:92:16:03:a1:59:5c:1b:
         e7:a3:a6:b3:41:0b:9b:64:48:99:1b:a5:49:9c:bf:19:63:0c:
         39:9c:32:29:b3:9f:0b:0f:85:d9:a8:ad:6f:30:4a:67:d6:51:
         c2:81:2a:bb:2c:75:4f:bc:c7:bf:4b:48:ac:e5:1c:77:b1:9d:
         6c:fb:6f:40:9b:53:30:81:86:3f:e1:49:3b:f2:ed:62:3e:d9:
         a7:5b:bc:96:27:da:c8:b1:5e:94:92:91:28:9b:17:e2:c7:9f:
         73:2a:1d:89:ed:e4:79:76:95:3e:b7:79:66:32:4f:07:fd:65:
         73:4d:a4:ce:48:70:39:56:59:b6:85:9a:b7:94:87:a0:9f:ef:
         11:9f:1f:81:74:2e:69:f3:19:f5:5c:ee:cc:23:39:41:69:bd:
         2b:52:1b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:37 2026 by rpki-client