Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
File:                     F5615BC09B4111EF9EB3AD3AC4F9AE02.roa (raw, json)
Hash identifier:          logSYup7qS9Q6pYA6lyqNDxPjhcWKFpRkqTRuyUnXYU=
Subject key identifier:   38:C0:B1:FD:52:B7:DE:69:CB:7E:04:EE:56:1D:53:44:B2:D5:AD:E5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3175
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:22:43 +0000
ROA not before:           Mon 06 Jul 2026 16:22:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152516
IP address blocks:        157.20.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12661 (0x3175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:22:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd653-ec09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f8:e8:b7:09:d2:73:12:a2:f0:39:8c:df:a3:
                    9a:34:4e:5f:89:c6:e1:42:1d:35:4f:fc:df:bc:4c:
                    d7:dc:08:f2:bd:7e:4d:00:4d:bc:38:b7:67:26:59:
                    3e:88:bb:43:1e:0f:19:82:4d:6a:55:67:22:6e:b2:
                    cb:bd:04:dc:b1:37:65:aa:60:ff:bf:b5:80:72:7d:
                    be:69:0c:47:bb:8f:2d:ff:3e:a1:90:5b:55:0b:55:
                    ba:93:db:6a:a4:9e:52:fb:72:13:87:32:b7:7c:7e:
                    b4:13:02:d3:37:9c:96:87:f1:36:3d:93:a0:e7:7e:
                    33:f6:d7:53:ec:9a:ba:ac:48:bf:0d:71:f8:6f:64:
                    a4:db:ad:db:a2:10:80:da:f1:6a:1e:8f:ad:ec:3b:
                    1e:6b:7e:2e:cb:8d:ee:35:08:cd:5f:60:70:15:4e:
                    5c:c2:cc:30:b1:3e:39:4e:85:48:03:6d:f5:b6:14:
                    74:39:c5:26:96:2e:21:7b:ad:b1:bf:7d:ec:5a:7e:
                    2f:cc:7f:2e:6f:40:47:0e:c4:0c:77:80:23:a4:3d:
                    b0:5a:f5:4e:01:9a:16:ce:fe:79:de:21:d0:15:df:
                    83:c2:11:67:ae:e1:4a:07:9b:45:b5:62:29:3f:5a:
                    c5:a7:53:d5:a3:d2:3d:1f:4b:5f:52:c1:bc:71:52:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C0:B1:FD:52:B7:DE:69:CB:7E:04:EE:56:1D:53:44:B2:D5:AD:E5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5615BC09B4111EF9EB3AD3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:14:b5:f4:eb:07:4d:58:0e:2b:ac:0c:64:a5:1e:ef:bd:c6:
         52:3a:bb:53:72:61:37:fa:ee:33:52:fd:9e:75:53:6f:ec:44:
         9a:1d:02:f7:d1:c7:ba:d1:3e:45:fd:0d:db:84:fc:28:96:1c:
         27:72:e0:df:9d:31:0c:f7:df:c3:99:00:f8:ef:ba:7f:d0:2b:
         8e:92:21:d1:62:bd:81:b7:57:7f:63:bb:9b:d2:5f:be:2d:03:
         60:66:01:96:4d:7b:f7:9b:48:68:0e:9d:d1:26:89:ab:b2:ce:
         90:df:55:36:f6:20:73:26:4b:fc:a3:7f:d3:61:f8:36:da:bd:
         17:a3:57:9c:90:94:a9:06:7b:c5:ee:19:d3:42:1a:be:94:03:
         12:ab:f3:af:35:01:6e:c6:9c:2b:2e:ae:b9:66:f8:c3:f8:75:
         0d:04:02:5d:92:7a:0e:fb:a4:62:52:e9:2b:98:5a:9c:52:e8:
         b4:72:41:b3:e5:02:09:b9:07:12:4c:61:4c:58:ac:e3:82:4a:
         bc:a3:b7:a5:53:17:65:96:15:b8:c5:b2:88:9a:cb:86:6f:9c:
         4f:26:a8:7e:06:1a:50:45:db:8e:2a:2e:d5:e9:7b:8a:b5:27:
         6d:80:e1:2c:6f:57:bd:74:73:f3:6b:90:d3:7d:66:64:db:95:
         27:59:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:34 2026 by rpki-client