Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F6E24F5C08C011F1A6F95616213D8C67.roa
File:                     F6E24F5C08C011F1A6F95616213D8C67.roa (raw, json)
Hash identifier:          nQxZCLJwXWLbiWgJYm20lPon31fhrxY0wG/0x4fTofw=
Subject key identifier:   22:EB:52:B2:75:0E:58:AA:99:FB:3E:64:B7:AD:AC:C4:81:C6:72:AF
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EEA
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F6E24F5C08C011F1A6F95616213D8C67.roa
Signing time:             Sun 31 May 2026 16:21:50 +0000
ROA not before:           Sun 31 May 2026 16:21:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142516
IP address blocks:        144.16.208.0/22 maxlen: 24
                          144.16.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12010 (0x2eea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:21:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c601e-566f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:1c:6c:50:c8:56:74:f1:dd:b9:17:65:a3:
                    2a:5c:88:9d:0a:7f:4d:b7:c8:60:a8:75:8e:5f:3f:
                    a3:4e:fb:49:80:50:f4:05:48:ad:f2:1f:7e:1d:05:
                    60:2b:38:17:0e:1d:45:90:78:3e:13:b8:61:a1:4f:
                    ca:64:1b:f5:df:14:fa:10:c7:de:db:f7:90:b0:93:
                    e8:ac:67:86:bb:cb:6c:e6:28:d3:36:d8:ed:db:a7:
                    60:ba:5b:5e:7c:7c:b1:08:7c:b1:d8:7f:48:79:0a:
                    ed:5f:1e:83:da:18:52:e0:fc:a5:27:8d:ee:fc:ba:
                    84:45:ba:55:3f:3c:28:62:2b:f5:8f:35:27:23:67:
                    8d:81:1b:e9:f5:69:f3:59:a8:16:72:0d:67:01:04:
                    8b:8b:81:53:b2:65:d3:5c:05:b6:2a:2c:79:0e:be:
                    85:84:5c:4a:92:38:46:77:ef:52:40:ee:5f:58:92:
                    67:33:fb:2e:c1:2d:40:d8:b3:98:3d:39:83:f8:56:
                    c5:fb:dd:da:51:ce:3e:c0:8b:61:a2:55:47:cc:92:
                    b9:ec:b9:66:e1:85:57:be:ef:1a:c4:43:aa:4a:72:
                    61:86:d1:05:ee:7c:f2:26:a7:01:90:89:7d:2d:9a:
                    5d:fb:e7:0f:21:8f:88:01:6b:da:92:16:83:3c:18:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EB:52:B2:75:0E:58:AA:99:FB:3E:64:B7:AD:AC:C4:81:C6:72:AF
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F6E24F5C08C011F1A6F95616213D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.16.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:0a:e1:b7:e1:43:98:7c:4a:57:6d:01:15:cd:67:b2:71:
         40:77:99:6c:27:d6:06:c9:e7:06:26:c2:df:f7:77:95:77:2b:
         e5:43:1a:f8:6f:6a:15:3b:d9:c5:03:4d:ae:3e:db:f7:9c:3e:
         73:34:c6:61:68:a4:f5:f9:da:82:ac:91:fd:45:d8:bf:c2:0e:
         3d:86:27:b7:10:8a:7c:35:d0:9e:0f:25:ae:2f:43:d5:36:4a:
         fd:9d:b4:2d:23:a1:73:ea:66:e1:51:2e:d3:78:b6:bd:53:31:
         03:b8:7a:12:da:01:aa:59:a7:12:a4:e6:90:d5:6c:9b:15:81:
         2e:c3:95:b4:f5:b9:16:24:cf:95:8b:7f:04:05:f4:ab:43:47:
         4e:76:52:f4:09:8f:00:e9:0f:e1:41:65:28:09:8b:95:cd:04:
         6d:27:60:14:bb:84:8f:30:05:63:fd:58:79:e1:18:c7:fd:92:
         12:3d:95:77:0b:44:e0:11:ce:42:7e:2f:a1:ee:0c:59:f7:fe:
         51:37:f6:e6:0c:4d:7f:09:db:af:57:3a:a8:3c:77:c9:ad:b5:
         0f:1a:ee:38:b4:93:93:62:b5:ca:11:1c:8b:a6:67:7c:87:3b:
         3c:67:64:5b:69:80:f1:a8:49:f4:35:47:23:a6:ec:ff:4b:02:
         65:c8:14:4d
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyMTUwWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjAxZS01NjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsIMcbFDIVnTx3bkXZaMqXIidCn9Nt8hgqHWOXz+jTvtJgFD0BUit8h9+HQVg
KzgXDh1FkHg+E7hhoU/KZBv13xT6EMfe2/eQsJPorGeGu8ts5ijTNtjt26dgulte
fHyxCHyx2H9IeQrtXx6D2hhS4PylJ43u/LqERbpVPzwoYiv1jzUnI2eNgRvp9Wnz
WagWcg1nAQSLi4FTsmXTXAW2Kix5Dr6FhFxKkjhGd+9SQO5fWJJnM/suwS1A2LOY
PTmD+FbF+93aUc4+wItholVHzJK57Llm4YVXvu8axEOqSnJhhtEF7nzyJqcBkIl9
LZpd++cPIY+IAWvakhaDPBgUFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCLrUrJ1
Dliqmfs+ZLetrMSBxnKvMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjZFMjRGNUMw
OEMwMTFGMUE2Rjk1NjE2MjEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQDkBDQMA0GCSqGSIb3DQEBCwUAA4IBAQCDygrht+FDmHxKV20BFc1n
snFAd5lsJ9YGyecGJsLf93eVdyvlQxr4b2oVO9nFA02uPtv3nD5zNMZhaKT1+dqC
rJH9Rdi/wg49hie3EIp8NdCeDyWuL0PVNkr9nbQtI6Fz6mbhUS7TeLa9UzEDuHoS
2gGqWacSpOaQ1WybFYEuw5W09bkWJM+Vi38EBfSrQ0dOdlL0CY8A6Q/hQWUoCYuV
zQRtJ2AUu4SPMAVj/Vh54RjH/ZISPZV3C0TgEc5Cfi+h7gxZ9/5RN/bmDE1/Cduv
VzqoPHfJrbUPGu44tJOTYrXKERyLpmd8hzs8Z2RbaYDxqEn0NUcjpuz/SwJlyBRN
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:16:57 2026 by rpki-client