Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFE90172E09D11F0918B71D1446F56BC.roa
File:                     FFE90172E09D11F0918B71D1446F56BC.roa (raw, json)
Hash identifier:          Ai4QkK83oDmnIcQlslmbqqZUCBPjmV7BSEjBrkS6PrU=
Subject key identifier:   AF:F8:8E:1F:37:43:6B:85:28:32:F6:7C:F4:1A:87:2D:BB:58:42:16
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3210
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFE90172E09D11F0918B71D1446F56BC.roa
Signing time:             Mon 06 Jul 2026 16:27:46 +0000
ROA not before:           Mon 06 Jul 2026 16:27:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154436
IP address blocks:        144.79.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12816 (0x3210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:27:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd781-cab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:3f:1b:e8:04:e3:79:8b:80:31:32:93:15:
                    d1:83:d8:45:0b:07:7e:00:d5:28:21:1c:2b:ec:4b:
                    6d:d3:22:8f:75:83:91:a0:62:6a:9f:86:6e:85:19:
                    9e:78:58:e7:2a:48:f0:df:9f:95:6b:1e:a2:ca:89:
                    25:02:92:cd:08:64:7d:c4:4f:2f:ee:d4:36:30:fa:
                    b9:ec:21:7b:70:3f:cc:2f:1e:ae:23:8b:0d:2f:08:
                    e1:23:9d:65:18:6c:88:03:2e:6c:12:3c:f2:f8:bc:
                    0d:f6:17:9b:1c:c0:20:f1:31:18:a1:f6:d8:ee:8d:
                    33:dd:e9:e4:b0:4e:a1:91:70:7e:c9:9a:6e:46:cc:
                    01:39:f6:c1:31:0a:f7:43:c0:b0:cb:74:e5:77:02:
                    bd:72:3b:f5:0c:e0:79:a2:09:ac:c9:79:30:4e:32:
                    2e:d1:23:60:6b:d0:3f:1c:23:46:15:d8:03:ce:b3:
                    fa:41:22:f8:2e:7b:dd:f6:a3:77:c2:98:08:fe:e1:
                    2d:03:65:2d:04:60:e4:cb:12:a6:8c:f2:a0:a9:a0:
                    0b:55:de:ee:3a:0e:52:a2:5c:d5:03:a9:5d:8c:31:
                    e8:41:39:61:57:69:db:16:63:32:3b:a2:15:81:ed:
                    d5:f7:35:53:fe:7b:a6:f3:5d:f8:bf:b8:94:0d:f2:
                    de:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F8:8E:1F:37:43:6B:85:28:32:F6:7C:F4:1A:87:2D:BB:58:42:16
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/FFE90172E09D11F0918B71D1446F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:91:f2:d6:15:8b:2f:8a:8b:fa:dd:b2:cb:2b:9d:04:8a:
         17:aa:16:03:f7:34:1d:9a:27:67:e4:cc:64:38:d7:78:00:3b:
         ef:40:04:88:e5:1f:62:c4:2b:7d:f2:e9:3d:22:6b:02:73:0f:
         b3:b9:62:cd:82:8d:ae:01:0d:ec:7a:c2:76:73:21:7d:53:35:
         0a:1d:e3:8e:58:2f:12:10:d8:0f:b4:06:e9:54:f5:f0:2d:fb:
         8f:f1:d0:70:d0:4a:f2:ea:18:f4:99:5c:2f:74:c7:cc:e7:af:
         b8:00:ff:a9:d0:f3:9a:2a:cb:ea:bb:74:97:b7:67:96:73:a5:
         bc:aa:52:3b:5b:54:e6:18:85:78:20:93:3a:5c:b0:ab:2f:09:
         29:c2:52:a2:a6:ab:20:a2:09:98:4a:c0:48:65:c4:9b:f5:0e:
         ba:a5:4d:f6:6a:a4:6b:62:74:2f:a0:4f:0b:3b:a1:18:5b:8d:
         d8:4b:73:62:bd:44:6c:a3:53:39:99:17:a3:b5:d3:4b:46:e8:
         53:45:64:20:ec:85:f2:db:d7:87:75:c6:ea:e2:99:48:5f:23:
         c2:55:5e:4d:07:ef:cf:d3:bf:e6:fd:5d:b7:ee:aa:08:3c:a2:
         0c:4a:53:8b:23:db:1c:c4:d5:73:fb:5b:64:02:ee:0c:74:cf:
         66:7f:69:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:10 2026 by rpki-client