Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/014E7EC481B311F09497083AC4F9AE02.roa
File:                     014E7EC481B311F09497083AC4F9AE02.roa (raw, json)
Hash identifier:          CB8j2bjTxPGztp/qdtvFbSlwTSPUI1OV5BTIAluiLTI=
Subject key identifier:   3B:6F:D7:FD:DF:E3:2D:CB:1F:7F:51:53:CD:28:55:2C:C6:F0:0B:BC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAD0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/014E7EC481B311F09497083AC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:05 +0000
ROA not before:           Sun 31 May 2026 17:47:05 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154163
IP address blocks:        45.117.58.0/23 maxlen: 24
                          2001:df6:5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60112 (0xead0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:05 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7419-711f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a7:05:09:00:8a:3f:26:d8:43:6f:9d:f9:95:
                    a2:ef:d3:b1:c7:2a:ea:0f:59:ac:12:69:25:91:e9:
                    eb:88:7e:8d:ed:0d:f8:44:2e:07:e1:d4:3d:d1:9f:
                    74:28:16:d6:63:6d:f0:60:31:e3:5d:85:30:a7:64:
                    35:eb:f5:0b:4a:af:f5:79:bc:e8:90:7f:fd:39:50:
                    ba:e3:6b:6d:42:90:c4:c3:62:8f:a8:5c:17:29:74:
                    ce:6e:d8:92:04:76:f4:99:41:c7:94:71:96:28:12:
                    82:a0:f8:c5:e5:31:c8:1b:6a:b9:c9:8c:d9:35:a2:
                    b6:28:d8:25:39:ab:7e:4e:73:83:90:13:95:b8:bc:
                    b5:37:a2:1c:0b:2d:0d:4e:7d:15:d3:5f:ee:4e:ee:
                    5e:05:fe:b3:ba:fc:cb:21:ca:b1:b1:10:d0:86:98:
                    1c:f3:fd:d9:83:a7:67:ba:d5:e0:26:cf:4d:07:42:
                    67:08:5c:7e:ac:b3:47:73:ec:c8:76:da:8e:fc:b2:
                    15:71:b2:70:c0:dd:8e:bf:9a:23:2e:8e:2f:68:3f:
                    b4:84:d8:03:35:5b:51:3d:97:dc:45:0e:38:df:af:
                    8c:e2:33:10:db:b0:fa:ca:6e:9b:65:d8:d9:f5:65:
                    ef:c6:26:5a:1f:72:f2:4b:25:37:eb:aa:a7:dc:75:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6F:D7:FD:DF:E3:2D:CB:1F:7F:51:53:CD:28:55:2C:C6:F0:0B:BC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/014E7EC481B311F09497083AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.117.58.0/23
                IPv6:
                  2001:df6:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:46:5a:bc:ab:5a:83:fc:fc:fb:b9:b7:81:fe:3a:6c:89:b9:
         7f:a2:4f:28:f5:c7:77:88:07:3c:ea:02:cb:56:0d:4b:6b:76:
         3d:4c:01:19:fd:5a:98:6f:56:60:0e:35:2d:80:0d:cc:c6:97:
         eb:4b:bb:87:5b:fe:fa:50:df:5e:fe:07:9c:1b:28:63:e8:49:
         98:42:a4:17:43:c2:06:35:09:87:7f:26:78:8a:86:99:6c:c0:
         f0:42:ae:47:ba:4c:c6:36:03:80:8d:05:28:4c:c5:18:5a:37:
         70:34:72:c5:f7:b7:1f:2c:43:f6:ca:c3:0b:d4:92:05:30:16:
         46:08:52:cd:a1:b7:a2:07:0e:de:3d:8e:f8:67:a6:e3:52:34:
         1c:5c:1e:a0:42:4c:2d:71:19:59:37:0a:fd:12:f2:8e:56:36:
         66:aa:f6:c9:5a:99:4e:49:52:fd:41:e9:32:f3:7b:27:0a:3b:
         95:e1:5e:b9:1d:c1:66:f8:03:25:72:d6:1f:6d:4f:32:e9:38:
         eb:fd:ad:47:6c:39:e7:4a:a3:6c:55:e4:43:bc:3d:46:65:29:
         a0:69:f7:f6:89:19:23:88:3a:1d:b1:67:d4:ac:40:f8:ba:1c:
         81:a9:51:17:e4:74:b5:71:b9:ad:00:6c:23:01:7c:1d:39:69:
         e4:50:ee:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:54 2026 by rpki-client