Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32B26ACC59BF11F1B471F6DAC2833773.roa
File:                     32B26ACC59BF11F1B471F6DAC2833773.roa (raw, json)
Hash identifier:          +vQ5YjpaikBofA7xXUmDsSs3jTAtOiB6TbGidnSOBCI=
Subject key identifier:   70:E1:F7:55:99:43:C1:48:2F:49:CA:9E:21:63:4E:E5:D1:19:8A:6B
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAD1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32B26ACC59BF11F1B471F6DAC2833773.roa
Signing time:             Sun 31 May 2026 17:47:07 +0000
ROA not before:           Sun 31 May 2026 17:47:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154172
IP address blocks:        203.174.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60113 (0xead1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c741b-f417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:35:c3:0b:a4:59:a3:d2:55:73:c6:9d:9f:fc:
                    35:58:11:5d:90:8c:ae:23:06:d9:08:3a:57:0d:18:
                    b4:1f:5e:71:31:c8:2b:61:2f:ce:73:98:77:54:3c:
                    40:81:95:0a:68:dd:da:e9:21:09:15:44:a3:84:bc:
                    36:4b:21:06:18:f6:25:fe:de:6e:f2:38:25:d1:f6:
                    55:f9:6b:7c:4f:32:b7:1d:fb:fe:29:0c:ac:33:c5:
                    3a:36:73:f3:3d:5e:b2:b7:d2:b1:ae:bb:43:23:96:
                    ea:6e:c2:6d:6d:8e:f7:3f:25:e9:81:65:1d:9a:f2:
                    3f:62:33:a3:89:25:6d:81:62:27:e8:12:b8:3e:95:
                    01:fe:07:97:2f:4e:4f:8f:89:6e:ea:f4:7d:25:09:
                    8d:01:d7:51:d1:b0:8e:2d:49:95:87:ee:6b:c4:e6:
                    8e:47:1c:90:b3:ef:51:85:25:5d:21:08:a6:a8:e2:
                    a5:0a:b4:50:e6:7d:df:1b:fc:db:f8:ec:b0:1c:2b:
                    32:86:f0:14:ca:7b:33:fe:5d:2b:5e:57:ed:a0:76:
                    6b:65:1e:fc:a5:8f:43:dc:52:55:c0:04:50:fc:d6:
                    69:41:e7:10:c9:0a:cb:34:76:a2:8c:41:d4:16:3a:
                    19:f5:7d:bd:6a:7f:ae:d9:be:9c:7d:5d:00:73:eb:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E1:F7:55:99:43:C1:48:2F:49:CA:9E:21:63:4E:E5:D1:19:8A:6B
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/32B26ACC59BF11F1B471F6DAC2833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.174.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:31:17:d8:e0:98:1d:3c:d0:8a:67:ec:8a:60:5c:d7:f0:4e:
         1d:f2:8f:c4:df:5d:d3:19:82:d0:ec:ca:2f:98:a2:46:f7:1b:
         24:c8:ea:ad:b4:14:b1:09:c1:c9:0e:70:c7:f6:18:cc:c8:91:
         35:68:04:d0:d6:8b:1f:f3:7a:c3:c9:85:73:44:69:d1:44:b1:
         7b:06:95:6b:e4:17:e9:d2:4a:f0:51:b8:3e:50:a4:dd:63:b7:
         89:6e:54:c3:35:ab:f4:82:eb:e5:61:67:a9:0e:05:03:5d:fe:
         5e:85:eb:e4:e3:47:77:fe:3f:0f:c2:67:4a:e5:44:8a:26:6d:
         b6:89:ec:b2:94:1d:96:1f:a8:e0:d9:cb:5b:aa:11:fa:94:49:
         e0:5e:38:03:f8:57:10:cd:78:5b:e1:73:50:da:50:f1:13:30:
         7d:c2:fb:be:19:5a:08:9b:4b:e7:0c:c3:58:f9:cd:47:85:97:
         b4:47:c4:4b:92:34:f2:db:1b:5b:d4:84:a5:74:a6:0a:34:59:
         06:d7:60:75:30:3c:b2:1a:fe:cc:4f:24:75:f4:c4:62:91:8e:
         07:8c:85:23:40:8c:51:e4:e8:e5:29:23:58:9b:a9:4a:7f:82:
         5b:88:a1:af:82:da:9c:d8:56:6d:16:5a:f6:a4:d7:68:d2:2c:
         75:75:af:69
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOrRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDcwN1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzc0MWItZjQxNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMY1wwukWaPSVXPGnZ/8NVgRXZCMriMG2Qg6Vw0YtB9ecTHIK2EvznOYd1Q8
QIGVCmjd2ukhCRVEo4S8NkshBhj2Jf7ebvI4JdH2VflrfE8ytx37/ikMrDPFOjZz
8z1esrfSsa67QyOW6m7CbW2O9z8l6YFlHZryP2Izo4klbYFiJ+gSuD6VAf4Hly9O
T4+Jbur0fSUJjQHXUdGwji1JlYfua8TmjkcckLPvUYUlXSEIpqjipQq0UOZ93xv8
2/jssBwrMobwFMp7M/5dK15X7aB2a2Ue/KWPQ9xSVcAEUPzWaUHnEMkKyzR2ooxB
1BY6GfV9vWp/rtm+nH1dAHPrU70CAwEAAaOCAmAwggJcMB0GA1UdDgQWBBRw4fdV
mUPBSC9Jyp4hY07l0RmKazAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzMyQjI2QUND
NTlCRjExRjFCNDcxRjZEQUMyODMzNzczLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAcuuEjANBgkqhkiG9w0BAQsFAAOCAQEARzEX2OCYHTzQimfsimBc
1/BOHfKPxN9d0xmC0OzKL5iiRvcbJMjqrbQUsQnByQ5wx/YYzMiRNWgE0NaLH/N6
w8mFc0Rp0USxewaVa+QX6dJK8FG4PlCk3WO3iW5UwzWr9ILr5WFnqQ4FA13+XoXr
5ONHd/4/D8JnSuVEiiZttonsspQdlh+o4NnLW6oR+pRJ4F44A/hXEM14W+FzUNpQ
8RMwfcL7vhlaCJtL5wzDWPnNR4WXtEfES5I08tsbW9SEpXSmCjRZBtdgdTA8shr+
zE8kdfTEYpGOB4yFI0CMUeTo5SkjWJupSn+CW4ihr4LanNhWbRZa9qTXaNIsdXWv
aQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:04 2026 by rpki-client