Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4019C2567CFB11F091FD1A77C4F9AE02.roa
File:                     4019C2567CFB11F091FD1A77C4F9AE02.roa (raw, json)
Hash identifier:          Nd/3glwndVaZ7NYSRsIxrX6QbBfuWvVUQIZmulglcgY=
Subject key identifier:   2B:18:93:A9:09:8C:5F:EE:6F:F9:EA:5E:B1:6F:85:F8:0E:5C:13:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6EE
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4019C2567CFB11F091FD1A77C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:46:13 +0000
ROA not before:           Mon 06 Jul 2026 17:46:13 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154140
IP address blocks:        49.213.38.0/23 maxlen: 24
                          2001:df5:fac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63214 (0xf6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:46:13 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be9e5-35a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:f6:da:4b:47:b8:b9:05:97:72:79:ea:79:
                    ef:99:9f:2b:f7:62:c1:92:a1:d7:b2:23:87:14:ee:
                    b2:2b:dc:c7:1b:08:96:c4:0d:e9:6f:9a:97:04:28:
                    c2:21:a0:cd:31:2f:fc:d6:d1:e4:f1:8a:09:73:e3:
                    43:02:b7:46:eb:d5:02:84:a9:74:71:6c:61:30:04:
                    e4:73:1e:25:78:f1:a5:8c:ef:c4:fc:70:74:5a:ae:
                    af:41:18:1c:7c:4f:cf:f0:84:f3:56:fd:f9:0e:c7:
                    a4:e2:2b:5d:f2:74:fd:8d:14:7e:4f:02:dc:be:14:
                    77:c1:72:23:e7:c5:70:82:e5:26:fd:ce:a3:13:b3:
                    ae:6e:09:af:10:bd:75:5a:c0:a4:65:6a:fa:74:ed:
                    9c:e1:c9:6d:5d:a7:97:32:2e:95:5a:55:d1:be:31:
                    df:a1:44:e9:4d:f6:96:49:ad:dd:a0:83:fa:f0:fc:
                    60:91:e4:85:70:75:3b:4b:93:4a:bc:79:5d:7a:d8:
                    07:c8:ca:81:86:58:3e:dd:44:f3:f0:3b:8a:26:a7:
                    70:71:03:00:05:46:93:c0:10:d0:a5:d1:31:18:50:
                    f2:c7:15:4a:3c:d9:30:07:8c:37:cf:07:36:4c:9f:
                    61:d6:62:46:fa:78:6d:b3:2f:8f:0c:24:93:a1:b2:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:18:93:A9:09:8C:5F:EE:6F:F9:EA:5E:B1:6F:85:F8:0E:5C:13:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4019C2567CFB11F091FD1A77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.213.38.0/23
                IPv6:
                  2001:df5:fac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:35:57:d1:a2:b4:6d:ed:b5:35:9b:69:fc:77:0f:f7:da:6a:
         11:54:e1:b6:7a:c8:e8:0a:e8:a2:51:38:6c:1b:3b:90:bf:9f:
         5e:89:47:21:f4:ec:43:55:5e:3e:83:23:63:59:3a:d2:ac:e7:
         ef:8d:46:30:fe:df:de:31:d5:c6:0a:0d:7d:de:09:3b:4e:95:
         92:76:97:46:57:55:b5:f7:9e:2d:66:86:20:e4:10:f2:e7:90:
         f0:a6:b9:b1:75:61:e6:1f:82:b1:9b:90:e3:34:56:12:3e:f7:
         47:c1:18:67:e7:75:63:0a:3e:94:81:0c:47:98:23:42:5a:4a:
         a3:09:d6:4a:dd:fa:51:cd:8a:2d:9d:ab:4c:ce:79:98:17:59:
         56:36:dc:2a:58:cc:ed:e4:eb:75:1d:bc:40:04:03:16:d9:b3:
         68:5e:13:45:6c:5b:47:92:c7:df:d5:91:15:d1:90:72:e2:29:
         30:7a:51:f5:fd:e9:27:47:67:89:5f:7f:da:07:bc:97:72:97:
         bd:e1:44:6e:74:c2:30:22:a3:e9:60:85:99:b4:d1:56:fa:b7:
         33:bb:ff:02:a3:4a:ab:a4:da:73:17:1f:e9:9a:d7:bc:f3:c4:
         92:b5:bb:cf:23:ca:fa:1d:2c:98:41:28:c7:39:2e:6d:a3:97:
         65:94:51:b4
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPbuMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDYxM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU5ZTUtMzVhMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJap9tpLR7i5BZdyeep575mfK/diwZKh17IjhxTusivcxxsIlsQN6W+alwQo
wiGgzTEv/NbR5PGKCXPjQwK3RuvVAoSpdHFsYTAE5HMeJXjxpYzvxPxwdFqur0EY
HHxPz/CE81b9+Q7HpOIrXfJ0/Y0Ufk8C3L4Ud8FyI+fFcILlJv3OoxOzrm4JrxC9
dVrApGVq+nTtnOHJbV2nlzIulVpV0b4x36FE6U32lkmt3aCD+vD8YJHkhXB1O0uT
Srx5XXrYB8jKgYZYPt1E8/A7iiancHEDAAVGk8AQ0KXRMRhQ8scVSjzZMAeMN88H
NkyfYdZiRvp4bbMvjwwkk6GyIuMCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBQrGJOp
CYxf7m/56l6xb4X4DlwTbDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQwMTlDMjU2
N0NGQjExRjA5MUZEMUE3N0M0RjlBRTAyLnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEATHVJjAPBAIAAjAJAwcAIAEN9frAMA0GCSqGSIb3DQEBCwUAA4IB
AQAiNVfRorRt7bU1m2n8dw/32moRVOG2esjoCuiiUThsGzuQv59eiUch9OxDVV4+
gyNjWTrSrOfvjUYw/t/eMdXGCg193gk7TpWSdpdGV1W1954tZoYg5BDy55Dwprmx
dWHmH4Kxm5DjNFYSPvdHwRhn53VjCj6UgQxHmCNCWkqjCdZK3fpRzYotnatMznmY
F1lWNtwqWMzt5Ot1HbxABAMW2bNoXhNFbFtHksff1ZEV0ZBy4ikwelH1/eknR2eJ
X3/aB7yXcpe94URudMIwIqPpYIWZtNFW+rczu/8Co0qrpNpzFx/pmte888SStbvP
I8r6HSyYQSjHOS5to5dllFG0
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:36 2026 by rpki-client