Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5005944E41FC11F1AF20C3ACBF833773.roa
File:                     5005944E41FC11F1AF20C3ACBF833773.roa (raw, json)
Hash identifier:          qbS3znAHvHS+NQIIBR8CtlCe1cfS5qaCkaKip3MzI/0=
Subject key identifier:   C8:A8:91:3F:A5:E2:6F:C6:26:E2:4C:DC:D7:C4:5D:FB:D2:C2:C6:40
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E9A6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5005944E41FC11F1AF20C3ACBF833773.roa
Signing time:             Sun 31 May 2026 17:37:50 +0000
ROA not before:           Sun 31 May 2026 17:37:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151100
IP address blocks:        218.185.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59814 (0xe9a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:37:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c71ee-f672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:b0:d2:5e:86:94:e4:40:30:7b:76:46:38:
                    fc:14:55:9a:ba:23:6c:df:c6:01:cf:eb:e7:40:4f:
                    74:d2:f4:12:1b:31:4a:6c:ec:16:3f:57:08:76:9f:
                    2a:9a:fc:ba:01:34:b4:3b:76:8c:94:b9:c4:15:ea:
                    8b:cb:26:24:be:56:19:82:0a:2b:b7:47:bc:c0:60:
                    99:5b:92:91:30:57:85:dc:51:f6:53:46:8d:fb:97:
                    cf:78:b8:2e:d9:ee:b5:ac:fd:56:8b:36:eb:74:3c:
                    d5:b0:92:50:18:39:ec:a6:4c:18:81:4e:93:da:83:
                    c7:07:59:8b:7f:d7:57:2d:99:04:dc:dc:53:86:10:
                    a6:ea:16:d8:9e:f7:53:03:08:a0:a0:d6:ba:4b:ae:
                    8b:7e:bc:ff:e5:31:dd:ef:ef:74:48:a8:83:90:ee:
                    34:3c:45:78:ae:60:32:8b:5c:34:22:ae:fc:09:2f:
                    28:90:b1:7d:8e:52:de:35:28:1f:e9:72:d0:72:06:
                    63:00:26:3b:9f:6e:f1:1f:a6:b0:b3:a1:80:3f:b6:
                    ed:1e:cd:2b:a6:5c:12:fa:0d:40:ec:d9:fd:81:1e:
                    55:5e:c6:a8:9a:84:4c:24:04:0f:54:97:69:c2:4a:
                    1d:3f:e7:a2:f8:fa:a3:be:45:dc:d1:c8:97:10:65:
                    87:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A8:91:3F:A5:E2:6F:C6:26:E2:4C:DC:D7:C4:5D:FB:D2:C2:C6:40
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5005944E41FC11F1AF20C3ACBF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.185.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:74:a8:a3:b4:58:f9:25:42:eb:71:c1:81:17:70:1a:2f:e5:
         c4:08:a6:19:eb:57:5e:94:7a:42:d1:a3:14:a4:8d:fd:24:93:
         45:5f:ad:26:d3:b0:dc:d3:54:dd:0c:e8:61:d4:af:68:da:8d:
         ae:7b:7f:2e:91:25:e8:36:fe:31:9d:7b:65:37:6c:b8:4e:4d:
         44:97:89:17:78:50:16:26:ed:7c:85:67:e6:e1:41:e8:9d:9a:
         27:9b:c1:af:f9:ed:b0:2a:ff:02:36:a2:53:71:5c:04:82:e8:
         2b:7d:9c:6a:cd:c4:1b:fd:13:0e:49:d0:99:92:93:1c:dd:ce:
         72:18:0c:2c:f1:0b:e7:7b:16:84:33:d9:55:70:d8:fc:46:84:
         83:f5:60:27:ee:1a:82:21:a3:6e:66:0a:bf:78:dd:ee:48:a8:
         25:90:48:26:82:76:d3:b0:cc:d0:37:df:26:e7:c8:a2:11:81:
         20:7e:c9:8f:54:9f:76:9c:ab:15:ef:da:46:7c:d9:ee:11:25:
         4f:e3:c2:59:bf:a0:1e:7a:c5:19:d5:8e:52:e8:cb:1e:7c:7c:
         ba:78:73:51:95:fa:3d:fd:87:af:24:20:15:93:11:79:c7:fe:
         1e:ca:04:97:5f:c2:56:51:88:02:38:df:cc:c9:b4:eb:c3:c0:
         21:e7:d0:af
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOmmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3Mzc1MFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxZWUtZjY3MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAML4sNJehpTkQDB7dkY4/BRVmrojbN/GAc/r50BPdNL0EhsxSmzsFj9XCHaf
Kpr8ugE0tDt2jJS5xBXqi8smJL5WGYIKK7dHvMBgmVuSkTBXhdxR9lNGjfuXz3i4
Ltnutaz9Vos263Q81bCSUBg57KZMGIFOk9qDxwdZi3/XVy2ZBNzcU4YQpuoW2J73
UwMIoKDWukuui368/+Ux3e/vdEiog5DuNDxFeK5gMotcNCKu/AkvKJCxfY5S3jUo
H+ly0HIGYwAmO59u8R+msLOhgD+27R7NK6ZcEvoNQOzZ/YEeVV7GqJqETCQED1SX
acJKHT/novj6o75F3NHIlxBlh6cCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTIqJE/
peJvxibiTNzXxF370sLGQDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUwMDU5NDRF
NDFGQzExRjFBRjIwQzNBQ0JGODMzNzczLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAtq5/DANBgkqhkiG9w0BAQsFAAOCAQEASHSoo7RY+SVC63HBgRdw
Gi/lxAimGetXXpR6QtGjFKSN/SSTRV+tJtOw3NNU3QzoYdSvaNqNrnt/LpEl6Db+
MZ17ZTdsuE5NRJeJF3hQFibtfIVn5uFB6J2aJ5vBr/ntsCr/AjaiU3FcBILoK32c
as3EG/0TDknQmZKTHN3OchgMLPEL53sWhDPZVXDY/EaEg/VgJ+4agiGjbmYKv3jd
7kioJZBIJoJ207DM0DffJufIohGBIH7Jj1SfdpyrFe/aRnzZ7hElT+PCWb+gHnrF
GdWOUujLHnx8unhzUZX6Pf2HryQgFZMRecf+HsoEl1/CVlGIAjjfzMm068PAIefQ
rw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:04:00 2026 by rpki-client