Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B11C6E6ACB9F11F18FD31DB84211F970.roa
File:                     B11C6E6ACB9F11F18FD31DB84211F970.roa (raw, json)
Hash identifier:          ZSclxychC5fyoCQY0a7AhZi0eVfYn23omjvXWTR/Tis=
Subject key identifier:   A3:59:6F:7B:6B:BD:D2:A7:29:BE:57:8A:1B:19:DB:44:DF:0E:FD:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FE7B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B11C6E6ACB9F11F18FD31DB84211F970.roa
Signing time:             Mon 19 Oct 2026 09:37:20 +0000
ROA not before:           Mon 19 Oct 2026 09:37:20 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154969
IP address blocks:        43.242.234.0/23 maxlen: 24
                          2001:df7:9dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 28 Oct 2026 04:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65147 (0xfe7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 19 09:37:20 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ad5e4d0-d216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:69:74:09:c7:19:c8:44:0f:3e:46:fd:c3:9e:
                    9f:6b:c0:05:02:96:75:de:2a:5c:f3:c9:f1:10:63:
                    a5:30:67:db:26:3b:09:13:51:2d:47:6e:9a:26:cf:
                    7a:93:e3:50:1b:6a:92:9b:2e:12:e7:dd:d9:e6:b6:
                    e4:49:1d:16:86:ad:85:7b:2b:58:ea:c0:0e:09:63:
                    1c:a6:69:22:22:88:f5:c6:33:6a:e6:49:de:02:1d:
                    20:3b:fe:52:69:c4:81:07:cf:dc:17:42:b7:14:94:
                    46:54:bc:eb:dd:1c:a1:cb:e7:15:d6:90:12:0a:e8:
                    29:9c:2a:c3:34:24:ad:92:cb:49:15:39:c7:69:67:
                    20:8d:3d:66:dc:c5:43:a3:d6:41:fc:db:2b:c1:74:
                    2b:d9:7d:70:67:e4:ca:03:09:47:23:92:7b:38:93:
                    09:bc:dc:e2:ca:8e:5c:52:91:0a:63:0b:b0:06:b7:
                    f6:30:d1:ea:93:02:7d:95:d9:08:77:25:e9:47:53:
                    bb:f4:ac:75:cc:bb:44:d1:00:b7:de:56:49:14:45:
                    d1:c2:c2:9d:e7:e0:d2:82:8f:a7:51:85:b1:43:1a:
                    44:8a:5a:93:cd:16:a1:35:57:96:eb:e8:43:cf:1d:
                    18:e1:98:6e:c7:e6:c4:80:4e:4a:4b:0a:3e:4e:75:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:6F:7B:6B:BD:D2:A7:29:BE:57:8A:1B:19:DB:44:DF:0E:FD:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B11C6E6ACB9F11F18FD31DB84211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.234.0/23
                IPv6:
                  2001:df7:9dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ea:91:c4:2b:24:cb:11:93:8b:60:33:7a:7d:f2:bd:9b:c6:
         1e:70:a1:c9:0c:80:8e:07:49:4e:f0:ae:73:26:c6:07:ac:2e:
         da:a8:5e:e0:ce:06:e2:7e:75:da:79:0e:ed:9d:33:82:05:fc:
         0b:76:da:19:5f:20:ea:75:46:97:43:39:dc:ff:83:7b:41:2e:
         90:9b:ac:0d:84:be:67:52:3e:50:b7:a2:2e:0e:27:8f:87:28:
         aa:fd:cc:06:64:f5:9e:12:ce:3e:cb:83:c5:8f:b4:6a:3c:17:
         42:33:ca:b7:cc:69:ae:4c:31:56:63:c8:15:ca:0f:c5:58:e6:
         6b:40:56:73:55:ec:90:0c:a3:e1:63:9d:a3:82:07:0b:95:2f:
         a9:a6:9b:ca:04:4d:c8:16:bc:f5:e3:e8:82:ac:3c:3b:d1:30:
         49:d7:77:7b:31:36:84:6b:70:1c:16:bd:c8:84:1d:57:39:4e:
         81:66:07:b3:f0:94:9e:45:e9:37:f5:cf:bf:e0:92:8f:38:e8:
         9d:d3:dd:70:1d:12:08:3c:a1:12:8e:27:5b:09:d4:0c:82:c7:
         01:ca:db:85:b5:d9:83:dc:f6:75:ab:5d:22:2f:6c:13:e6:d1:
         fc:b4:73:ef:6f:c1:36:18:9d:dc:8a:38:f1:17:69:1a:21:fc:
         86:a3:b4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:15 2026 by rpki-client