Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1326EF48F0011F0B7A9F731C4F9AE02.roa
File:                     B1326EF48F0011F0B7A9F731C4F9AE02.roa (raw, json)
Hash identifier:          xGDdFWs/wnsPd6Buodm0GbbmxGZ3uPJwvzzWjmzOARg=
Subject key identifier:   D5:46:D6:DB:28:C0:AA:B1:2E:93:05:BA:F3:35:D6:A9:42:FC:C5:92
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAD5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1326EF48F0011F0B7A9F731C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:15 +0000
ROA not before:           Sun 31 May 2026 17:47:15 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154192
IP address blocks:        202.133.70.0/23 maxlen: 24
                          2001:df6:13c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60117 (0xead5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:15 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7423-e5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:a5:24:a8:2c:9d:84:6b:7f:4b:f1:67:32:
                    55:dd:75:cd:63:5c:a0:22:a2:28:cc:ba:5e:04:d9:
                    8b:1c:dc:1e:a5:24:e6:41:0a:e8:e8:2b:ba:53:f8:
                    f8:93:de:40:2a:61:14:3a:29:34:a0:33:54:f7:e3:
                    e4:6e:dc:1b:6c:d4:03:3e:5b:c8:0e:2f:f5:f4:42:
                    1e:4b:5b:0c:46:f7:20:fa:f0:fb:0b:80:12:d2:e9:
                    8f:62:0f:7c:5e:9b:0b:20:34:2e:96:ae:b2:92:1e:
                    8c:bc:10:58:3f:4d:25:ae:76:7e:7d:ac:37:53:45:
                    26:cd:19:1f:a7:c5:b0:20:f5:19:3d:45:81:ff:d2:
                    fd:4e:da:7d:3f:d0:91:22:15:3a:c8:24:82:eb:21:
                    db:79:78:63:0b:14:9d:1c:7b:11:c9:d0:60:04:0b:
                    d0:ed:57:c5:fb:8b:8c:92:4e:32:c9:aa:eb:01:51:
                    40:72:f6:6e:94:f6:5f:0f:bf:43:d9:8a:75:d8:68:
                    95:51:b6:b0:ee:3f:54:69:44:84:0e:af:a0:38:3c:
                    ab:4f:b3:c9:dd:c9:26:a1:7a:c9:e0:78:7e:7c:5f:
                    f0:0a:6d:55:d6:02:0c:97:2d:c4:79:78:16:b2:d0:
                    e3:9f:ea:99:9b:6f:47:f2:5b:4d:df:7e:ed:4a:1a:
                    ba:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:D6:DB:28:C0:AA:B1:2E:93:05:BA:F3:35:D6:A9:42:FC:C5:92
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B1326EF48F0011F0B7A9F731C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.133.70.0/23
                IPv6:
                  2001:df6:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:2d:97:15:94:30:51:99:b2:9c:ba:18:c8:fd:f8:29:4e:e4:
         32:9f:db:a9:19:5d:3b:87:94:61:9e:78:20:09:9c:cc:3b:f4:
         a1:35:39:ef:b5:ec:3d:24:b0:73:57:e5:c8:3e:10:4d:a9:c7:
         ab:50:21:f4:5f:7e:83:6f:ff:d9:2a:bc:a1:df:23:77:b2:22:
         61:a9:e4:71:18:96:1d:85:63:0c:eb:c6:9a:d6:fe:85:d4:01:
         5a:ac:cf:eb:25:20:7b:02:03:a7:41:c8:e9:23:3d:0a:12:69:
         83:c7:36:bf:20:3a:5e:f8:21:12:3e:2c:3f:cd:8f:7e:e1:ac:
         20:26:f5:ed:97:62:da:a7:60:04:36:d5:be:d8:c6:6c:ec:25:
         f9:c8:68:b7:4b:e1:60:df:3b:c8:f4:b3:63:17:2f:02:06:1e:
         c7:d9:21:2c:b8:68:4a:d7:dd:12:64:85:c0:74:74:21:f4:d5:
         54:2b:b0:a7:a1:19:ce:c8:00:08:2a:0a:86:fe:29:1d:e5:4b:
         8f:6b:f1:dc:23:a3:4d:a5:26:6c:4e:8f:35:6a:af:1c:f5:b3:
         b8:a5:f8:ff:62:bc:28:c5:84:a7:1f:cf:1d:92:b8:3d:6b:27:
         e3:8f:5b:02:7b:5b:9a:87:9b:41:86:b9:0a:93:3a:cd:88:fd:
         c4:46:3a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:35 2026 by rpki-client