Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2C55A2C3E0711F096A4D328C4F9AE02.roa
File:                     C2C55A2C3E0711F096A4D328C4F9AE02.roa (raw, json)
Hash identifier:          +QS0p4G6YVqoMWD6Q/L8h+g4Fmslwb3biRtKBdPX/MY=
Subject key identifier:   EF:62:7A:40:F4:55:44:18:4E:45:7F:DC:C7:6C:2D:13:E5:62:19:9A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E552
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2C55A2C3E0711F096A4D328C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:01:03 +0000
ROA not before:           Sun 31 May 2026 17:01:03 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     137279
IP address blocks:        163.61.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58706 (0xe552)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:01:03 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c694e-ced1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:7c:12:78:f4:65:da:81:3b:33:87:58:dc:
                    7a:16:23:74:00:3b:da:39:b6:8b:f1:57:bc:5e:17:
                    ee:f8:1b:e1:a7:7a:a5:a8:dd:78:32:e9:2d:27:2d:
                    13:8e:9f:a8:e9:11:be:87:b8:34:3f:a9:83:74:c1:
                    75:ed:92:cb:06:d4:75:ea:63:d6:e6:92:37:b3:f2:
                    2f:25:d2:1b:96:c7:20:81:43:bc:9c:f5:c0:83:4a:
                    95:a5:15:26:63:5a:6b:fd:c0:ee:b6:be:4d:c7:63:
                    63:61:e9:a2:d9:db:d6:6f:f6:fa:e2:30:1b:7c:c4:
                    dd:1b:3b:db:a7:2e:c9:c4:9a:28:08:80:fc:bb:4a:
                    1a:78:13:f7:db:67:a8:ed:de:d6:a7:de:02:1f:c0:
                    da:4d:66:1c:d9:b7:21:10:bd:09:6c:1c:f7:ca:77:
                    8c:97:5b:4b:4d:68:4b:71:dd:e1:cd:cd:63:bf:07:
                    65:d9:fd:2c:d9:35:b1:b6:15:53:df:cb:01:4b:84:
                    90:e7:5e:af:d7:8f:fe:fa:69:ab:24:dd:08:65:77:
                    c4:1b:90:16:ab:f3:69:a6:db:41:e3:6f:4f:5f:06:
                    e5:63:1c:7e:5e:e2:ba:35:e2:06:7a:bd:3e:7d:19:
                    7e:11:c5:a6:dc:21:1b:53:24:16:60:70:69:e7:5a:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:62:7A:40:F4:55:44:18:4E:45:7F:DC:C7:6C:2D:13:E5:62:19:9A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C2C55A2C3E0711F096A4D328C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:0f:fb:77:be:ae:7f:71:19:60:ad:ab:b0:b7:51:42:73:4a:
         08:a4:7b:bb:45:42:4c:48:3f:ab:ee:c3:f7:79:9c:17:b4:61:
         8c:a9:67:49:07:f8:fe:3c:81:2e:db:b4:ce:80:ca:60:d0:6b:
         65:d4:2e:9f:dc:07:5a:02:b9:cb:3d:e4:59:e5:19:a8:11:f1:
         48:16:94:05:98:c8:b2:34:b3:0a:d0:78:dd:cc:3c:ad:8d:14:
         36:a3:55:a8:e2:e1:63:93:0d:0f:74:cb:4e:8e:a1:90:18:40:
         21:40:67:59:80:3d:f5:12:79:7d:23:0d:4f:74:b8:6c:ae:89:
         41:76:c5:bc:8c:7c:94:3b:eb:8d:37:25:50:bf:7a:24:b4:d2:
         eb:ce:63:e4:1d:71:85:1b:c1:8b:c9:b4:5b:be:e9:55:8b:1c:
         8e:46:69:ce:df:08:fb:e2:d4:06:8f:2a:3d:90:a6:6c:46:c4:
         1c:79:c0:58:e4:ba:4c:e1:4d:a7:1a:3e:3d:18:70:14:5f:70:
         5c:9b:e1:9d:b7:83:8b:cf:15:7a:91:e9:5a:fa:52:dd:45:54:
         ca:d1:2f:ee:82:10:73:f7:b3:f4:a4:f6:2f:9e:ad:5b:dd:0e:
         f0:d0:bc:b4:31:84:83:ca:01:69:fa:fd:ca:30:35:6c:c7:7c:
         43:5b:c6:16
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIDAOVSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MDEwM1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY5NGUtY2VkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALQMfBJ49GXagTszh1jcehYjdAA72jm2i/FXvF4X7vgb4ad6pajdeDLpLSct
E46fqOkRvoe4ND+pg3TBde2SywbUdepj1uaSN7PyLyXSG5bHIIFDvJz1wINKlaUV
JmNaa/3A7ra+TcdjY2Hpotnb1m/2+uIwG3zE3Rs726cuycSaKAiA/LtKGngT99tn
qO3e1qfeAh/A2k1mHNm3IRC9CWwc98p3jJdbS01oS3Hd4c3NY78HZdn9LNk1sbYV
U9/LAUuEkOder9eP/vppqyTdCGV3xBuQFqvzaabbQeNvT18G5WMcfl7iujXiBnq9
Pn0ZfhHFptwhG1MkFmBwaedaMGcCAwEAAaOCAmAwggJcMB0GA1UdDgQWBBTvYnpA
9FVEGE5Ff9zHbC0T5WIZmjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0MyQzU1QTJD
M0UwNzExRjA5NkE0RDMyOEM0RjlBRTAyLnJvYTAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKM9zDANBgkqhkiG9w0BAQsFAAOCAQEAfA/7d76uf3EZYK2rsLdR
QnNKCKR7u0VCTEg/q+7D93mcF7RhjKlnSQf4/jyBLtu0zoDKYNBrZdQun9wHWgK5
yz3kWeUZqBHxSBaUBZjIsjSzCtB43cw8rY0UNqNVqOLhY5MND3TLTo6hkBhAIUBn
WYA99RJ5fSMNT3S4bK6JQXbFvIx8lDvrjTclUL96JLTS685j5B1xhRvBi8m0W77p
VYscjkZpzt8I++LUBo8qPZCmbEbEHHnAWOS6TOFNpxo+PRhwFF9wXJvhnbeDi88V
epHpWvpS3UVUytEv7oIQc/ez9KT2L56tW90O8NC8tDGEg8oBafr9yjA1bMd8Q1vG
Fg==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:46 2026 by rpki-client