Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4CCBDE2147011F082A51934C4F9AE02.roa
File:                     E4CCBDE2147011F082A51934C4F9AE02.roa (raw, json)
Hash identifier:          noQSrQsxisINpwtvWpA1HsFFCOUgQqpklrOA7/k0ZtI=
Subject key identifier:   0C:BE:8D:0A:22:04:04:7F:E3:A4:8A:14:E6:40:0D:D3:11:E8:17:C0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E362
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4CCBDE2147011F082A51934C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:45:03 +0000
ROA not before:           Sun 31 May 2026 16:45:03 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134887
IP address blocks:        163.61.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58210 (0xe362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:45:03 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c658f-d240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c3:4c:00:be:32:ce:49:28:fc:fe:de:8c:e0:
                    47:a5:90:56:c0:20:bb:45:2e:13:84:d5:68:90:49:
                    26:c5:12:b3:7f:84:fb:03:21:f8:0a:af:4f:82:9c:
                    8d:99:da:d5:60:cb:ff:a3:21:d1:28:3a:ea:10:ce:
                    96:c1:02:89:17:d5:b3:44:fa:9e:8a:17:b9:69:86:
                    f9:e4:c2:21:0b:01:17:cb:a5:13:10:ff:be:4b:56:
                    6c:dd:87:39:52:7d:9f:c0:de:d9:e3:4e:dd:b2:08:
                    57:da:66:57:a4:14:e1:f6:fb:d7:55:25:d0:e4:a1:
                    e6:d1:7a:a0:89:97:3d:05:dc:97:c1:75:3b:cf:84:
                    19:39:69:b3:24:b6:cb:db:c1:17:67:c4:5c:de:aa:
                    61:b7:2a:b7:7f:de:9b:c5:d0:a2:8f:6a:8c:8a:af:
                    0c:65:13:ef:96:18:83:24:2d:20:b1:13:6b:c7:27:
                    2f:5d:c6:31:c8:69:75:49:31:d4:21:29:6c:57:54:
                    af:51:a1:c3:12:e0:68:dc:d0:26:12:4f:71:4a:50:
                    8a:fa:9f:92:55:f9:6c:b7:ab:89:8c:53:eb:bd:e9:
                    87:85:a9:bc:bd:ff:df:4a:ff:77:a7:cd:88:cd:4c:
                    ec:5c:da:0e:3f:34:cb:8a:57:69:3e:6f:e5:82:8d:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BE:8D:0A:22:04:04:7F:E3:A4:8A:14:E6:40:0D:D3:11:E8:17:C0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4CCBDE2147011F082A51934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.61.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:4e:91:7b:fc:30:e8:21:5a:1a:ca:d6:29:ab:e7:b1:dd:b6:
         a5:1c:49:48:0b:be:13:43:4b:f2:ff:7f:50:51:29:9e:c3:ff:
         55:4a:d4:18:8c:f1:d7:d3:f2:6c:16:d3:0a:b0:d0:6d:d2:fb:
         3b:ae:c6:bc:03:47:8d:74:15:07:c9:4b:eb:32:c2:37:85:fd:
         04:06:11:a5:b9:df:bb:ee:62:d0:4f:b4:b7:b3:b3:ba:b5:0c:
         6f:29:61:11:d6:53:6a:31:c5:39:7b:a6:39:2b:45:55:2b:44:
         4e:dd:43:6c:96:db:4b:b7:62:ca:a7:33:90:1f:36:e8:29:c8:
         eb:7c:77:3a:bb:c6:37:35:2e:d5:a5:9f:86:a5:6d:87:86:2c:
         31:88:b1:7f:a3:b2:49:a1:05:ed:9d:7e:43:ed:c1:71:6f:58:
         86:2c:e0:f8:6c:4a:33:9e:d2:e7:08:ab:b4:f8:95:01:9c:2c:
         42:93:d0:52:67:7f:59:29:d8:76:24:bf:03:21:8f:72:ee:f3:
         18:d5:a8:b7:70:5e:f9:6c:16:d5:0f:5b:16:90:18:8d:7d:28:
         57:2a:31:d7:ef:2b:e3:a5:00:22:96:24:bb:58:0f:93:6c:ce:
         2b:13:0e:1a:d5:5d:a4:74:9f:eb:3d:70:28:7e:12:c4:20:0d:
         5e:cd:78:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:44 2026 by rpki-client