Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECAACAF0832311F0A2DEEC38C4F9AE02.roa
File:                     ECAACAF0832311F0A2DEEC38C4F9AE02.roa (raw, json)
Hash identifier:          r52fViNp4Irf964D+Yux320Exgo6sTOGMK1WQAeXk2g=
Subject key identifier:   40:1A:4B:BD:B2:0A:AB:CA:A5:49:1E:F8:4A:E1:11:AF:DE:7C:91:62
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EACF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECAACAF0832311F0A2DEEC38C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:04 +0000
ROA not before:           Sun 31 May 2026 17:47:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154142
IP address blocks:        203.5.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60111 (0xeacf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7418-1f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:e2:04:bd:f5:6d:34:6a:ef:be:98:95:0e:
                    84:18:92:7c:2e:fe:23:b8:85:41:f6:6d:27:2b:2c:
                    42:44:44:ad:7e:58:06:f5:6e:25:b0:e5:52:1b:17:
                    e4:bf:f4:aa:d0:2f:44:ee:2c:6c:1a:ba:20:f3:79:
                    64:6f:b9:98:c3:71:1c:31:9e:23:a3:05:d2:89:c4:
                    1f:31:6f:e8:b3:d5:14:5b:99:f5:c0:cc:4b:23:88:
                    81:c4:b8:fe:ab:49:02:ae:44:45:4a:24:25:31:f7:
                    a6:03:c6:3a:56:01:f8:a5:d9:4e:9a:3b:11:c1:a8:
                    28:0e:42:50:31:01:98:40:bf:a9:a3:28:d4:f3:a4:
                    98:28:4b:fa:9f:a0:74:0d:99:cc:d3:47:85:81:6c:
                    76:fa:e2:ff:76:ba:10:4a:78:31:34:01:c4:93:86:
                    b9:e3:96:73:27:3c:8f:30:94:e6:26:88:b3:a9:b6:
                    1a:e4:45:64:f2:69:30:f6:89:68:7b:71:f5:e3:70:
                    26:33:0a:10:b6:db:e6:f9:96:1c:7f:58:e7:15:2d:
                    7a:e2:d4:3c:f3:b8:ce:f5:ad:c0:0e:62:6d:a3:31:
                    a7:9b:39:e4:20:1e:cc:65:6a:d4:17:a8:18:28:90:
                    7c:df:71:d2:04:7a:11:4a:b1:a3:55:58:af:70:fc:
                    6c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1A:4B:BD:B2:0A:AB:CA:A5:49:1E:F8:4A:E1:11:AF:DE:7C:91:62
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ECAACAF0832311F0A2DEEC38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.5.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:57:c8:8f:0d:dd:74:a9:97:66:59:a0:f5:27:2c:5f:49:68:
         1d:37:74:6d:64:a9:83:0c:4f:3b:e6:d9:b9:4d:f8:12:26:4d:
         4c:35:d0:0a:ee:65:e2:65:88:d1:79:87:50:11:05:f1:8f:6e:
         65:47:39:ab:60:7a:72:a9:2f:84:f0:a9:f1:ce:87:34:d2:31:
         49:f7:d1:1c:a1:ad:12:f3:33:8d:c8:0d:6a:a5:ad:c6:24:ee:
         3f:db:30:e6:ae:76:2e:28:33:d2:f6:c3:bf:a4:7e:ce:3b:1f:
         04:e6:86:48:b0:f4:b9:a3:a6:08:64:61:fe:7f:72:b6:65:35:
         b8:34:6c:92:4d:4c:d1:96:70:d9:69:3e:ac:82:13:38:8c:a6:
         30:2b:dd:b0:80:e7:a2:2c:60:a3:bf:bf:75:3c:58:49:75:b1:
         a3:6c:a0:90:64:e1:fc:d7:4e:38:51:e2:80:b3:37:ad:c7:11:
         d8:8a:7a:fc:a3:2f:58:f1:4f:c0:c7:ef:f8:ad:9d:62:14:de:
         65:40:65:1f:88:bd:03:92:2f:19:3a:7d:9c:92:31:11:b9:28:
         76:1d:b1:7b:27:fc:52:b6:92:99:5a:20:fb:7d:88:26:1a:cb:
         e9:b2:5e:e2:6d:e5:9e:f8:92:67:3d:74:21:ba:a5:7f:34:b5:
         ef:5f:5b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:09 2026 by rpki-client