Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
File:                     1E4ABC8C50C111EFA64C2437C4F9AE02.roa (raw, json)
Hash identifier:          h1GjFRWsL8zm9w/JK18XEZpcDgp9Hd5wn7O3sw9gPUM=
Subject key identifier:   86:3C:71:7F:5B:71:60:74:AC:D5:F3:C1:CE:30:BE:E6:07:63:C7:AB
Certificate issuer:       /CN=A918E4B7/serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
Certificate serial:       01EE
Authority key identifier: E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa
Signing time:             Wed 06 May 2026 09:32:52 +0000
ROA not before:           Wed 06 May 2026 09:32:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     36007
IP address blocks:        45.130.164.0/24 maxlen: 24
                          45.130.165.0/24 maxlen: 24
                          45.130.166.0/24 maxlen: 24
                          45.130.167.0/24 maxlen: 24
                          45.151.152.0/24 maxlen: 24
                          45.151.153.0/24 maxlen: 24
                          45.151.154.0/24 maxlen: 24
                          45.151.155.0/24 maxlen: 24
                          74.113.232.0/24 maxlen: 24
                          74.113.233.0/24 maxlen: 24
                          74.113.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:20:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=E34B4F80D9E3F700BCAC4C52C5AB23EB5B7EDFBB
        Validity
            Not Before: May  6 09:32:52 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69fb0ac4-5168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:cb:e7:d9:2d:6b:8f:6e:ad:fe:3c:a2:7e:
                    ae:81:e5:c7:fc:64:c1:ac:7f:64:02:e7:30:5d:1c:
                    5f:0f:9b:9c:92:4f:4f:c2:52:54:c1:0c:0d:c9:f7:
                    ff:29:b5:9b:df:3c:4f:45:0d:d8:26:c8:91:b4:68:
                    37:ae:d9:32:7c:a4:3b:1b:af:c6:ab:4c:ed:64:10:
                    49:14:88:fd:39:da:76:49:cb:ce:af:7a:7e:9e:16:
                    61:bf:6b:f9:84:05:f6:91:c8:dc:4d:a7:4b:1e:d6:
                    c5:b6:d0:e0:19:23:57:17:4f:1e:86:39:ca:dd:37:
                    62:46:5b:2f:96:07:1e:4c:e9:1a:68:aa:a9:e7:78:
                    02:74:60:ce:81:95:d0:74:88:56:6e:c7:d0:ee:62:
                    e7:5d:ed:0c:36:00:16:8c:ff:4b:37:33:32:c4:53:
                    12:50:fa:ee:b5:fe:a8:e9:ca:05:da:1b:7d:17:e7:
                    6f:ce:57:9f:4a:2c:3e:87:dc:9e:62:a7:12:59:8d:
                    83:b3:01:63:f4:3e:05:63:de:26:8f:fd:10:c8:ce:
                    25:da:06:d0:6a:b0:c4:ef:8b:8c:f9:91:81:da:b3:
                    12:8f:f4:93:41:7b:cf:02:35:66:52:34:e8:53:ed:
                    9b:d1:6f:cc:3e:b1:1b:82:59:33:c2:4e:6a:6e:69:
                    fb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:3C:71:7F:5B:71:60:74:AC:D5:F3:C1:CE:30:BE:E6:07:63:C7:AB
            X509v3 Authority Key Identifier:
                keyid:E3:4B:4F:80:D9:E3:F7:00:BC:AC:4C:52:C5:AB:23:EB:5B:7E:DF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/40tPgNnj9wC8rExSxasj61t-37s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/40tPgNnj9wC8rExSxasj61t-37s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/96E6675A784E11EEB19AD34DC4F9AE02/1E4ABC8C50C111EFA64C2437C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.164.0/22
                  45.151.152.0/22
                  74.113.232.0-74.113.234.255

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:96:45:50:fe:6d:44:7b:f8:df:fb:ef:2b:6e:35:a0:8e:
         39:c0:17:66:c2:1a:3e:ce:58:c1:53:71:5a:9b:d6:98:6c:6b:
         5d:b0:5e:a9:42:b7:ef:a5:03:d4:36:ee:d4:de:b0:66:9c:2d:
         4d:9d:4a:43:7f:82:b8:f8:aa:57:69:50:b7:86:86:4d:0b:2d:
         a1:d7:0d:62:80:96:fa:2b:b1:af:b6:44:2a:5c:9f:7f:d2:56:
         35:fb:14:da:e9:5d:ad:96:5b:3a:13:fc:5a:8d:94:b0:75:79:
         da:7f:b8:88:1b:ab:b9:3c:24:d3:08:7e:f4:91:6e:8a:b1:fc:
         d9:2e:41:18:9c:68:be:db:cb:78:1e:62:4a:cf:ca:d8:84:ed:
         d2:41:d9:0c:8f:1e:9d:13:e2:c6:35:e8:f1:37:ec:f6:a1:d5:
         fc:9d:64:a8:ba:7a:e1:41:a9:d3:e0:b5:98:34:f9:f1:43:23:
         b0:a8:ab:ef:6e:6e:17:34:a8:0b:c5:a0:86:cb:0a:96:3e:e0:
         95:d4:5a:90:1d:bb:3a:1b:66:45:30:aa:58:85:cc:5c:dc:fd:
         de:0c:ab:e9:f2:0d:3c:01:26:7f:08:d7:8f:c2:fb:23:91:87:
         30:f7:51:77:db:9e:89:b6:14:c0:be:0c:c3:4b:9a:40:d1:78:
         7f:e3:26:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:59 2026 by rpki-client