Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
File:                     5E46267A46B111E98B793856C4F9AE02.roa (raw, json)
Hash identifier:          yafBMp78riSiWb8JqSgc7NkxFhPTbJnZekh2LK68//c=
Subject key identifier:   03:DD:8C:F8:40:4B:AA:09:59:CA:5B:21:B2:D5:85:EB:9E:48:41:97
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       1108
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 17:21:30 +0000
ROA not before:           Thu 30 Apr 2026 17:21:30 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     136518
IP address blocks:        147.76.54.0/24 maxlen: 24
                          147.76.55.0/24 maxlen: 24
                          147.76.60.0/24 maxlen: 24
                          147.76.62.0/24 maxlen: 24
                          147.76.63.0/24 maxlen: 24
                          147.76.64.0/24 maxlen: 24
                          147.76.65.0/24 maxlen: 24
                          147.76.66.0/24 maxlen: 24
                          147.76.99.0/24 maxlen: 24
                          147.76.100.0/24 maxlen: 24
                          147.76.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4360 (0x1108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Apr 30 17:21:30 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f38f9a-c3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7f:ab:55:01:3e:10:94:f1:67:7a:72:d1:15:
                    fe:f8:fd:8d:bb:14:80:b5:97:53:f4:aa:b1:78:00:
                    71:74:0c:5d:e0:24:e3:f9:a0:55:7a:91:3c:86:7c:
                    79:cb:ec:56:c8:34:13:60:c0:2d:b7:5f:86:38:57:
                    6c:34:08:8b:1a:b6:a5:96:d3:a0:dd:c0:45:8e:97:
                    21:1a:2d:1d:e3:94:ca:f0:c6:bb:ff:67:dd:f5:0b:
                    46:71:d1:e6:50:8e:1e:3a:98:96:b9:e1:01:01:7a:
                    50:ca:a3:1d:21:08:ca:92:89:e8:8d:3d:f5:e9:0e:
                    0c:79:b7:6c:b9:1d:c1:de:78:e4:21:82:80:c9:4a:
                    8f:70:9d:75:5f:d9:60:d9:75:49:39:3e:8d:87:79:
                    f9:da:bf:bc:8e:2d:a2:5a:3e:74:be:99:23:71:52:
                    a0:80:ae:56:f2:5f:fe:21:00:b8:d9:a5:b9:51:a4:
                    c4:80:6b:da:2e:b3:fc:6b:80:e2:9a:b0:05:48:ed:
                    30:43:67:b6:ef:32:95:c1:29:d6:02:e3:11:45:ff:
                    04:b4:a0:69:34:70:30:9b:b8:50:ab:e8:10:b2:5b:
                    fb:bd:b4:5d:ee:9e:b4:8d:74:69:18:6b:e3:d9:0c:
                    24:1b:33:52:d3:b1:3c:2a:0c:3f:03:30:90:18:01:
                    8c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DD:8C:F8:40:4B:AA:09:59:CA:5B:21:B2:D5:85:EB:9E:48:41:97
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5E46267A46B111E98B793856C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.76.54.0/23
                  147.76.60.0/24
                  147.76.62.0-147.76.66.255
                  147.76.99.0-147.76.101.255

    Signature Algorithm: sha256WithRSAEncryption
         53:60:66:8b:a5:75:63:00:13:19:7b:74:7e:38:e9:e7:6d:50:
         2c:16:33:fb:6b:fc:ad:4e:e5:c2:3d:02:c7:17:43:4b:d7:75:
         9e:8b:9e:ac:85:7a:6f:b5:cc:8a:06:ee:10:fd:b3:c8:32:a0:
         1b:09:e6:55:15:95:1a:6c:f2:d2:cd:43:eb:34:fc:0f:24:0c:
         7f:78:18:29:2d:c8:e4:be:20:ca:c6:db:54:69:d7:9a:84:3e:
         ea:4b:2f:ec:bd:37:22:85:67:5e:af:81:90:13:49:d0:cb:af:
         9a:9d:4d:cc:4a:a0:83:2c:0f:b7:a7:65:d9:5a:67:ac:94:9f:
         c4:71:dd:55:ac:97:ee:88:df:8e:5f:1e:d0:f0:8e:0e:7c:20:
         4e:d8:34:14:1b:a2:84:46:fc:98:8f:a3:33:5e:0f:87:24:95:
         f0:d7:01:80:51:cc:1d:16:3c:18:94:74:84:c0:13:b4:10:44:
         b4:61:58:de:9e:b2:f8:9f:ce:0a:14:8b:79:10:81:69:c3:36:
         a2:16:37:d6:de:d9:9b:0a:a7:25:46:64:c4:0c:88:6e:fd:f4:
         c7:d9:60:31:c4:44:75:3c:d3:ef:31:0d:4d:79:3d:c0:60:d0:
         69:04:af:be:a3:b2:8f:13:1e:0d:e9:a8:fa:db:e5:1f:73:4a:
         6e:a8:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:44 2026 by rpki-client