Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5EC43E1A213C11EE9DC66056C4F9AE02.roa
File:                     5EC43E1A213C11EE9DC66056C4F9AE02.roa (raw, json)
Hash identifier:          /AeqF+peYjngSTIf+T9WoCZ55bAwGRELlp7tryj0tdI=
Subject key identifier:   9D:D7:71:B3:99:80:47:0E:47:9D:E4:31:94:7B:39:B3:97:45:68:17
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       110B
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5EC43E1A213C11EE9DC66056C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 17:21:34 +0000
ROA not before:           Thu 30 Apr 2026 17:21:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2764
IP address blocks:        147.76.28.0/24 maxlen: 24
                          147.76.52.0/24 maxlen: 24
                          147.76.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4363 (0x110b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Apr 30 17:21:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f38f9e-d07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:95:d6:8c:34:1b:cc:cd:09:17:52:17:c4:01:
                    aa:f7:ce:0e:29:f1:04:bd:ff:c3:84:e1:9a:6a:cc:
                    fc:6b:96:02:5f:fe:21:f3:f0:af:9a:66:7b:be:8f:
                    8b:90:e2:73:60:92:44:d4:2b:70:e5:ef:66:80:93:
                    e8:ee:b1:34:4e:f1:66:42:e3:7f:83:d9:70:a0:fb:
                    c3:f0:1a:58:2f:b1:63:e6:e7:d5:c2:72:2f:c7:fa:
                    d1:66:98:32:db:2f:cf:f6:21:ba:7d:5b:fb:15:17:
                    b2:1b:60:f3:72:e7:ce:b0:33:48:96:90:9f:ea:0f:
                    3d:8d:16:6f:92:a4:17:1b:9e:5b:df:2e:29:0d:fc:
                    41:ec:dc:17:8b:8d:03:1f:09:d1:41:10:f0:3c:60:
                    42:c7:ed:bf:ec:07:e1:a3:2f:e1:9d:d7:53:9d:fa:
                    c1:cd:7e:87:5f:6f:28:06:2f:b0:f2:70:a8:c2:73:
                    b6:0a:d9:60:5b:12:80:3a:06:5d:97:47:0e:38:6b:
                    15:ef:ce:88:b8:df:ac:a3:5b:9d:99:40:ef:85:6a:
                    07:1f:e1:aa:7a:15:54:1d:be:da:ff:df:61:65:cb:
                    8a:b0:64:e5:60:b7:53:6c:78:84:69:6a:19:ec:cf:
                    4d:75:ef:60:fb:b1:41:0d:02:86:e4:6c:33:fe:78:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D7:71:B3:99:80:47:0E:47:9D:E4:31:94:7B:39:B3:97:45:68:17
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5EC43E1A213C11EE9DC66056C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.76.28.0/24
                  147.76.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:5b:1a:d1:37:c8:d7:0d:7d:29:97:fb:5b:8d:f5:93:fe:1b:
         31:a1:6f:7d:67:2b:3a:8f:06:89:66:65:36:fd:5c:7a:3a:62:
         4a:35:79:37:33:4e:c4:09:bc:2c:01:da:f6:4d:04:a1:a5:28:
         44:69:d8:97:83:ab:b2:31:f1:56:c5:ba:53:e8:ea:f9:21:b7:
         2f:7a:2a:92:74:d4:44:53:3a:3f:b4:c8:0a:2d:70:29:cc:f2:
         fe:0f:37:23:89:8e:24:e4:5c:bf:87:2b:65:49:60:ea:38:a5:
         2d:11:8a:0b:34:8b:46:b5:e6:61:05:bc:99:04:8b:f0:ca:44:
         fb:a2:1d:bd:1f:24:a2:c9:7a:ae:0d:d5:02:5e:4f:b4:08:a4:
         38:2d:6c:70:38:4c:0d:32:14:d8:17:b4:96:fc:1f:bd:8d:90:
         94:33:be:98:86:ba:46:37:54:18:37:a5:59:e3:9e:b1:06:fb:
         5f:be:81:45:e3:b8:c1:66:24:83:8c:03:eb:cf:16:39:6f:03:
         b8:f2:80:7d:b7:07:01:9f:1d:1b:00:6b:cb:a4:4d:47:0b:73:
         9d:06:7f:7e:03:8e:7a:5c:e7:10:ce:62:e2:4f:86:03:19:32:
         e4:a7:b4:24:ca:41:75:77:29:0b:fe:28:b8:2b:28:15:ea:b3:
         39:d0:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:23 2026 by rpki-client