Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5F6DA23A46B111E98B793856C4F9AE02.roa
File:                     5F6DA23A46B111E98B793856C4F9AE02.roa (raw, json)
Hash identifier:          04JIhOgeUPt5qMEq9+42uBTRgwhR8wzDVRX5FbEh3wA=
Subject key identifier:   9F:FD:F9:80:40:46:F2:D7:7C:9F:A1:A2:DB:AF:30:FB:BD:54:02:62
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       110C
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5F6DA23A46B111E98B793856C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 17:21:35 +0000
ROA not before:           Thu 30 Apr 2026 17:21:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38809
IP address blocks:        147.76.19.0/24 maxlen: 24
                          147.76.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4364 (0x110c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Apr 30 17:21:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f38f9f-2810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:42:f9:ec:da:15:e7:d1:b9:b5:9b:ff:db:
                    1a:2b:40:c7:12:d7:e3:68:ec:57:13:d7:bd:3d:db:
                    06:5d:2c:71:79:7f:d2:08:ac:49:47:a5:e9:54:9a:
                    ec:07:a5:7e:58:71:a3:7d:6d:5a:ef:31:7f:30:9d:
                    3a:23:e2:2e:c3:bf:93:4b:00:90:c7:98:6c:cf:73:
                    37:ee:24:ea:94:cd:e8:16:7f:34:5f:41:4e:e3:1d:
                    6d:04:23:89:cb:a7:1c:0f:06:32:5c:6d:9b:35:ce:
                    e4:98:db:e7:99:b1:1d:88:7f:e5:24:21:bd:56:44:
                    bf:d4:88:c5:4f:01:49:ba:04:b2:5c:db:ad:16:12:
                    c6:93:0f:da:82:66:80:9d:ea:1e:9e:1b:42:33:82:
                    e9:ae:b7:8f:cc:17:89:be:f6:c3:79:31:6d:64:6a:
                    dd:ea:20:74:3f:0e:22:a3:20:4f:b7:8d:de:16:b7:
                    7b:aa:f6:50:59:66:e2:34:ad:a0:4e:88:75:37:fa:
                    8c:6e:84:aa:b3:6f:51:1b:37:3d:15:9a:bd:70:80:
                    ae:2f:98:30:d7:e0:91:01:71:9f:af:36:75:b1:9b:
                    73:07:05:a6:42:c1:95:1a:a1:9a:80:7e:12:68:1e:
                    7d:b8:77:60:ed:1d:9d:1b:67:d0:44:ae:ef:c8:c1:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FD:F9:80:40:46:F2:D7:7C:9F:A1:A2:DB:AF:30:FB:BD:54:02:62
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/5F6DA23A46B111E98B793856C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.76.19.0/24
                  147.76.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:24:c2:ad:15:18:c9:59:36:50:f5:c2:71:ca:f8:29:58:c8:
         39:68:c1:6a:0e:18:80:7b:7e:57:1f:83:a9:b3:a5:5c:2d:4e:
         e7:db:cc:a4:ff:64:36:b6:f5:4e:e1:be:e0:7f:b9:6b:89:29:
         f7:5b:cf:36:ad:68:43:ac:4b:3c:6d:7f:b2:8e:d6:4b:03:d0:
         9b:48:8e:00:97:dd:f5:39:62:b7:82:8b:76:d5:22:23:7c:1b:
         d4:20:6d:a9:0d:8c:dd:b8:01:28:2a:1e:ff:f8:e1:76:ef:74:
         b9:08:71:b4:6e:06:8a:0f:a5:d5:7a:4f:5a:8c:2d:06:f7:11:
         66:7b:1a:42:6f:3c:09:ef:48:90:52:42:e1:11:a5:69:af:60:
         12:97:53:53:ee:60:44:3f:5f:49:cd:c0:56:4e:d4:6e:00:bf:
         6f:61:f9:c9:ba:4a:1a:df:fe:7f:85:2b:c3:01:35:40:22:f3:
         c7:a8:36:88:02:b6:3d:7a:c8:a0:67:01:6b:c0:4d:0e:eb:f3:
         77:c8:ce:4f:07:3b:25:fc:5a:31:92:df:57:65:e6:4c:ed:0d:
         29:d5:5f:6d:0f:92:c8:5f:a5:30:ae:53:a1:e5:78:04:ec:0b:
         95:c9:db:d6:d1:a2:5b:6f:95:f3:92:09:70:dd:e3:82:25:78:
         23:9e:5a:40
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICEQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU2QjcxMTAvBgNVBAUTKEJFNzI1NDg0QjhDRDBEMUQ4RDc3RUQ4N0NDQ0VGQURG
NzkzRjQ3MDgwHhcNMjYwNDMwMTcyMTM1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYzOGY5Zi0yODEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs89C+ezaFefRubWb/9saK0DHEtfjaOxXE9e9PdsGXSxxeX/SCKxJR6XpVJrs
B6V+WHGjfW1a7zF/MJ06I+Iuw7+TSwCQx5hsz3M37iTqlM3oFn80X0FO4x1tBCOJ
y6ccDwYyXG2bNc7kmNvnmbEdiH/lJCG9VkS/1IjFTwFJugSyXNutFhLGkw/agmaA
neoenhtCM4LprrePzBeJvvbDeTFtZGrd6iB0Pw4ioyBPt43eFrd7qvZQWWbiNK2g
Toh1N/qMboSqs29RGzc9FZq9cICuL5gw1+CRAXGfrzZ1sZtzBwWmQsGVGqGagH4S
aB59uHdg7R2dG2fQRK7vyMGcfQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJ/9+YBA
RvLXfJ+hotuvMPu9VAJiMB8GA1UdIwQYMBaAFL5yVIS4zQ0djXfth8zO+t95P0cI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTZCNy9BRTdENEQ0RTQ2
QUMxMUU5OTYwODgzNDhDNEY5QUUwMi92bkpVaExqTkRSMk5kLTJIek03NjMza19S
d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3ZuSlVoTGpORFIyTmQtMkh6TTc2MzNrX1J3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEU2QjcvQUU3RDRENEU0NkFDMTFFOTk2MDg4MzQ4QzRGOUFFMDIvNUY2REEyM0E0
NkIxMTFFOThCNzkzODU2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAk0wTAwQAk0zwMA0GCSqGSIb3DQEBCwUAA4IBAQAyJMKtFRjJWTZQ
9cJxyvgpWMg5aMFqDhiAe35XH4Ops6VcLU7n28yk/2Q2tvVO4b7gf7lriSn3W882
rWhDrEs8bX+yjtZLA9CbSI4Al931OWK3got21SIjfBvUIG2pDYzduAEoKh7/+OF2
73S5CHG0bgaKD6XVek9ajC0G9xFmexpCbzwJ70iQUkLhEaVpr2ASl1NT7mBEP19J
zcBWTtRuAL9vYfnJukoa3/5/hSvDATVAIvPHqDaIArY9esigZwFrwE0O6/N3yM5P
Bzsl/Foxkt9XZeZM7Q0p1V9tD5LIX6UwrlOh5XgE7AuVydvW0aJbb5Xzkglw3eOC
JXgjnlpA
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:00 2026 by rpki-client