Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa
File:                     F4D5953246AF11E9A68E7652C4F9AE02.roa (raw, json)
Hash identifier:          3/voHj4jHKfuqihLM62Y/5qIYqF3rvS4lIjjd/S2Lmw=
Subject key identifier:   C5:38:2D:C3:8F:F4:FC:B5:0F:DD:35:74:45:F3:79:59:8D:D4:8B:9A
Certificate issuer:       /CN=A918E6B7/serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
Certificate serial:       1107
Authority key identifier: BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 17:21:28 +0000
ROA not before:           Thu 30 Apr 2026 17:21:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     10152
IP address blocks:        147.76.0.0/24 maxlen: 24
                          147.76.1.0/24 maxlen: 24
                          147.76.51.0/24 maxlen: 24
                          147.76.180.0/24 maxlen: 24
                          147.76.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl
                          rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4359 (0x1107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E6B7, serialNumber=BE725484B8CD0D1D8D77ED87CCCEFADF793F4708
        Validity
            Not Before: Apr 30 17:21:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f38f98-cc01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e9:98:2b:66:d6:e8:53:e7:bc:2d:7c:86:cb:
                    9a:53:db:eb:01:79:cb:9a:f1:9b:48:9e:ef:da:79:
                    f4:93:d9:3e:e7:80:08:a6:9a:0a:ad:f3:a5:b6:ee:
                    bf:3b:4b:28:08:38:d2:65:5f:54:a9:a9:ce:a9:4c:
                    eb:f6:32:6c:bc:92:e7:dd:68:8b:dd:c1:b0:81:86:
                    0a:e7:c7:13:d2:ed:fe:0d:75:57:05:39:fe:fe:3a:
                    cb:b7:30:30:cc:24:6a:cd:fc:2e:a4:c2:12:da:32:
                    50:97:fa:5a:97:83:8a:d4:4d:76:5d:a5:7f:11:44:
                    72:4d:e6:55:b6:e2:08:b4:57:a4:d1:a1:6d:fa:7b:
                    23:46:d6:62:3b:09:30:e8:19:46:42:e1:81:68:de:
                    58:52:13:97:7d:ef:83:78:75:99:8a:5a:2f:a4:2b:
                    a5:ad:35:ab:3e:68:76:18:b4:88:0a:1d:06:7e:2a:
                    c5:32:0f:4b:64:bb:27:7d:eb:f7:16:e8:2e:ad:cc:
                    09:a8:27:cb:67:d0:a4:88:cf:9e:01:fc:7a:9e:74:
                    ad:ff:e0:eb:38:08:2e:40:ba:2e:1b:f0:15:a6:3d:
                    c1:80:de:0b:2d:55:3d:76:03:a6:46:af:74:f0:8b:
                    62:58:fe:9e:51:49:07:23:ab:17:87:cd:f3:27:0a:
                    e6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:38:2D:C3:8F:F4:FC:B5:0F:DD:35:74:45:F3:79:59:8D:D4:8B:9A
            X509v3 Authority Key Identifier:
                keyid:BE:72:54:84:B8:CD:0D:1D:8D:77:ED:87:CC:CE:FA:DF:79:3F:47:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/vnJUhLjNDR2Nd-2HzM7633k_Rwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vnJUhLjNDR2Nd-2HzM7633k_Rwg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E6B7/AE7D4D4E46AC11E996088348C4F9AE02/F4D5953246AF11E9A68E7652C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.76.0.0/23
                  147.76.51.0/24
                  147.76.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:c2:9f:a0:63:7c:ae:9a:20:58:b0:ec:fe:93:1d:97:64:67:
         a5:c0:ec:d1:b3:e7:43:41:52:1e:b1:02:1e:c1:11:82:f6:4e:
         1d:0c:41:89:c0:13:a5:ae:e8:76:b8:da:38:0d:62:dd:eb:1d:
         f3:7c:e0:22:0f:41:fc:60:1f:56:6b:19:f5:da:32:57:6c:c2:
         10:55:1b:96:d5:5d:2b:68:bf:e1:9b:61:1e:e0:79:a8:c3:b3:
         ee:e7:ef:e3:29:af:f7:ef:87:f8:cf:76:bf:2d:d3:e3:cf:49:
         ff:28:10:b7:d8:e3:bf:00:39:42:80:de:e2:b6:32:c7:e9:08:
         c1:ac:3b:cb:83:f3:4c:e2:ae:b2:56:0a:b0:bc:64:20:8f:fb:
         98:48:ee:a3:7b:cf:57:6c:d8:5d:38:24:13:a9:b1:eb:c9:ea:
         d4:5c:2f:bf:19:ac:7b:db:ca:76:d5:f0:6e:4b:da:6a:bb:bd:
         0f:fe:24:f8:5c:e4:31:1c:ca:75:3e:92:49:02:ad:7a:34:1b:
         99:03:76:aa:10:fc:b5:8e:37:28:21:9a:e5:6b:21:93:bb:35:
         e4:c2:3c:7d:b5:86:d6:30:22:6f:45:9f:92:d5:ae:f8:94:2d:
         81:81:d1:a6:c5:76:c7:c7:20:65:12:15:8a:74:da:1e:2d:11:
         9d:22:62:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:33 2026 by rpki-client