Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0EC9510C487611F1B89D2F16A9833773.roa
File:                     0EC9510C487611F1B89D2F16A9833773.roa (raw, json)
Hash identifier:          JFvsStXSRcfPGR/3HJ3gOLCOhS5eGCxHmxL3ETf65X8=
Subject key identifier:   3E:8A:DF:75:42:C0:7B:92:C3:A7:8D:A5:E6:91:97:9B:D6:22:90:60
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DE4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0EC9510C487611F1B89D2F16A9833773.roa
Signing time:             Tue 05 May 2026 11:32:12 +0000
ROA not before:           Tue 05 May 2026 11:32:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150019
IP address blocks:        138.252.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11748 (0x2de4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  5 11:32:12 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f9d53b-31ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:c0:df:11:2a:dc:bd:fb:46:f4:ac:c3:23:
                    e6:ce:26:09:41:20:03:19:66:47:3b:f7:cc:3b:96:
                    15:a0:45:5a:f4:d5:de:19:28:2d:c4:18:6a:56:89:
                    43:ee:36:5b:17:ff:82:7e:17:09:3f:44:7c:1b:b1:
                    e2:99:72:94:6b:50:8b:8a:2c:31:46:b7:7b:f4:e2:
                    a8:23:8a:7e:cb:e0:78:5c:85:3d:09:4e:21:ca:e3:
                    98:63:75:28:f5:0b:e1:a0:94:50:9b:ca:3d:d8:c4:
                    94:82:5e:d4:a1:cf:94:54:3c:ca:4d:ab:d5:ef:61:
                    5b:be:d7:41:47:48:4e:b9:c5:6f:4f:05:c0:65:3e:
                    05:5b:cf:a1:58:01:7c:f8:59:95:f4:85:b8:2c:4f:
                    10:1b:e7:0d:79:a0:c5:14:f5:c5:15:8b:25:7b:ed:
                    17:70:72:15:b2:fd:29:c8:82:a9:5a:59:19:f0:09:
                    03:fe:a1:a1:69:5a:de:df:3c:45:c6:cf:4e:e5:81:
                    67:7e:c4:e9:62:8a:04:44:33:fc:2c:da:9a:2f:23:
                    65:15:6d:01:af:a8:65:29:1b:c5:85:14:d5:33:04:
                    43:e6:63:51:03:65:eb:0b:9c:54:a5:ce:c0:9c:35:
                    34:97:59:d3:eb:fa:d6:5b:28:dc:3b:50:d3:fb:12:
                    f1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:DF:75:42:C0:7B:92:C3:A7:8D:A5:E6:91:97:9B:D6:22:90:60
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0EC9510C487611F1B89D2F16A9833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7f:42:02:d5:3d:6f:f9:19:57:ef:e9:55:82:28:18:d4:90:
         77:ba:f4:f2:5d:6c:55:ce:09:91:f4:61:a4:cf:cc:18:90:71:
         af:09:f1:7b:65:3e:34:05:3b:46:15:8e:47:1c:8c:e0:8e:a6:
         ea:d9:7c:bd:f5:f6:f5:a3:8f:84:7e:5e:27:e7:1a:53:2f:dc:
         07:fb:14:62:56:d1:9a:b7:33:ea:31:3e:26:ac:81:f7:77:a4:
         45:54:ec:10:2f:a8:01:76:77:20:03:f4:d1:83:1c:a7:b5:4f:
         d4:af:6f:88:58:d2:73:25:69:04:25:d0:93:c1:55:3f:df:05:
         55:34:80:fb:05:f2:2b:5d:e0:c7:52:e9:46:aa:03:68:be:c8:
         87:ca:08:74:a6:92:01:ed:9e:6e:08:10:91:bd:a0:48:d7:3b:
         72:f6:91:13:c0:a6:75:67:06:b1:41:f1:73:8d:68:b5:eb:9a:
         6b:4f:f8:55:bf:b0:4a:00:32:41:f6:19:b8:fb:77:9f:e6:41:
         2b:0c:c4:1e:a7:8b:70:80:1d:2c:62:f9:ae:32:81:cb:98:a9:
         8f:65:ff:15:c5:44:cb:a4:50:aa:31:20:12:fb:c1:25:26:2d:
         78:47:1f:a8:16:43:59:04:4f:4f:5c:bf:b9:56:e6:86:fc:b9:
         1c:3b:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:33 2026 by rpki-client