Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3FCE5254477F11F18E418BD095833773.roa
File:                     3FCE5254477F11F18E418BD095833773.roa (raw, json)
Hash identifier:          PQI9LfdxXWBjYpjSBqCP0Xmfh8nmagdyEwRjt0z2COw=
Subject key identifier:   EF:F9:83:47:0F:EC:C5:D8:00:6F:01:24:CC:45:9C:5D:0E:D7:F4:AD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DDF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3FCE5254477F11F18E418BD095833773.roa
Signing time:             Mon 04 May 2026 06:05:28 +0000
ROA not before:           Mon 04 May 2026 06:05:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135702
IP address blocks:        165.101.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11743 (0x2ddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  4 06:05:28 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f83728-aa0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:2c:23:27:52:0d:aa:25:26:8b:55:3e:43:
                    d3:e4:6c:bb:25:fe:33:73:87:14:83:1c:00:39:a0:
                    70:ef:95:b5:e0:41:d6:70:9b:80:65:c8:71:54:43:
                    d8:98:20:04:2a:eb:aa:88:2b:6b:af:c3:4d:0d:f2:
                    51:2b:f9:7b:e1:54:ce:9e:f8:67:e7:fa:35:d1:dd:
                    c1:f4:3c:af:24:79:1e:d1:ab:99:c2:93:1a:07:22:
                    cb:65:52:33:35:b0:b9:b4:e3:04:53:5a:dc:b5:4c:
                    06:1b:a1:75:1a:cd:1a:64:97:c5:b2:4d:1d:bf:3b:
                    65:85:dd:16:76:d1:4b:4a:9b:73:1c:93:c5:39:9a:
                    a8:e3:90:35:be:cd:c0:da:54:d2:02:16:52:b7:41:
                    6d:08:97:a8:5d:f8:9e:94:04:7e:c8:dc:8f:b0:05:
                    af:96:2a:26:de:ee:96:d2:df:2a:23:93:9f:e7:fc:
                    f1:11:61:a7:70:39:a8:6c:55:55:c2:7c:46:50:4d:
                    5c:58:d7:0b:1a:e9:ef:55:29:61:4a:37:2a:3a:c9:
                    c5:d0:6f:c0:21:ae:f0:10:8e:1b:fc:d7:ea:83:bb:
                    39:6e:1d:84:44:d0:cc:72:c0:28:d8:0a:db:da:23:
                    73:07:20:3b:09:c2:c3:a2:7e:0b:b2:58:09:54:ed:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:83:47:0F:EC:C5:D8:00:6F:01:24:CC:45:9C:5D:0E:D7:F4:AD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3FCE5254477F11F18E418BD095833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:37:f2:ab:a0:b7:f2:ad:35:e6:fb:d0:f0:eb:7a:12:87:2e:
         a8:c5:0c:f6:3a:3e:09:ab:21:b7:49:f3:ea:0e:6e:56:ea:90:
         0b:c2:fa:6b:60:55:6c:6e:e3:df:00:99:c8:4e:2b:f4:53:c2:
         f4:0d:92:6d:af:b5:d9:eb:22:ef:81:9b:79:0e:d4:b3:15:0b:
         17:24:74:a9:b5:d7:db:30:c3:20:a0:b8:a8:71:dd:53:12:f0:
         2d:49:5b:66:a5:80:49:00:6c:dd:af:1e:ec:ed:29:eb:ad:e1:
         18:4f:36:b7:39:02:84:5a:b0:e5:da:49:bc:1e:af:82:93:d9:
         b3:f9:84:37:be:f1:88:e3:15:6e:db:d4:2b:f0:cc:7c:e2:a7:
         14:18:80:e0:9f:31:d7:61:d2:e5:43:97:70:e2:bd:b0:16:22:
         a5:80:1e:8a:68:6f:7c:9b:a2:10:c1:70:55:85:fe:46:a6:1d:
         14:4e:d5:f5:70:31:f6:b7:97:72:eb:74:52:3f:16:ec:4e:cb:
         c7:87:30:d1:8c:47:d6:41:7e:a7:7f:72:41:9e:d1:ad:21:73:
         1f:ee:3b:c2:cf:3e:c3:6e:94:a0:95:1d:e3:e1:ca:a1:fa:a8:
         a9:af:5f:8a:77:79:96:00:9b:c1:d1:6b:ed:70:87:03:31:26:
         ae:00:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:03:03 2026 by rpki-client