Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D97A31CE4DC511F1A0445D33AF833773.roa
File:                     D97A31CE4DC511F1A0445D33AF833773.roa (raw, json)
Hash identifier:          zgRCiZWLtHhdlHeJDTya0s1XiZvnib3MoBnJVXLXU70=
Subject key identifier:   88:29:1C:95:DC:57:BD:DE:8D:9C:A8:17:56:38:05:C6:94:91:D3:F5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DF3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D97A31CE4DC511F1A0445D33AF833773.roa
Signing time:             Tue 12 May 2026 05:45:58 +0000
ROA not before:           Tue 12 May 2026 05:45:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133680
IP address blocks:        157.20.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11763 (0x2df3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 12 05:45:58 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a02be96-f1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:d4:c2:5c:68:3d:ae:69:2c:e3:92:f8:23:21:
                    8c:d6:7d:c8:23:8e:8a:29:dc:b5:3c:28:81:c8:b2:
                    0c:3d:77:4a:eb:ad:b6:54:fe:d9:5c:d2:35:1c:eb:
                    13:a7:44:b5:c2:2c:9b:ea:6c:84:8d:0c:b7:6d:02:
                    66:9e:28:05:85:56:3e:0c:29:70:d5:58:78:d2:c6:
                    fc:da:02:d3:65:62:c9:81:19:8c:4a:41:b2:68:d1:
                    ae:37:a1:49:02:74:d8:41:fa:a6:d3:29:88:04:37:
                    71:a7:70:a0:fb:5e:8a:40:fe:16:f7:ea:15:d5:69:
                    d4:3a:23:56:d0:98:5c:9e:b8:89:4a:46:19:62:9b:
                    01:f2:e7:2f:cb:dc:2d:8e:26:93:1f:44:6c:03:c6:
                    f3:64:f4:e1:5b:79:5a:22:84:2e:62:3d:8f:a2:10:
                    34:49:52:54:30:36:f5:68:05:de:08:db:21:5e:d5:
                    0b:8a:bf:3f:d9:65:34:52:1d:b3:a6:c4:9a:11:22:
                    ae:d5:29:5d:fa:85:ec:94:f7:04:e8:80:dc:2b:37:
                    98:76:2f:b2:cb:94:8d:59:ad:fc:64:9f:e7:4f:72:
                    72:73:cf:78:43:72:8a:e7:bc:c7:3c:b5:dc:d1:9a:
                    53:e9:de:e2:fb:0e:7d:e6:4b:90:69:9c:91:b9:0b:
                    36:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:29:1C:95:DC:57:BD:DE:8D:9C:A8:17:56:38:05:C6:94:91:D3:F5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D97A31CE4DC511F1A0445D33AF833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:55:2d:de:4d:ba:5c:ed:64:4f:e4:02:2c:66:aa:94:d9:cd:
         1e:f5:7f:09:02:60:04:21:24:ee:dc:69:15:db:3c:7a:cf:bc:
         ec:e4:7d:ef:1f:0d:81:45:dd:2f:95:6e:0f:01:58:79:37:f2:
         8c:82:4a:45:6a:4e:2e:41:7a:0a:b4:d9:94:6f:e5:07:8f:21:
         f8:77:78:aa:89:2a:f5:cf:28:29:5d:80:7a:c9:ea:7e:45:28:
         5b:2a:83:d1:93:d0:20:d8:0e:b3:e0:6e:fb:b9:b6:34:5f:84:
         fb:32:e0:95:ae:2f:2c:d7:ff:80:77:5f:e3:ff:38:cc:57:9f:
         5d:27:ff:d9:09:57:29:6a:5a:dc:c0:91:e5:f7:ba:4b:e2:4a:
         d2:5b:3c:08:b7:d1:1d:9b:99:d5:d3:a1:ef:ad:2d:0f:77:74:
         65:eb:a7:97:bb:eb:d5:dd:1c:70:e9:34:11:f9:2d:da:9d:c9:
         ac:01:93:0e:d1:f2:3e:7b:16:01:d4:bb:60:ab:f3:41:d9:1b:
         00:d7:54:99:e6:0e:4e:c6:32:43:5f:de:54:cd:33:3f:0c:36:
         4e:9c:72:8e:9d:a1:76:1a:3a:74:57:04:c1:d2:90:23:40:98:
         c1:21:28:03:c2:12:fe:7d:95:5b:e6:83:7c:59:45:84:ce:a7:
         7c:6a:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:42 2026 by rpki-client