Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
File:                     ED06EA341BA711F19ED09D39093D8C67.roa (raw, json)
Hash identifier:          U+4zvi78Yv+MumzY915J7grJ0YzDPW0EFURaOuJbY6k=
Subject key identifier:   E0:14:B5:F1:22:B5:A2:E7:5E:0D:B4:AA:07:49:83:B6:3E:12:50:E8
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2D37
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa
Signing time:             Mon 09 Mar 2026 11:05:48 +0000
ROA not before:           Mon 09 Mar 2026 11:05:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133645
IP address blocks:        192.232.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 10:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11575 (0x2d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Mar  9 11:05:48 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69aea98b-221d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b1:cb:d2:9c:82:ef:73:fc:cd:0b:71:53:9c:
                    60:b5:9d:52:bc:fc:02:b8:a0:19:a8:c1:1b:1e:f2:
                    d6:f8:21:c9:71:a8:7a:00:40:94:6b:47:11:ea:0f:
                    8f:47:36:93:ec:43:b3:7f:79:4f:ae:43:e1:c6:c3:
                    e7:5d:90:31:10:bf:7e:e5:a8:db:b4:c5:5d:c1:5a:
                    af:7b:99:0d:cc:54:25:74:ca:3e:7a:80:86:51:a3:
                    b0:11:74:bf:99:67:25:32:21:ff:a8:65:aa:8b:b5:
                    bf:9d:71:04:ae:46:33:d2:4f:02:76:d0:1a:16:45:
                    3f:65:c8:f6:b5:94:37:1c:6d:43:b8:7f:e1:cc:c5:
                    4d:04:8d:ae:1a:21:2c:d7:3a:5c:c0:c8:6e:e9:4f:
                    57:8b:53:74:46:60:22:e2:bb:6c:94:8f:3d:dd:e6:
                    70:f6:3b:8a:6a:69:d3:11:4a:17:91:ba:2f:77:e7:
                    db:e7:95:51:a9:3a:79:bf:42:ff:e7:83:77:54:22:
                    44:d1:22:72:ee:51:c2:c8:bd:0d:2a:1a:37:59:94:
                    e5:7b:a4:03:32:d4:49:cb:02:bb:5d:40:01:1d:6d:
                    fc:c0:cd:e9:5c:b3:1d:f6:04:51:70:b7:51:00:95:
                    4a:0f:b1:56:3c:62:0f:47:86:61:71:89:45:1f:a4:
                    9a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:14:B5:F1:22:B5:A2:E7:5E:0D:B4:AA:07:49:83:B6:3E:12:50:E8
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/ED06EA341BA711F19ED09D39093D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d9:3e:4f:94:be:84:e5:a3:d8:cc:37:e5:10:16:00:9f:27:
         9e:5c:67:a7:fb:dc:48:38:eb:11:07:ec:9b:b7:78:ab:13:a1:
         ca:15:be:75:f1:fa:23:40:c6:17:0a:82:16:6e:9e:6d:bd:d1:
         98:3c:22:fd:0c:3e:b4:5d:01:dd:2b:fd:4f:f1:0c:66:52:08:
         0e:b3:a2:03:0d:83:64:4c:db:fe:d6:f6:00:fd:0f:e4:3c:e0:
         ff:b4:05:75:58:0a:55:3e:cf:ae:ce:bd:9b:da:c9:76:14:a6:
         06:0a:83:b5:86:bc:2e:26:90:fb:cb:c3:28:45:d5:e7:18:ae:
         18:12:97:7a:0a:b8:56:b7:a1:23:ec:74:90:d8:80:28:a7:f0:
         d5:eb:8a:3f:9a:59:16:75:a6:19:88:7c:13:65:4d:97:20:fe:
         04:03:ea:0b:b4:ae:5e:c5:a7:67:be:03:34:18:79:83:ab:10:
         12:0a:a3:d8:53:c1:66:50:73:d9:c3:fc:3d:ec:92:82:24:b5:
         9b:73:52:9f:a7:e3:58:9e:ac:cd:1f:0b:96:28:e6:88:ab:97:
         2f:03:c3:10:17:94:2b:73:aa:82:84:9b:74:59:a5:17:4c:42:
         32:fa:5a:6d:18:1e:63:1e:16:f1:1e:8b:09:67:36:ec:dc:02:
         54:af:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:35 2026 by rpki-client