Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F924A518430211F1AE170D8898833773.roa
File:                     F924A518430211F1AE170D8898833773.roa (raw, json)
Hash identifier:          0aKXcVVz++AJUl/5X9y0oiOD8crR4f/QkdU7vYjLsbM=
Subject key identifier:   B5:DF:81:CE:83:6A:17:00:D5:A9:C6:6D:4A:CB:94:D8:B1:C6:A1:BE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DC7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F924A518430211F1AE170D8898833773.roa
Signing time:             Tue 28 Apr 2026 13:05:47 +0000
ROA not before:           Tue 28 Apr 2026 13:05:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142186
IP address blocks:        192.232.54.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11719 (0x2dc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Apr 28 13:05:47 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69f0b0ab-0f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:60:c1:e0:03:ed:03:0c:85:75:e1:a3:dc:
                    d3:73:76:c9:25:f3:5a:c3:e5:f8:93:9d:52:16:55:
                    f7:fc:b8:bc:8f:4d:42:4b:e6:9b:a9:8e:f8:0c:ba:
                    4b:bb:5e:d9:db:47:90:63:e7:ce:94:47:ca:f8:72:
                    1f:88:43:9e:49:88:33:56:14:7d:34:39:74:10:06:
                    71:7f:11:4a:97:a2:db:d9:78:e3:8b:11:74:e0:be:
                    c1:ed:9c:36:b2:0c:ae:d9:c7:7e:14:35:db:c1:93:
                    1f:76:f6:c1:b4:5e:08:83:04:8d:4d:b1:ea:cf:46:
                    38:dd:3c:5f:4d:2f:4c:45:d6:a2:14:f1:aa:d5:dd:
                    4f:70:fc:f6:e8:c2:15:ba:41:48:29:51:88:06:00:
                    30:c2:53:d4:e0:2e:36:0a:44:94:ff:80:d8:4f:62:
                    da:02:76:15:67:16:7d:92:eb:80:c1:35:7f:bc:6e:
                    18:b5:8a:a4:42:4a:db:05:c2:f7:17:ea:d3:98:2c:
                    1d:ab:a2:64:c1:94:4c:8f:b6:f2:f0:c6:b4:b2:0a:
                    02:92:c3:83:2e:fe:e8:85:ab:00:0c:23:0c:0a:bd:
                    44:69:83:d1:41:7c:82:cb:a3:f7:49:f1:80:78:2f:
                    6c:3a:53:af:20:12:07:ad:4a:5a:8a:fe:77:35:c7:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DF:81:CE:83:6A:17:00:D5:A9:C6:6D:4A:CB:94:D8:B1:C6:A1:BE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F924A518430211F1AE170D8898833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.232.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:65:3d:82:77:78:64:cb:59:d4:99:d4:5e:02:0e:33:73:2f:
         94:90:af:dc:39:52:71:cb:29:a5:7b:c8:9d:ba:d5:ba:f5:38:
         80:ca:7a:c6:1d:63:c7:84:22:43:6d:a5:a0:c6:81:22:3a:96:
         04:2a:89:9b:a7:1d:e3:41:46:5e:70:5c:e2:f9:67:46:39:a4:
         7a:ea:95:ba:c8:28:4a:6c:eb:8a:4f:74:af:9f:03:e0:43:8f:
         e7:16:f7:5c:0d:33:6e:6e:dc:a6:45:9d:24:70:2d:20:a8:25:
         8f:d6:0b:e8:8f:d9:8f:1c:59:de:ed:4b:12:27:2e:2c:0d:21:
         09:9c:62:27:23:5f:e3:c2:92:01:e2:b2:8a:24:0a:e5:bb:2c:
         b9:23:8d:2c:14:fb:d3:f3:a2:e6:55:20:97:f1:3e:71:2a:99:
         cc:f2:a0:b3:c4:7d:39:a4:ee:59:ec:96:01:94:f1:69:92:84:
         98:ee:8e:31:59:0d:a2:ca:33:18:6b:49:8e:c2:65:00:fe:4c:
         f6:82:10:9f:0f:03:e4:3b:2b:11:dd:a8:b5:25:da:27:e4:28:
         57:f3:be:3d:82:d3:a0:f6:6a:fa:17:19:28:ac:6b:11:be:dd:
         7e:68:98:7e:44:39:5f:6a:d3:d3:19:dd:b6:f3:e3:9f:5b:24:
         65:83:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:31:20 2026 by rpki-client