Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
File:                     986FD2A0366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          GchPLS5J236W2KlAoH2YoU77qngjuKMqUIBqFM1TIcI=
Subject key identifier:   25:DA:E3:69:C2:E6:D0:E8:82:FC:42:56:77:0E:F8:CF:A1:7A:13:26
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       02B0
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa
Signing time:             Mon 22 Jun 2026 06:32:38 +0000
ROA not before:           Mon 22 Jun 2026 06:32:38 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     142609
IP address blocks:        83.118.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 03:56:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jun 22 06:32:38 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a38d706-af69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:40:37:98:8b:a2:99:5a:af:3b:0a:c6:38:
                    74:5e:88:2a:a5:2a:ea:ae:43:58:e8:f8:ba:0e:20:
                    51:e1:27:3c:d8:04:bd:ac:b7:db:0d:76:0f:fe:89:
                    24:5a:f4:d9:d1:8e:49:51:d2:90:84:40:dc:3d:66:
                    49:df:09:57:b6:68:bd:a6:dd:5e:60:9c:4d:41:a0:
                    cc:d8:2f:52:ce:3e:98:39:71:9b:b3:d1:fc:98:af:
                    2c:99:9c:a2:87:b7:6f:dd:9e:2e:1a:4b:2e:7b:33:
                    b2:0e:62:0a:0d:8b:a9:86:53:10:75:e2:9c:4b:28:
                    89:56:a1:20:fb:bd:90:8c:fe:a4:c2:89:81:1c:97:
                    90:18:1d:96:f5:a3:c6:35:5e:96:84:9a:de:45:2f:
                    98:66:73:19:1d:8d:fc:e8:cb:17:e3:b8:d8:2d:5d:
                    7d:06:8e:4c:b0:cb:d2:4a:74:4d:fd:a0:80:5b:67:
                    b0:0a:cc:67:9d:cb:a0:69:ab:c4:46:b0:6e:58:51:
                    a2:3d:29:1a:88:32:d0:d4:cf:e5:61:76:59:e8:87:
                    1d:81:08:13:48:8a:05:01:c6:04:3d:fe:f4:52:4e:
                    c2:34:ca:6c:ef:c9:ad:51:a9:a0:a7:62:72:0f:d0:
                    12:d9:98:ca:98:c6:10:d3:e1:b5:b5:80:7a:e9:5d:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DA:E3:69:C2:E6:D0:E8:82:FC:42:56:77:0E:F8:CF:A1:7A:13:26
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/986FD2A0366311EEB376DC3AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.118.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:ec:1b:ec:a7:6d:8b:19:4f:0a:ca:0d:49:5b:86:9c:e7:e3:
         0f:91:ad:16:25:6a:8f:c1:85:ef:b9:52:d4:bd:22:21:f5:6c:
         e4:78:27:ca:a8:67:00:27:f1:91:18:ea:c0:77:21:da:bf:f4:
         bd:6a:b9:5b:66:5c:fc:77:57:b5:5d:9a:7c:e3:07:09:5b:5b:
         5f:1a:32:42:6b:e3:2d:7b:51:cc:9c:dc:d3:65:e5:fb:14:80:
         67:35:85:8e:72:59:45:5b:4b:47:6e:fe:b1:7c:c5:fe:fe:3b:
         dc:84:bb:8d:55:74:a2:0e:cc:09:30:0a:79:b9:e8:81:b4:21:
         a3:88:7e:8a:b4:f1:42:4d:4a:92:47:9a:47:22:19:53:d9:04:
         6e:ca:19:8c:4c:bf:b0:4f:fa:28:c2:bd:6a:6a:40:4f:99:6b:
         13:ed:b0:91:74:3e:b1:81:c4:60:32:26:e6:ac:ed:78:1c:9d:
         90:30:91:c7:18:c2:55:99:0e:b3:4b:9e:42:11:1b:e5:1e:fe:
         3a:40:f4:b5:7f:be:6e:f4:25:9e:65:3f:13:89:ad:1e:ff:df:
         9a:33:2c:c3:56:78:bd:61:0d:01:b2:27:24:2a:00:59:35:c3:
         81:bf:6a:96:94:dc:a7:d2:49:63:8a:42:41:06:1e:06:c5:f0:
         73:e6:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:00:18 2026 by rpki-client