Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/18A7CF4C7F7F11F1926520B96AA30FBC.roa
File:                     18A7CF4C7F7F11F1926520B96AA30FBC.roa (raw, json)
Hash identifier:          cFqSN+xOoQ5ItHDMbCq7Pw48ndLMAZLAvgo2kqKhhgE=
Subject key identifier:   83:59:EE:8A:71:37:38:B2:AB:72:3B:D7:EA:D0:1B:20:08:77:BB:D7
Certificate issuer:       /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial:       2D
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/18A7CF4C7F7F11F1926520B96AA30FBC.roa
Signing time:             Tue 14 Jul 2026 12:25:28 +0000
ROA not before:           Tue 14 Jul 2026 12:25:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     2914
IP address blocks:        206.109.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
        Validity
            Not Before: Jul 14 12:25:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a562ab7-8f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:67:c4:cf:e2:39:7a:88:b2:2c:ae:a7:1d:fa:
                    c4:f1:2f:1f:5e:18:f1:97:2e:66:d2:d6:e8:99:9e:
                    be:de:fc:88:67:01:67:99:00:9a:a2:00:82:15:c0:
                    81:4b:64:73:72:47:2e:3c:2f:9f:b8:f0:8b:84:a8:
                    8b:67:31:71:34:c8:fb:5d:82:b9:9a:1f:e3:50:29:
                    e5:d6:93:91:67:02:46:bd:93:25:13:88:64:21:04:
                    e2:d2:59:83:76:48:60:f7:c5:5c:fd:9b:a9:0d:99:
                    05:d4:a6:8f:4c:05:e2:f0:f4:9c:13:69:2b:4a:1c:
                    35:b7:84:c3:4d:26:a4:67:53:a6:50:6c:de:e7:31:
                    39:d0:2b:c1:95:c3:f4:a9:3a:87:17:50:d5:6d:4f:
                    52:1b:67:85:84:68:b8:55:d4:ef:43:cc:8f:53:89:
                    89:03:70:ed:6d:2f:18:19:f6:32:4f:b2:21:1d:15:
                    71:93:e3:6e:5d:8b:3a:c3:70:25:ba:35:6c:de:2b:
                    8a:88:c8:78:55:cd:a1:00:4b:ce:00:c7:0c:22:3c:
                    e6:04:18:d4:65:5a:b7:70:b6:0b:50:23:97:88:bc:
                    ba:b4:c2:5e:c1:0f:cc:8f:93:0a:d7:9a:c6:c9:e9:
                    72:7c:a7:25:ab:3c:66:6b:5c:26:79:fd:90:5a:e4:
                    09:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:59:EE:8A:71:37:38:B2:AB:72:3B:D7:EA:D0:1B:20:08:77:BB:D7
            X509v3 Authority Key Identifier:
                keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/18A7CF4C7F7F11F1926520B96AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:b5:f8:e4:f5:d7:ba:3d:c5:09:ba:6d:77:21:1d:95:d0:75:
         8e:a0:a9:52:df:09:25:66:05:2b:7f:9a:5d:c3:8d:a8:be:61:
         55:b0:0c:9e:47:40:45:55:3c:d2:64:c2:db:ce:6d:4c:ae:ca:
         bc:04:cf:8c:35:b2:4f:54:61:40:f5:c1:b1:dd:f7:7d:dc:31:
         dc:08:60:b9:dc:b1:0f:68:b7:96:89:b8:6b:4d:1a:1d:e8:3a:
         8c:ac:d4:a0:d0:10:07:7f:6e:f0:fe:d8:19:cd:b8:69:4d:d6:
         d2:ed:2f:b1:75:10:80:e4:2c:b5:65:15:b3:51:75:f5:ca:df:
         dc:a9:90:7a:f2:6b:c4:33:cb:1c:6f:f6:1f:db:90:5a:50:2b:
         89:f7:0d:6f:ff:43:d8:80:5d:21:a3:e7:63:60:00:e8:7f:4f:
         9a:7a:2b:cf:5f:62:ff:12:23:84:fb:43:69:57:ba:b4:cd:3c:
         ce:6b:f3:01:c9:2a:0e:e1:6f:73:d6:35:64:67:b3:9e:76:6f:
         b6:bc:89:18:c0:f7:fe:cb:26:6e:01:dd:49:65:1c:c5:da:04:
         e3:d1:58:0f:83:d9:b2:3e:be:45:3e:4e:f2:4f:5e:44:2f:d1:
         0e:4d:9c:75:e9:cc:c5:5a:ae:32:40:d0:bc:b8:13:7e:5f:a2:
         1b:11:82:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:26 2026 by rpki-client