Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
File:                     6C5BE410BD9F11EE963C753BC4F9AE02.roa (raw, json)
Hash identifier:          J4O6hOYsYTtAWkKIt55lDw3nOXfZwdP5BQXiUqiKBWs=
Subject key identifier:   6C:E6:A6:0E:C2:82:4F:53:18:01:FA:6E:D5:AF:B9:04:C1:BC:BC:8E
Certificate issuer:       /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
Certificate serial:       1B74
Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:24:42 +0000
ROA not before:           Fri 30 May 2025 16:47:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     65350
IP address blocks:        202.181.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl
                          rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7028 (0x1b74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152
        Validity
            Not Before: May 30 16:47:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4684a-03c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:c2:c4:de:64:65:dd:b4:8c:da:e7:d5:39:
                    fb:65:64:b2:e1:71:cf:33:51:94:90:fa:d9:4c:56:
                    73:b4:1f:80:1c:fd:7d:36:bc:0d:79:c6:8a:c6:37:
                    20:e7:0b:c8:cd:71:3c:55:38:6c:34:58:c0:0d:a5:
                    2b:42:7e:39:3d:fd:01:8d:5d:fd:3e:c5:3e:ff:81:
                    27:c6:ff:7f:26:ea:10:68:58:97:1b:26:f1:11:6b:
                    6c:37:fa:5a:be:13:60:2e:7f:22:41:f8:fd:5d:bf:
                    0c:12:b5:96:81:f4:27:c2:43:b0:0d:7f:c4:75:4c:
                    73:d2:fe:5d:44:1a:6d:52:5b:bf:1c:bc:db:38:a5:
                    fa:76:7c:99:78:37:03:67:ff:f0:bd:1d:ca:39:df:
                    9d:4e:87:40:a8:22:97:bd:73:fa:61:89:24:99:be:
                    84:b3:e3:42:e8:52:b2:e2:cc:2f:a9:68:23:9c:63:
                    05:15:d2:46:5e:9d:17:76:cc:24:c3:9d:d6:48:5a:
                    21:55:1d:25:d9:51:32:2a:93:70:80:e9:17:03:2e:
                    65:b5:02:b6:83:e6:ae:09:8d:3b:90:a4:18:f4:e0:
                    e3:b4:1e:d6:ba:7e:df:d1:d9:e6:e5:ec:d2:58:e1:
                    47:99:df:0b:58:07:99:83:c6:3d:ac:3a:e8:81:6b:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E6:A6:0E:C2:82:4F:53:18:01:FA:6E:D5:AF:B9:04:C1:BC:BC:8E
            X509v3 Authority Key Identifier:
                keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/6C5BE410BD9F11EE963C753BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.181.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:3c:49:10:b1:1a:a5:ee:3a:f1:6f:84:b8:19:78:e2:80:
         b3:8d:31:52:45:74:61:18:72:b3:30:60:56:61:e2:f4:ee:bb:
         12:a6:72:7a:ff:fd:f3:33:ae:09:4b:5b:92:2d:8c:90:07:12:
         8c:36:42:78:57:2a:3b:79:af:f8:83:2f:c1:7c:e1:f8:93:8d:
         76:1c:57:99:52:d3:21:1f:3a:48:70:85:43:09:44:ad:f5:96:
         f4:83:1e:67:45:35:4b:47:3a:a6:9a:1f:e3:97:6d:37:82:17:
         3b:87:e9:19:55:05:8b:29:a3:a3:ce:ce:78:5b:82:26:a7:7e:
         8f:6f:ee:d2:8a:eb:d1:db:19:a2:2f:6d:29:13:5f:86:ba:b8:
         98:0a:78:3b:37:66:7a:44:c2:7b:36:1e:4b:27:7e:f5:2b:e6:
         54:cf:1a:b4:02:17:50:9b:64:14:bd:7f:8e:b4:76:48:ab:d4:
         8e:94:a2:cb:81:bd:8c:73:9a:79:b3:33:da:ac:49:af:0e:03:
         c0:73:d7:83:46:75:da:d8:4c:ad:90:94:43:69:53:e2:fd:8f:
         6a:fc:e6:36:99:33:33:75:41:6e:c4:c2:bc:18:3d:37:db:0e:
         53:45:0e:49:8f:0f:e3:f3:fb:a4:77:0d:ca:61:de:71:8e:73:
         96:69:b3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:41 2026 by rpki-client