Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/C635D41E611411EF9B00D029C4F9AE02.roa
File:                     C635D41E611411EF9B00D029C4F9AE02.roa (raw, json)
Hash identifier:          8EuCC6GeDURLjyKUH1rweshuZkTUvieZrlzCd35Hwu8=
Subject key identifier:   5A:E1:38:B0:83:5F:DB:CD:15:15:9D:7D:0F:C7:C2:8F:58:FD:DB:12
Certificate issuer:       /CN=A918C3B7/serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
Certificate serial:       01DE
Authority key identifier: 39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/C635D41E611411EF9B00D029C4F9AE02.roa
Signing time:             Fri 29 May 2026 03:34:46 +0000
ROA not before:           Fri 29 May 2026 03:34:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     45128
IP address blocks:        137.157.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl
                          rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:34:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C3B7, serialNumber=39837CB4BECAF6A626C916AE960241B609E6B20A
        Validity
            Not Before: May 29 03:34:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a190956-10ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:0d:e9:3c:b1:ca:9a:67:69:a7:6f:1a:95:
                    74:20:2c:be:19:58:b6:68:b8:b5:6a:99:3c:f8:0d:
                    be:d5:b5:e5:be:08:f1:be:20:cd:9a:97:a2:07:e8:
                    e2:71:09:c2:0e:32:a1:07:d4:94:68:a7:de:0d:6e:
                    fb:bb:2f:6c:04:82:e3:0b:1a:e5:37:1d:f7:4f:c9:
                    a5:0a:84:da:f0:b4:47:f6:f8:46:fd:6e:23:aa:99:
                    99:17:0c:61:2c:5e:88:23:6e:20:63:bb:7b:0f:b2:
                    f8:f3:11:ec:f0:94:ce:7a:90:26:90:e1:f5:3c:98:
                    50:35:5f:45:2e:bf:c6:4c:97:de:c3:96:cf:f2:48:
                    94:ca:ab:ea:b2:93:fc:a3:2a:17:a9:d1:9e:c9:95:
                    ac:27:f9:cd:0e:25:89:2a:36:55:a8:69:22:e6:2e:
                    70:38:61:96:15:bd:22:1f:3a:e5:a6:7c:46:f9:4b:
                    1f:9a:59:b2:1f:b5:43:6c:7b:b1:fd:7a:7a:2d:61:
                    54:26:85:24:3c:1f:33:51:f4:cc:eb:70:6b:d6:25:
                    61:e6:6f:6a:e5:ab:0b:1b:68:d8:8c:ac:14:83:a9:
                    91:fe:e3:3d:3d:d9:77:59:07:41:7e:d0:2e:32:38:
                    4f:0c:23:16:c5:59:31:7e:af:c4:0a:15:1d:bf:ff:
                    45:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:38:B0:83:5F:DB:CD:15:15:9D:7D:0F:C7:C2:8F:58:FD:DB:12
            X509v3 Authority Key Identifier:
                keyid:39:83:7C:B4:BE:CA:F6:A6:26:C9:16:AE:96:02:41:B6:09:E6:B2:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/OYN8tL7K9qYmyRaulgJBtgnmsgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OYN8tL7K9qYmyRaulgJBtgnmsgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C3B7/159A4AD0932511EEBE987F60C4F9AE02/C635D41E611411EF9B00D029C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1a:5d:98:3d:a1:a7:26:d5:79:7f:f6:2c:6a:b9:d5:dd:ee:69:
         ff:11:52:b9:b8:e1:14:50:33:c2:a6:84:3d:5e:61:34:9c:74:
         f6:af:be:cb:39:11:22:49:e6:dd:ac:aa:02:00:20:8f:e8:39:
         ac:e4:0d:c9:19:ea:ac:9e:48:44:bd:5b:a4:13:0a:42:7d:22:
         13:03:e8:51:eb:da:83:92:91:79:55:c8:d2:6d:bb:cb:14:a7:
         a1:24:4b:74:f0:29:c5:1f:bb:00:d5:60:88:f3:2e:47:da:33:
         d6:74:a6:c2:a8:34:33:a5:d1:a7:98:c6:24:25:cc:6f:c6:a6:
         ab:b2:5a:fa:2e:e8:ef:97:b6:b3:eb:0b:32:d9:f1:c0:54:d8:
         a9:3d:b0:b4:33:de:88:b8:66:3f:18:b5:f8:e3:ca:f7:5b:a1:
         3d:f3:06:cc:d0:1d:d5:a4:19:0c:59:8b:b4:63:35:45:03:33:
         eb:c4:ab:56:83:73:a0:f7:9e:94:dd:98:b5:70:cb:76:31:d0:
         df:de:e0:7f:a2:73:85:9c:5e:0d:2b:b8:7a:a2:dd:67:e4:34:
         aa:47:a7:6c:1c:e7:9e:41:00:67:e6:98:95:92:52:be:f7:5b:
         f0:52:0e:ca:95:31:88:5e:ac:43:ae:c2:c1:3d:60:12:22:58:
         34:95:bc:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:47 2026 by rpki-client