Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
File:                     33938662E2EF11EF9827146DC4F9AE02.roa (raw, json)
Hash identifier:          xgoP0zdhq5/J0ZXmv/NH4jMGF6rLrwC1Iv9EDHV9R6Q=
Subject key identifier:   15:47:65:13:08:57:17:DA:66:3B:ED:05:C1:8F:D2:11:CD:E5:F9:44
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C57
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:47:12 +0000
ROA not before:           Thu 08 May 2025 15:55:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153263
IP address blocks:        161.248.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11351 (0x2c57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1f0-4b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:c9:ec:0e:7f:62:22:cd:71:3c:24:ae:9f:
                    a6:5c:b8:d6:37:df:bd:2e:db:e0:f7:90:0c:2d:a3:
                    0f:4b:d3:be:73:06:99:b2:f3:10:8b:af:4d:10:f5:
                    d6:72:19:3a:ed:e5:85:52:88:da:5d:68:d6:f8:83:
                    e2:53:87:2d:6c:6b:e1:76:b4:6f:0a:4f:43:e2:64:
                    f0:8b:1b:3f:5a:02:4b:8d:b2:06:3a:89:f5:26:4f:
                    6d:f2:c1:a5:2b:45:47:62:b2:74:d9:e2:c8:77:bc:
                    30:b6:c6:47:b6:00:4c:d5:b6:b4:8b:f6:3c:8f:7c:
                    9a:66:5b:8c:06:59:c3:1f:8e:c9:03:99:76:32:19:
                    1f:7a:18:65:73:22:72:5f:d3:5b:d0:87:43:83:9d:
                    66:15:95:90:b8:fb:16:73:5a:28:8c:36:79:32:f9:
                    66:d4:16:48:8b:ac:7e:b9:30:60:ba:1d:d2:d0:b6:
                    1b:67:33:a9:af:73:d9:7c:00:f7:c5:2e:60:0c:92:
                    45:20:7d:16:0b:f3:85:68:0f:c9:e4:51:f8:29:91:
                    8d:af:a4:ea:b4:12:67:51:47:76:d7:91:82:ce:a9:
                    68:eb:21:bc:03:a1:79:24:85:93:e0:c1:a2:1e:49:
                    4e:fe:f8:e4:4a:6d:60:ec:58:26:2d:af:7f:5e:91:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:47:65:13:08:57:17:DA:66:3B:ED:05:C1:8F:D2:11:CD:E5:F9:44
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/33938662E2EF11EF9827146DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:55:a3:97:d9:2f:4f:5d:1c:0f:dc:15:55:41:23:d0:54:
         9e:7a:f8:82:61:51:a5:47:46:98:30:af:83:fd:df:e3:b0:cf:
         85:c1:84:44:55:27:17:8c:78:e2:79:ee:01:e0:72:59:7d:55:
         ef:b0:00:72:cc:85:f3:21:e0:23:f2:20:09:ba:41:97:20:18:
         d9:a7:2a:e1:12:e5:b0:a9:82:9d:d0:a0:05:25:da:27:55:1c:
         32:2a:39:ee:f0:b0:6f:c5:f8:43:78:02:f0:f9:0c:b9:e0:7f:
         9d:15:76:4f:e1:48:68:d7:ba:c4:74:14:d4:df:b0:2e:21:cf:
         3a:e2:56:54:98:e4:cc:59:9d:8c:20:9a:69:6a:84:3b:2f:0a:
         a6:54:e6:dd:95:b7:51:c0:b9:4f:31:45:24:c3:d5:e8:f2:5e:
         a5:78:fc:f2:87:b9:aa:24:78:d4:c8:a1:70:b9:c6:b2:1e:84:
         b5:60:1a:74:d8:51:d9:f9:08:cf:f4:d5:51:0d:e7:1a:15:45:
         0b:f4:3d:45:29:fd:26:13:4d:7a:7f:e1:d1:45:1f:b5:17:75:
         d1:e6:f6:7e:10:d5:2f:ce:78:cb:d4:53:1e:b1:63:e6:82:e5:
         c3:b4:c4:35:e9:99:74:4e:b9:0f:09:72:20:cc:cf:b3:80:ed:
         f1:08:6c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:28 2026 by rpki-client