Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
File:                     54F6A0BECB7911F09243C583C4F9AE02.roa (raw, json)
Hash identifier:          e39cXdN1S+1NuZCsAoIoUVwKD+z6PMEJ0RkqgDk64rI=
Subject key identifier:   8D:95:19:19:2B:F6:23:B5:C1:09:87:D9:A5:F0:F1:8C:9B:65:7A:54
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CD5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:50:08 +0000
ROA not before:           Thu 27 Nov 2025 10:10:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154391
IP address blocks:        144.79.32.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11477 (0x2cd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Nov 27 10:10:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2a0-ac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c9:5f:ca:35:8a:47:ad:7c:cf:e2:91:1f:e1:
                    4b:da:19:3a:2d:05:7f:f7:3e:39:0a:25:af:d7:90:
                    60:f9:5d:c5:c3:1c:f9:b6:fc:e4:c5:7a:f6:c3:31:
                    5f:f3:2a:4b:f4:21:d9:3f:95:c3:ec:85:d5:a8:6c:
                    41:fc:a0:a1:ec:79:04:55:d9:d9:dc:67:00:b0:71:
                    f8:1e:d4:03:bc:15:98:08:43:26:b7:92:3d:7f:88:
                    a1:77:94:8c:23:7f:40:c3:0d:d8:1f:a5:97:d7:59:
                    e9:c6:96:91:28:1f:67:be:8f:35:84:ab:10:43:bb:
                    3d:4d:8c:c5:be:d1:e5:f0:8d:4f:cd:1a:b4:3b:c9:
                    f5:c8:da:70:dc:14:90:24:a0:1f:c2:20:27:84:1b:
                    7a:a2:8d:54:0d:73:ee:c2:df:7d:49:d7:00:2d:cf:
                    b4:4f:45:2f:85:4c:71:0f:f9:f0:ac:21:2f:43:61:
                    13:dc:1c:a2:c5:69:c1:a9:3a:e7:3e:d8:8f:37:79:
                    89:87:ae:38:b6:25:5c:d1:10:bb:af:69:ee:bb:cc:
                    9d:39:5b:49:a4:d4:94:30:39:48:77:bc:4e:9c:c6:
                    b6:90:6d:cb:b6:0a:4e:ee:d0:f1:c9:c5:48:66:58:
                    c4:f7:c7:ec:b3:dc:70:8e:77:57:27:f8:14:f9:3a:
                    7e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:19:19:2B:F6:23:B5:C1:09:87:D9:A5:F0:F1:8C:9B:65:7A:54
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/54F6A0BECB7911F09243C583C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:81:81:75:32:00:bf:81:9a:48:f9:28:ce:27:3b:ce:e4:f5:
         ca:72:c0:2d:a8:5a:92:be:07:d2:cb:38:cb:59:6a:01:2c:1c:
         8b:61:70:42:f5:c3:9e:d9:8e:58:67:39:9e:a7:26:59:8f:a8:
         77:fa:12:d6:ea:89:a7:51:2c:64:8d:ae:d7:ad:f9:78:75:4d:
         93:00:da:c0:6a:63:7f:49:2c:7e:c6:ae:06:90:0e:75:02:17:
         d4:84:49:c4:69:34:0b:58:c5:e6:77:65:3c:72:61:71:e0:fb:
         24:1c:57:88:fd:ce:7f:37:a1:ca:c5:a3:66:93:65:f9:ff:1c:
         ad:0f:ed:a8:38:a1:6c:59:17:2b:1d:82:6b:9f:8e:9f:ce:be:
         ab:03:53:58:26:c0:de:5c:e2:ab:13:0a:22:4c:e6:9f:72:42:
         8c:e4:24:f8:50:9e:94:91:1d:23:c0:76:13:68:e5:b3:3b:91:
         73:5c:0e:0e:2f:2a:52:96:f3:e2:77:ed:ab:93:5a:d2:04:f8:
         c5:5d:d6:a1:0a:54:f5:39:cd:62:46:e4:65:c7:df:5f:3a:35:
         91:c9:64:cd:ef:5c:ec:84:f4:3e:39:55:a8:4c:d5:39:7a:23:
         f7:82:13:54:fb:d3:ac:7e:6f:cb:3d:ca:ba:a2:49:e1:59:0a:
         7b:a8:db:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:21 2026 by rpki-client