Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
File:                     637A68DAE8F111EE97648F87C4F9AE02.roa (raw, json)
Hash identifier:          uw8c7/x+LW54sWtfU4fshMIHcCL1cBeoLOLBgsQyn7w=
Subject key identifier:   03:8B:FD:80:68:59:9C:73:3C:36:3F:CE:8E:7D:A5:72:BF:DF:E7:C6
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C13
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:45:34 +0000
ROA not before:           Thu 08 May 2025 15:54:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152512
IP address blocks:        157.20.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11283 (0x2c13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c18d-122f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:0b:83:e8:62:9b:87:57:d5:a8:78:d3:74:
                    b8:7a:04:4c:06:db:9d:68:23:48:2d:53:36:3d:1f:
                    f1:6b:39:4b:82:20:f8:ae:99:6b:59:1a:8b:85:cb:
                    13:c3:4a:08:cf:b0:c9:aa:7c:6a:1d:12:57:28:6d:
                    32:1b:14:c2:4b:83:2d:91:97:36:5b:70:e6:2b:e2:
                    60:c3:7e:78:e8:57:60:6e:38:0a:7f:3e:c7:95:51:
                    93:36:e4:7a:a6:66:7c:1f:68:87:9d:00:da:a9:36:
                    01:f8:59:2d:46:f2:b0:6a:fb:f7:3f:2f:22:10:d6:
                    12:69:f9:94:db:ae:d8:0a:96:3f:f9:8b:d0:53:11:
                    ca:7f:23:2a:30:c6:35:71:62:64:7b:9a:47:00:68:
                    07:87:4d:df:23:68:1f:28:74:e8:95:17:98:77:ed:
                    d8:15:6e:6c:b0:3e:9f:2b:b6:01:bd:ec:56:e5:c7:
                    86:67:0e:fd:c0:33:60:6a:84:0c:90:ef:d1:d0:d1:
                    1f:e9:9f:52:d6:e6:dc:f9:c8:83:8b:7c:24:23:1e:
                    fc:8c:5e:a6:c6:5d:3e:f4:a7:3c:7b:ad:25:cc:05:
                    9e:b5:f3:ad:36:89:9f:18:99:57:66:ed:c3:6b:15:
                    6d:72:e1:46:e7:b5:da:cf:c7:4f:a2:d1:fb:4d:b0:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8B:FD:80:68:59:9C:73:3C:36:3F:CE:8E:7D:A5:72:BF:DF:E7:C6
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/637A68DAE8F111EE97648F87C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:46:95:ef:b9:7f:88:32:cc:2c:db:3a:47:52:af:ed:40:
         12:c9:70:db:de:28:03:1b:03:18:d2:c5:61:4e:2b:9e:00:59:
         d6:d9:68:24:77:bb:dc:2b:d9:81:78:6a:98:27:2a:53:78:57:
         22:a4:7c:94:9a:d2:09:e5:44:7d:32:11:18:63:6c:e6:ac:ea:
         b6:6c:a3:39:68:ea:3a:db:32:63:f3:48:77:ab:37:20:d3:4d:
         8d:52:80:50:3a:a4:97:e3:9a:13:06:92:35:eb:4f:53:fe:54:
         f6:35:4d:e4:47:7f:29:00:1c:16:19:ea:0f:88:85:a8:9e:cf:
         f5:b5:c2:39:39:f8:b7:b3:e7:53:c9:a7:28:fc:22:71:d0:73:
         c6:a7:cb:d3:45:ab:eb:54:9c:cd:65:de:4c:b5:52:59:73:ee:
         ed:5d:69:1e:00:30:8a:be:f1:1d:45:8b:d2:0c:96:89:eb:e1:
         a3:70:12:40:1f:c1:7f:f9:5d:bc:b0:18:d1:f1:9a:a5:31:a7:
         ff:9c:96:30:66:b0:3c:20:fe:6f:bd:6f:78:48:1c:8d:22:d9:
         45:e0:8c:5b:85:1f:3f:fe:45:b4:d4:8b:1e:24:6c:f7:60:cd:
         8b:31:d8:d2:3a:e9:0d:8c:80:a6:33:90:0f:26:41:00:61:ce:
         78:48:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:49 2026 by rpki-client