Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa
File:                     67298C50CE9A11F0B8544609C4F9AE02.roa (raw, json)
Hash identifier:          8mwA5txn6e46/kji5X333G33cBr4wxnrtWRbYO9zgas=
Subject key identifier:   A9:84:DC:0A:49:59:92:31:34:36:D5:3A:82:CD:95:EF:51:68:A8:B5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E8A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:18:44 +0000
ROA not before:           Sun 31 May 2026 16:18:44 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     134889
IP address blocks:        161.248.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11914 (0x2e8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:18:44 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f64-a4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:44:32:6c:73:84:68:84:a8:ad:87:c4:50:b2:
                    a0:a8:78:8f:75:6b:be:f7:1f:77:23:5e:c3:05:08:
                    05:3f:c7:eb:77:08:08:ef:b8:43:16:aa:e9:44:3a:
                    17:90:51:fd:f0:c1:d9:09:44:a0:78:a2:a9:19:f1:
                    6a:c2:ed:88:71:99:d2:90:1c:e0:15:67:26:95:10:
                    52:8f:c9:0c:2b:81:83:53:83:da:e5:fd:68:10:18:
                    36:e0:6f:5a:e1:10:d8:64:d0:32:7b:e1:36:d2:99:
                    bf:38:60:8c:12:0f:62:b7:85:cd:94:20:1d:e5:5f:
                    00:ba:71:10:86:db:e9:54:45:71:6a:e6:ad:44:cf:
                    4b:32:f7:93:7e:fb:47:ab:79:da:31:bf:34:f3:40:
                    e7:f3:9f:75:21:b7:dc:ee:2e:f4:0f:e0:4b:99:ce:
                    df:29:ee:75:7b:53:10:34:a2:35:fc:89:3f:ac:56:
                    57:5d:d5:60:40:8e:65:ac:8c:73:8a:9c:0e:a0:b4:
                    53:c8:a0:51:6b:34:61:06:25:3c:e9:c7:c4:1e:07:
                    86:71:20:f6:1e:15:17:e0:ac:7a:54:e2:74:9c:06:
                    92:bc:d9:9f:ff:a1:36:8b:49:44:e3:57:48:b9:76:
                    50:88:50:c2:16:38:cc:35:39:87:e1:12:e4:5a:be:
                    56:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:DC:0A:49:59:92:31:34:36:D5:3A:82:CD:95:EF:51:68:A8:B5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/67298C50CE9A11F0B8544609C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:f7:36:57:b8:52:47:96:3f:1b:2b:88:12:14:93:48:e9:44:
         f9:36:34:78:36:b2:92:3d:fd:90:51:fe:26:25:ed:d8:49:37:
         87:20:8b:7f:c7:a4:fa:67:00:56:0c:13:19:55:8f:51:53:bc:
         9c:5c:97:f5:6c:0d:d1:d2:c9:5c:57:e2:fc:52:38:fd:98:c8:
         71:51:33:96:c6:af:ab:59:06:4c:7e:d7:c4:dc:7d:cb:bf:f3:
         be:a1:c7:8f:02:e6:07:a6:2b:5e:d9:1a:54:f5:84:ad:04:f6:
         11:c5:96:42:41:ee:70:60:c2:04:45:d5:ec:d8:04:96:91:e1:
         89:88:fa:ae:18:bc:24:94:ee:fb:4b:59:01:fd:88:da:d8:8d:
         6b:bb:be:43:58:88:ef:17:32:43:4d:63:31:be:ba:76:12:1e:
         7a:a8:23:c7:b8:3d:e2:e4:c9:b2:a0:d4:df:af:82:b0:b9:fa:
         ee:84:1e:6a:ce:2a:34:e9:bf:cf:ce:4f:46:48:b4:05:f6:62:
         53:c6:25:81:3b:35:fb:32:b4:b2:f1:ad:ff:b2:58:d9:cb:b2:
         e5:fe:07:13:4d:d3:84:d2:d0:57:8b:a7:aa:29:4a:fb:6b:21:
         b8:a9:d4:ea:24:0e:99:26:a3:87:cb:86:6b:a4:60:76:c9:e5:
         a1:de:a7:62
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxODQ0WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWY2NC1hNGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA10QybHOEaISorYfEULKgqHiPdWu+9x93I17DBQgFP8frdwgI77hDFqrpRDoX
kFH98MHZCUSgeKKpGfFqwu2IcZnSkBzgFWcmlRBSj8kMK4GDU4Pa5f1oEBg24G9a
4RDYZNAye+E20pm/OGCMEg9it4XNlCAd5V8AunEQhtvpVEVxauatRM9LMveTfvtH
q3naMb8080Dn8591Ibfc7i70D+BLmc7fKe51e1MQNKI1/Ik/rFZXXdVgQI5lrIxz
ipwOoLRTyKBRazRhBiU86cfEHgeGcSD2HhUX4Kx6VOJ0nAaSvNmf/6E2i0lE41dI
uXZQiFDCFjjMNTmH4RLkWr5WywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKmE3ApJ
WZIxNDbVOoLNle9RaKi1MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjcyOThDNTBD
RTlBMTFGMEI4NTQ0NjA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAofgbMA0GCSqGSIb3DQEBCwUAA4IBAQCz9zZXuFJHlj8bK4gSFJNI
6UT5NjR4NrKSPf2QUf4mJe3YSTeHIIt/x6T6ZwBWDBMZVY9RU7ycXJf1bA3R0slc
V+L8Ujj9mMhxUTOWxq+rWQZMftfE3H3Lv/O+ocePAuYHpite2RpU9YStBPYRxZZC
Qe5wYMIERdXs2ASWkeGJiPquGLwklO77S1kB/Yja2I1ru75DWIjvFzJDTWMxvrp2
Eh56qCPHuD3i5MmyoNTfr4KwufruhB5qzio06b/Pzk9GSLQF9mJTxiWBOzX7MrSy
8a3/sljZy7Ll/gcTTdOE0tBXi6eqKUr7ayG4qdTqJA6ZJqOHy4ZrpGB2yeWh3qdi
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:56 2026 by rpki-client