Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa
File:                     7B6334003D2C11F0A30B5E63C4F9AE02.roa (raw, json)
Hash identifier:          YdtmD7c+NcK3QBjscv2J5NPpqjSB2VZU7hyelEFIavo=
Subject key identifier:   12:4C:4B:5C:59:6E:66:DF:E3:C5:B4:E2:93:EF:B8:10:30:69:8D:3C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C7C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:05 +0000
ROA not before:           Fri 30 May 2025 08:02:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152500
IP address blocks:        157.20.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11388 (0x2c7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 30 08:02:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c225-15a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:97:43:dc:dd:de:6b:ef:09:6d:89:41:c9:
                    21:30:81:79:66:b3:15:d9:ee:e2:d5:3c:0a:4f:b9:
                    8d:ee:10:d3:d5:d3:36:e8:73:e5:24:da:31:47:67:
                    70:9d:f2:a5:97:d0:c3:2b:04:9b:e3:d0:2f:03:83:
                    b1:4e:fa:17:d9:8d:79:63:94:c4:2f:c0:1e:1b:4a:
                    b1:38:c6:4c:74:d5:bd:5a:27:b9:db:7f:94:75:e1:
                    f5:1c:bf:95:4b:6a:31:18:b0:cb:78:f7:a0:f0:8c:
                    95:2e:11:08:7d:2f:b2:a4:63:e7:c7:ee:05:95:61:
                    c3:f5:83:13:84:91:48:b3:96:ae:2c:49:fa:e3:e8:
                    41:ca:07:42:32:12:cb:24:70:76:a0:78:70:c0:9f:
                    85:09:a6:41:88:c8:59:51:7d:0b:33:ba:39:7a:09:
                    1f:51:4a:fe:e6:b3:2f:98:7b:1e:a6:d7:93:c9:07:
                    39:ac:4e:00:63:a0:0a:e7:3c:16:87:4c:5a:1b:90:
                    c8:f0:85:c8:a0:4b:b8:3b:b4:1f:61:cf:ec:2b:ae:
                    bf:94:b7:5f:c9:3a:46:a7:75:0b:f6:6c:82:bf:9c:
                    98:bb:a9:a1:06:f4:fc:e9:a8:56:2f:1d:19:e6:8c:
                    c0:ac:62:52:a2:ce:7b:2f:7d:62:74:51:5b:ee:8d:
                    c1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:4B:5C:59:6E:66:DF:E3:C5:B4:E2:93:EF:B8:10:30:69:8D:3C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7B6334003D2C11F0A30B5E63C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:53:fe:85:31:dd:e6:fa:0b:20:a3:9e:b3:26:44:2f:d2:ad:
         12:e7:b0:4f:b0:f2:fe:22:70:f5:bf:a8:2a:0b:10:92:15:e7:
         7c:7c:4a:14:1a:fb:d5:4c:16:30:e7:b8:8b:3f:b4:54:39:f7:
         8a:60:02:e7:a4:50:e3:d7:25:c4:c6:2a:06:d3:28:53:1f:15:
         5f:e2:47:76:53:15:80:2d:5a:5f:46:94:bc:28:3c:03:6f:02:
         01:20:31:78:a9:63:0c:99:e3:2c:46:20:ef:ef:6a:d7:27:85:
         cf:f9:35:a4:b7:a9:0e:e2:39:fc:21:4d:76:46:63:c2:70:9a:
         6f:3e:bc:5e:76:b8:14:c9:ab:9f:81:9c:58:1b:75:00:68:31:
         26:43:b5:cf:ef:bd:16:1f:22:e6:e1:91:33:25:2c:ec:78:db:
         d9:75:9d:74:a2:28:94:85:47:4a:b7:08:33:0c:91:c5:ad:03:
         5e:4d:e9:2a:6b:5b:6a:fe:ec:e5:7a:d1:85:68:b7:c5:ef:bb:
         b8:ea:74:d6:27:ee:c6:33:97:67:91:b3:c9:ae:e3:63:b1:8b:
         3c:c8:c0:7c:4d:d5:89:15:4c:3d:42:1f:1a:1c:9c:3d:70:5f:
         6e:46:d5:47:bc:7c:ef:38:06:50:25:f0:1c:75:04:56:19:2f:
         91:fa:c4:18
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTMwMDgwMjUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzIyNS0xNWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuvmXQ9zd3mvvCW2JQckhMIF5ZrMV2e7i1TwKT7mN7hDT1dM26HPlJNoxR2dw
nfKll9DDKwSb49AvA4OxTvoX2Y15Y5TEL8AeG0qxOMZMdNW9Wie523+UdeH1HL+V
S2oxGLDLePeg8IyVLhEIfS+ypGPnx+4FlWHD9YMThJFIs5auLEn64+hBygdCMhLL
JHB2oHhwwJ+FCaZBiMhZUX0LM7o5egkfUUr+5rMvmHsepteTyQc5rE4AY6AK5zwW
h0xaG5DI8IXIoEu4O7QfYc/sK66/lLdfyTpGp3UL9myCv5yYu6mhBvT86ahWLx0Z
5ozArGJSos57L31idFFb7o3BdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBJMS1xZ
bmbf48W04pPvuBAwaY08MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvN0I2MzM0MDAz
RDJDMTFGMEEzMEI1RTYzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnRRUMA0GCSqGSIb3DQEBCwUAA4IBAQC4U/6FMd3m+gsgo56zJkQv
0q0S57BPsPL+InD1v6gqCxCSFed8fEoUGvvVTBYw57iLP7RUOfeKYALnpFDj1yXE
xioG0yhTHxVf4kd2UxWALVpfRpS8KDwDbwIBIDF4qWMMmeMsRiDv72rXJ4XP+TWk
t6kO4jn8IU12RmPCcJpvPrxedrgUyaufgZxYG3UAaDEmQ7XP770WHyLm4ZEzJSzs
eNvZdZ10oiiUhUdKtwgzDJHFrQNeTekqa1tq/uzletGFaLfF77u46nTWJ+7GM5dn
kbPJruNjsYs8yMB8TdWJFUw9Qh8aHJw9cF9uRtVHvHzvOAZQJfAcdQRWGS+R+sQY
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:20 2026 by rpki-client