Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CDD4AAE63F111F18AA533C18E47A888.roa
File:                     7CDD4AAE63F111F18AA533C18E47A888.roa (raw, json)
Hash identifier:          hSmQMY7cbz+BlceIpps4tt1Yeo9Krt0oqSokbQg4YKY=
Subject key identifier:   7F:32:A7:8A:A9:43:9E:C0:2E:64:67:C7:5F:30:04:FC:FD:16:D8:B7
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       303F
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CDD4AAE63F111F18AA533C18E47A888.roa
Signing time:             Tue 09 Jun 2026 10:53:46 +0000
ROA not before:           Tue 09 Jun 2026 10:53:46 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151364
IP address blocks:        162.4.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12351 (0x303f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun  9 10:53:46 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a27f0ba-0918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9e:47:dd:8c:fd:d9:52:8f:ba:4a:8b:ab:67:
                    d1:81:73:58:87:18:1f:1b:ae:8c:68:8e:ef:38:be:
                    a7:ee:93:96:90:fc:fd:b6:17:59:a7:4b:25:f9:7d:
                    f9:ef:9e:78:a0:8e:b5:36:1e:fc:89:6e:63:32:db:
                    f8:05:4f:fc:4e:5a:a6:10:57:50:2d:81:ce:33:bc:
                    35:99:48:74:57:bb:b5:a5:ec:ff:49:19:9f:26:b3:
                    a2:77:19:7d:6e:36:02:ca:5e:53:86:d6:9e:af:d6:
                    a2:2e:33:10:a2:16:7f:c0:ab:4a:da:33:e3:6b:6f:
                    3e:72:ea:99:3c:ac:ba:3f:15:40:8b:e6:65:f4:29:
                    52:e8:7f:98:98:08:6d:5d:77:af:f1:62:32:28:ae:
                    3e:86:88:ae:4a:4c:b0:88:c6:e4:b8:86:17:1c:e7:
                    e5:30:25:ea:59:b1:ac:58:68:71:93:58:3e:49:96:
                    54:b3:c4:e0:2a:19:c0:ae:f2:3b:0d:9a:96:f0:d1:
                    72:1c:f5:22:6f:0d:34:3b:76:60:2a:ee:76:35:a2:
                    25:76:dd:d5:fe:16:5e:f7:59:c3:d0:b9:08:28:7f:
                    ae:44:28:79:48:1d:fb:e9:62:8e:53:8a:b8:7b:3a:
                    22:45:a0:af:de:b4:8a:66:81:21:66:61:d4:69:75:
                    03:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:32:A7:8A:A9:43:9E:C0:2E:64:67:C7:5F:30:04:FC:FD:16:D8:B7
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/7CDD4AAE63F111F18AA533C18E47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:47:7d:d3:37:58:52:32:3b:a3:00:3a:d5:87:fe:79:d4:0e:
         8d:4e:08:07:0a:1b:9e:32:3c:62:48:c0:bb:b5:a7:3a:45:15:
         42:4b:13:e4:6d:d8:ca:7e:6c:11:36:06:36:e9:1a:c9:e9:b3:
         e4:49:a9:6c:63:80:b3:5c:24:f9:3b:55:6f:c0:53:7b:6c:c0:
         06:cc:0b:27:a0:62:4d:08:b2:b6:41:e2:03:6a:0e:98:f5:5c:
         e6:a4:f8:cf:1b:9b:a7:23:f2:e4:bb:0f:e7:bb:d4:76:4e:59:
         25:10:52:4c:1c:a5:4f:37:00:8a:11:0e:ee:b5:bc:2b:65:55:
         3a:fb:f6:22:9b:b2:e3:6d:11:05:77:a8:fc:66:8f:36:83:43:
         8c:02:d0:91:8e:82:a7:f1:ee:1a:36:18:de:d4:f6:e3:bc:7b:
         e9:18:9c:8c:7e:f8:53:22:26:33:41:bf:aa:79:60:0e:f7:9b:
         bc:1e:91:b8:bb:17:d3:3f:da:dd:3d:b2:dc:c0:3e:2f:b0:4b:
         a4:ec:02:53:ab:20:08:50:58:71:e2:df:31:e5:1a:51:98:42:
         7b:7c:01:82:9d:9d:4c:7e:e3:b1:1f:ac:5c:59:df:08:bd:0b:
         c4:bf:a7:c4:05:b7:30:1e:5d:9d:88:ca:90:19:59:ee:ce:95:
         34:42:ed:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:43 2026 by rpki-client