Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
File:                     A2EC7F44DC0111F0AD21AAB7586F56BC.roa (raw, json)
Hash identifier:          gTLDQEjjcO7pBXHuB64/UUJi03dYbnbfZkY9D/gVsIE=
Subject key identifier:   AF:AA:3A:7A:50:2A:A1:9A:B6:C3:6D:2E:0B:C8:D7:FA:D8:97:E2:9A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CE7
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa
Signing time:             Sun 01 Mar 2026 22:50:33 +0000
ROA not before:           Thu 18 Dec 2025 11:06:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154426
IP address blocks:        144.79.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11495 (0x2ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Dec 18 11:06:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c2b8-f7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ab:e0:6e:ae:30:5a:f1:a8:30:91:87:ba:91:
                    b9:da:6a:55:a5:ea:2f:86:41:a8:01:27:6d:e7:ff:
                    d4:7d:6d:5d:3d:7b:36:74:1f:96:f7:1e:b1:97:65:
                    9c:e2:29:9d:25:4e:58:ba:7b:08:47:74:32:4d:da:
                    64:8a:3a:f4:a0:75:fa:65:c2:4e:8e:ab:16:8b:53:
                    30:c5:6a:4e:93:b1:e4:3c:0e:de:05:44:86:57:24:
                    c9:07:41:8b:59:64:8e:de:de:47:2f:a3:ce:37:90:
                    27:d6:f9:b6:47:55:a0:76:78:76:33:54:f5:d6:c8:
                    3f:d5:48:69:93:3b:81:8d:dd:f0:38:d5:67:aa:ba:
                    ff:53:65:3c:95:9f:38:ed:83:4f:46:35:67:10:15:
                    db:08:ad:aa:00:5f:19:93:1c:ab:20:3c:9a:e3:fb:
                    f4:b7:3b:20:6e:ac:f3:fc:b6:bf:7e:f7:eb:27:79:
                    9b:58:55:da:cf:b9:0d:25:e3:80:00:73:7c:b8:89:
                    de:49:01:7c:5c:e1:b2:46:b1:a4:69:c4:bc:43:e8:
                    8c:52:68:20:92:fb:a5:54:6a:2e:bc:94:0d:ad:97:
                    79:75:d8:43:50:c6:6e:d7:15:3b:d6:8e:b1:20:7e:
                    54:c1:ae:94:db:7f:28:72:eb:a4:dd:af:ee:e3:07:
                    3a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AA:3A:7A:50:2A:A1:9A:B6:C3:6D:2E:0B:C8:D7:FA:D8:97:E2:9A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A2EC7F44DC0111F0AD21AAB7586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.79.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:16:61:21:51:f9:3c:7f:5c:e6:69:d3:1b:89:be:e4:e9:b9:
         67:0b:ea:a1:ba:9c:6f:b1:fb:8f:d2:7f:34:32:34:57:2e:36:
         0a:43:b8:56:5f:91:4f:e9:87:1e:53:41:cf:45:db:ec:de:37:
         10:13:1b:ca:d0:f5:6a:17:ef:61:14:83:62:7a:16:35:d0:d1:
         a0:71:dd:87:8f:f5:6b:a3:4e:0b:4c:f0:e2:18:85:2b:91:ae:
         e9:47:f5:0a:d5:ce:05:61:2f:2b:d4:24:72:28:ee:5e:2f:df:
         c4:fa:da:cf:56:fb:83:dc:f8:4c:db:f8:8e:56:98:65:e6:a2:
         39:70:36:73:d1:b4:33:6c:b6:20:48:27:dc:44:b9:dc:6e:80:
         6b:94:a4:62:81:40:f6:03:35:fa:13:0b:57:81:f3:2d:56:0f:
         05:ba:e4:b9:3e:4a:f3:96:88:77:9a:7d:de:14:19:c7:30:6e:
         98:b5:f0:76:ca:9c:d0:b1:51:87:ce:dd:52:77:1b:6b:a7:8f:
         ce:89:4c:3e:a5:f8:2b:7f:f2:e8:65:fa:b2:8e:6a:ef:1d:37:
         19:b3:79:e7:60:c0:1a:a8:54:8e:b4:2b:d4:a4:18:e8:45:ff:
         a6:34:1a:57:aa:5f:40:37:13:a5:fc:e2:50:dd:23:67:d4:71:
         0a:1d:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:48 2026 by rpki-client