Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A7319552C3B511F18DCF19875111F970.roa
File:                     A7319552C3B511F18DCF19875111F970.roa (raw, json)
Hash identifier:          qhO6Mk9ju/QvL1rD87SdoB6bWY8igdKYgkWHR5ZsU4Q=
Subject key identifier:   CD:76:B7:FA:3D:93:30:B3:67:06:01:30:31:8A:40:93:AE:99:9D:94
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3319
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A7319552C3B511F18DCF19875111F970.roa
Signing time:             Fri 09 Oct 2026 07:47:19 +0000
ROA not before:           Fri 09 Oct 2026 07:47:19 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154961
IP address blocks:        198.61.8.0/24 maxlen: 24
                          198.61.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 14:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13081 (0x3319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Oct  9 07:47:19 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6ac89c07-5065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:74:b9:7b:17:54:eb:02:45:b3:f4:4c:7b:60:
                    a0:38:bb:9b:f9:f6:e4:81:52:41:56:28:79:6d:1e:
                    73:83:0f:65:3f:54:4e:c9:07:69:e0:db:04:5f:4c:
                    b3:b7:44:f4:83:f9:3d:ff:ed:d3:70:a2:21:8a:78:
                    46:70:55:96:92:55:6b:cf:af:aa:dc:7c:a5:e2:27:
                    08:37:4f:e0:a6:65:7f:6f:32:a0:d1:e4:c2:47:ee:
                    46:9d:41:59:fe:4a:17:80:a4:bf:8c:7c:a5:06:fc:
                    5d:66:a0:b0:b0:75:cd:ac:de:e9:7f:c1:94:7e:e8:
                    16:dd:39:a1:7a:db:4f:9e:a0:dd:68:a6:71:06:95:
                    c7:1c:79:67:4c:7d:f9:18:e7:44:ab:7b:6a:78:f5:
                    bc:cc:06:d8:c7:1f:c7:c9:cb:1d:56:87:82:d2:b1:
                    ee:2c:74:64:d5:7e:11:24:85:52:5a:92:f4:97:49:
                    5b:1f:41:05:fb:09:31:70:2a:8b:ae:d6:0d:60:5c:
                    d8:d3:b3:03:ac:9b:b9:e0:57:4c:6d:0e:cc:eb:12:
                    83:83:3f:2e:ed:f4:2a:01:65:4e:c8:4f:ae:81:e8:
                    55:08:0b:34:4a:c0:de:42:9f:54:ec:7c:e9:f3:47:
                    8d:7d:6f:21:99:ec:3e:31:77:70:dd:54:d4:3a:6b:
                    df:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:B7:FA:3D:93:30:B3:67:06:01:30:31:8A:40:93:AE:99:9D:94
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/A7319552C3B511F18DCF19875111F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.61.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:f1:c6:cf:60:fd:dc:ea:5c:7f:56:81:a4:be:24:3d:b9:
         67:89:b1:35:8b:72:76:2e:ac:21:45:53:b0:df:23:0b:33:92:
         ec:51:db:80:a7:6a:13:1c:86:c2:ac:2c:48:19:16:ec:12:45:
         74:7e:71:4f:e1:48:81:5e:45:23:61:0c:45:be:4d:ad:ab:18:
         6f:79:bf:d3:35:66:54:27:be:de:98:b6:5b:b0:2d:15:8f:b6:
         db:85:31:d7:0a:d5:1f:19:b7:a2:d8:69:13:92:07:d8:19:dd:
         09:dd:cd:61:dd:c2:82:8d:db:59:d0:3e:69:d3:7b:99:04:89:
         99:43:0a:c0:99:8e:0c:36:59:26:20:ea:ed:64:4f:62:30:5b:
         36:b4:56:a5:4d:ec:9d:c1:de:05:44:30:e6:0d:4f:64:92:33:
         e6:4f:d5:1c:32:0f:49:14:0b:20:58:43:75:c4:b6:2c:be:cc:
         34:93:1b:25:e1:32:bf:1a:51:74:25:7d:07:bf:cd:13:67:94:
         ed:07:00:7d:f0:7d:66:45:dc:6f:6b:cc:af:98:e7:69:5f:85:
         d2:54:41:e7:64:6e:d8:85:03:00:38:2e:f6:2b:2b:92:33:a8:
         b9:b6:a9:32:94:97:cd:3c:c2:ed:09:16:01:bb:76:83:36:f9:
         c8:f6:86:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 03:27:07 2026 by rpki-client