Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5AC9160B1B811F192DFF2CC3711F970.roa
File:                     E5AC9160B1B811F192DFF2CC3711F970.roa (raw, json)
Hash identifier:          QtvOgZVABptIs9Oep06LPh+Y+o1YygMmxqJkNlzZ5LI=
Subject key identifier:   05:3E:E3:5E:6F:52:99:7C:70:6A:84:E3:E4:37:3B:35:7B:5C:B1:4F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       32E5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5AC9160B1B811F192DFF2CC3711F970.roa
Signing time:             Wed 16 Sep 2026 10:25:11 +0000
ROA not before:           Wed 16 Sep 2026 10:25:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153890
IP address blocks:        162.4.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 10:53:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13029 (0x32e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 16 10:25:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aaa6e87-b49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:59:c6:f4:bd:c6:15:25:37:2d:6c:61:33:6f:
                    02:4e:cf:46:95:24:c5:8c:69:fa:42:cc:df:ba:c7:
                    ad:d8:22:d0:e8:c6:b3:8d:49:1a:c3:3a:59:72:2e:
                    8c:98:46:3f:c8:a4:45:de:a9:1d:8d:02:75:96:20:
                    b2:65:37:c0:81:0a:03:97:86:6d:62:17:db:fa:60:
                    4c:c1:dd:1b:5c:e7:a4:85:69:74:9f:18:24:35:dc:
                    03:8a:b7:9a:c9:a1:13:cb:95:10:a2:f2:77:0c:b4:
                    e5:40:f4:4f:63:5b:8e:bf:53:c0:10:11:d9:35:49:
                    87:66:60:33:85:b4:00:30:e6:5b:26:57:c7:5d:8a:
                    2e:8b:33:b3:94:f5:93:39:0e:91:59:a9:b4:1f:45:
                    0e:af:b9:87:96:c2:4c:32:21:db:b5:7c:74:ef:3f:
                    98:d4:9c:b3:1c:f7:11:e1:ac:4b:cd:3e:cd:63:c5:
                    1e:a1:76:4d:94:1a:eb:6d:53:ca:e2:72:5f:3a:44:
                    b9:b7:36:4d:97:da:ce:e7:93:65:ad:44:54:99:00:
                    ed:64:b4:e0:5a:cf:b4:4c:c3:d9:f3:dd:e6:61:4c:
                    c3:3d:8e:4a:6b:ca:4f:6b:c5:46:40:33:fe:a0:84:
                    81:ff:7c:b4:71:f8:b4:81:5b:53:4e:a2:ee:ce:b6:
                    4b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3E:E3:5E:6F:52:99:7C:70:6A:84:E3:E4:37:3B:35:7B:5C:B1:4F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E5AC9160B1B811F192DFF2CC3711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.4.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:a5:96:46:78:0d:81:9f:fa:9f:a1:50:b8:d6:51:36:6d:dd:
         32:db:88:c1:47:c8:9a:85:6d:24:15:73:52:10:91:5a:8f:09:
         a3:db:6c:8e:ec:79:73:ae:f8:9f:9c:60:cf:9b:c5:09:1e:53:
         fb:c6:b9:25:89:15:a6:e5:69:7a:52:70:46:18:2c:f4:56:2a:
         fb:ee:af:f7:57:bf:20:d9:74:bc:54:e0:79:60:d3:48:00:79:
         13:ed:3d:84:58:e2:53:db:0d:3d:49:fd:85:83:e3:79:d8:56:
         d0:00:cd:95:b1:64:c9:f5:1c:f3:0a:0b:7f:56:93:3a:f4:c9:
         1f:c2:7d:ba:2d:2a:47:c5:9d:6c:cd:e4:6c:d9:b1:9f:e8:65:
         b2:4a:f7:15:19:b8:01:8f:ce:7d:87:de:91:0a:17:32:3f:dc:
         64:1e:00:2f:0d:97:71:ab:d8:d2:c7:8e:b8:f6:0b:60:f3:dd:
         c1:a8:b4:dc:b4:3c:bb:ee:30:a4:9b:db:30:c3:e7:10:34:65:
         41:92:cd:85:79:43:93:e5:77:f4:20:e1:98:6e:45:b0:27:00:
         b8:1e:05:12:a0:60:87:bc:12:74:b6:81:79:0e:61:60:32:1e:
         88:0b:0b:5e:af:51:2c:01:18:8a:d8:2b:cc:34:97:68:ed:97:
         f7:3a:3b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:09:52 2026 by rpki-client