Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F178954E3A3011F0B58AE637C4F9AE02.roa
File:                     F178954E3A3011F0B58AE637C4F9AE02.roa (raw, json)
Hash identifier:          FAC827gDTmizNXbFSUK/8fKm8dGbf/KJ7Sky2UE4DnA=
Subject key identifier:   CF:D4:50:86:08:00:69:C8:29:52:A2:70:EA:91:25:95:7B:D2:E7:12
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D8FC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F178954E3A3011F0B58AE637C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:57:14 +0000
ROA not before:           Mon 26 May 2025 12:57:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     147306
IP address blocks:        2001:df5:95c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55548 (0xd8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 26 12:57:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c44a-6f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:36:77:0d:e2:81:6a:06:6d:7c:bf:7e:a7:72:
                    15:8c:7b:f1:92:ea:5e:13:c7:57:e4:3f:8b:29:af:
                    bd:3e:e6:c7:78:f5:c7:ae:e8:99:0f:1b:1a:2f:62:
                    ab:b5:b5:6a:11:73:1a:bb:bd:c6:f0:c9:63:fd:63:
                    3f:f1:2d:78:9b:50:11:74:fd:b5:d5:6b:a6:01:96:
                    0a:b0:1b:dd:2b:69:47:32:48:fc:cd:47:fa:55:ca:
                    1a:21:cb:7f:43:27:2c:0c:98:db:43:8f:f6:3b:f7:
                    3f:01:77:df:31:ed:90:28:dd:ef:f3:56:aa:e9:4f:
                    d1:b5:19:e9:95:e1:bb:af:5b:15:7e:2e:a5:60:a7:
                    88:5f:45:24:e8:e9:4f:a1:7c:58:fc:90:49:a4:b1:
                    36:83:62:6d:cb:5c:14:9a:80:d4:23:7f:e6:9e:c7:
                    a1:8d:06:29:52:c0:4a:da:4f:29:5b:09:62:dd:ce:
                    97:95:ed:20:68:3f:d0:61:f8:2c:04:f3:28:81:d9:
                    fc:d3:38:9b:2d:e5:e3:25:c9:33:80:eb:8c:3e:c0:
                    56:e8:7b:97:ac:dd:e0:22:38:0c:63:9a:3c:81:d1:
                    8e:12:f5:b4:ae:41:14:a7:1a:1e:a4:07:d7:5f:05:
                    fd:a8:74:9a:58:66:56:b8:4a:a1:85:08:4e:00:9c:
                    5e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D4:50:86:08:00:69:C8:29:52:A2:70:EA:91:25:95:7B:D2:E7:12
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F178954E3A3011F0B58AE637C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:95c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:7f:5f:26:12:d5:e6:f4:57:c4:29:c3:1f:73:15:e1:58:ef:
         a9:d0:2b:c4:c5:d1:0a:fd:e7:29:e5:0d:d6:d5:0c:93:72:f1:
         b2:87:c2:0e:9e:2b:0a:7a:a6:bb:cf:f3:8d:51:d8:90:8e:16:
         41:74:c0:af:34:f0:1a:a8:be:59:7c:15:a8:e2:d4:37:21:e7:
         be:21:6a:40:e0:36:e1:19:cc:54:64:f6:87:eb:09:a2:51:63:
         26:27:95:7c:ac:02:f3:6d:0f:93:0a:2b:3c:93:f2:db:94:d1:
         38:6e:2a:91:1d:e4:17:9d:6e:a9:d8:b0:f7:54:90:e3:0d:c8:
         7c:1d:88:7b:d8:18:7d:0d:9b:93:80:22:68:66:fa:62:a4:7e:
         80:9a:35:00:cf:d5:8d:ba:68:f6:b2:a0:e7:bd:4f:a0:3e:69:
         78:81:2c:3c:90:a7:a5:75:cb:2e:5c:1f:7b:e8:88:7b:b2:c8:
         14:67:3b:c4:22:b5:7f:ed:7e:67:5c:2a:47:33:36:27:65:22:
         e2:08:50:8f:61:60:a8:33:28:df:e1:77:c3:62:9a:52:1d:a5:
         34:94:2a:88:31:28:66:3b:c8:f0:2f:19:d5:26:cb:7b:8b:dd:
         d2:06:a5:7e:5f:94:e3:1a:c3:1e:16:33:ce:6c:b7:aa:c6:d8:
         a7:c3:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:04:05 2026 by rpki-client