Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
File:                     E0C97CB098BB11F0B5530B6CC4F9AE02.roa (raw, json)
Hash identifier:          tzLz5H3WHIRmkrmCQ6z99a4YcvXFYzKj7iQvz5s9xtw=
Subject key identifier:   BA:4D:55:46:70:0A:A3:23:4E:E5:23:70:76:6E:01:FE:95:EC:28:16
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       54
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:18:14 +0000
ROA not before:           Tue 23 Sep 2025 20:28:34 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154126
IP address blocks:        198.17.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Sep 23 20:28:34 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3da26-a11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:f0:e4:a7:d6:a7:7a:88:8f:60:c7:f5:30:
                    bd:fa:ab:1f:88:e1:88:6b:97:5b:eb:8e:b1:2c:59:
                    5a:97:fb:cb:dd:2d:1b:ca:aa:79:dc:ce:4a:ef:67:
                    d2:bf:08:71:e5:42:51:14:d1:aa:74:e2:97:e8:e9:
                    3f:97:84:0a:19:ca:7b:3c:07:6c:3b:0c:2d:a7:76:
                    75:52:9c:51:87:89:1e:1e:3b:c0:e7:ae:be:7f:f3:
                    84:a7:f4:7e:63:46:2e:c1:4e:7d:a2:a9:c6:1f:df:
                    81:6c:c1:62:a8:ab:44:f6:1f:bd:b9:f6:a9:a3:2d:
                    98:da:4f:3a:64:bb:b5:a5:4a:d7:1f:7a:84:0b:bb:
                    f2:e8:16:e0:76:55:fe:72:cf:a2:26:9d:41:d1:8c:
                    a3:05:f6:b7:91:f4:f8:3e:12:50:70:bb:0c:00:6e:
                    78:89:b2:de:25:48:68:6a:bd:21:da:1d:03:10:2b:
                    2a:c7:32:11:6d:4f:c7:6c:8f:c8:cf:bc:c0:2b:e6:
                    c0:0e:59:1b:f6:5e:21:22:ad:8d:8f:ac:2d:78:49:
                    8b:db:78:3e:cb:a7:62:a7:93:f0:ef:4e:02:ac:06:
                    00:5e:2d:70:6c:51:6c:9b:9c:ef:b6:35:bb:32:49:
                    b9:dd:0d:b9:bf:94:f2:bf:8f:29:4d:90:7e:cd:b7:
                    2e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:55:46:70:0A:A3:23:4E:E5:23:70:76:6E:01:FE:95:EC:28:16
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:d6:93:12:85:a0:9a:43:e7:4b:c2:ae:b1:ce:3c:50:75:89:
         55:c8:a2:5a:54:1e:0b:38:32:b4:f3:ef:98:03:d4:bf:21:53:
         28:6a:e0:4c:54:5c:ce:e1:6b:a2:fc:5f:bf:91:00:24:5e:c9:
         a1:83:38:5e:ba:93:eb:8b:fe:67:b1:1e:46:e2:c1:a7:29:5c:
         a7:66:c2:4b:b6:64:85:6d:e9:3c:72:75:aa:5f:d5:b3:02:72:
         d6:ff:6b:cf:11:ec:82:89:fd:c3:69:89:4b:96:dc:11:00:47:
         d3:ec:6b:a0:1d:51:c9:5d:81:f6:e5:4d:f4:60:a0:bd:39:88:
         e4:49:59:a7:95:7a:99:c4:28:01:58:ee:cc:77:cd:72:98:94:
         e1:8c:2d:e0:51:f0:6f:7d:07:66:f3:58:8d:33:38:6f:2d:45:
         a0:80:11:fb:89:a8:0a:97:f6:13:83:1d:d3:05:8b:ab:23:42:
         47:4e:71:15:0d:0b:6f:29:79:18:6c:dd:ee:f6:c2:98:4b:82:
         c0:66:1b:9b:95:87:eb:d1:50:5a:15:b3:6d:75:d7:73:59:dc:
         85:8f:c8:ac:aa:53:55:d5:2d:b2:33:47:d6:4a:2e:7b:69:e6:
         22:67:19:1d:f5:f0:54:8c:26:36:f6:a8:e5:5a:8c:e6:89:31:
         d3:82:29:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:07 2026 by rpki-client