Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C0EBA0D490AF11F190E7FE983611F970.roa
File:                     C0EBA0D490AF11F190E7FE983611F970.roa (raw, json)
Hash identifier:          xizi2iw3S4RTWau+2h+nORRRJOuRXnJOad3uAHITYss=
Subject key identifier:   A3:A9:E8:D6:41:17:ED:79:4B:78:D3:15:ED:2E:7D:23:BB:93:B0:84
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       327D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C0EBA0D490AF11F190E7FE983611F970.roa
Signing time:             Wed 05 Aug 2026 09:26:36 +0000
ROA not before:           Wed 05 Aug 2026 09:26:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154783
IP address blocks:        160.236.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12925 (0x327d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Aug  5 09:26:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7301cb-ea08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:72:3a:80:07:80:0e:55:91:3b:d1:cf:ca:32:
                    e4:32:b6:9b:82:2c:98:11:02:0a:e9:94:ae:00:a7:
                    0b:97:72:ca:7f:64:0c:70:a1:99:c8:88:5c:52:5e:
                    13:27:ae:b5:6d:81:1f:fe:39:17:f7:a1:6c:13:c5:
                    c9:7d:8a:01:1d:87:51:ab:d5:57:f4:3c:c1:fa:9d:
                    b5:2b:be:cf:f6:7b:0a:65:bf:c4:d0:7d:bb:5a:01:
                    61:2c:bf:6f:c8:c1:70:00:36:cb:dd:83:3e:95:a1:
                    4a:56:99:1b:a7:db:ac:c3:ed:ee:15:11:55:03:ec:
                    f5:8e:d4:ff:68:c1:5f:da:f7:e6:6b:41:91:57:42:
                    08:5e:6b:ce:8a:d4:13:6e:c8:8d:89:e0:88:29:5d:
                    24:40:67:d5:b2:4c:de:93:a8:74:03:36:f4:e1:64:
                    c7:96:a2:2c:3b:fb:0a:2e:04:bb:e6:a3:a4:50:c7:
                    1e:c1:58:28:fa:b0:66:d5:2a:a7:80:be:83:28:0b:
                    df:b8:6c:29:1c:c0:05:65:ba:71:d5:eb:cf:98:30:
                    3f:d3:8a:3f:f9:3a:9b:c3:68:8b:2a:80:ae:d6:cd:
                    b3:5b:bc:64:75:d2:a0:bd:3c:f8:7b:47:cf:3d:66:
                    0d:b2:d0:24:e7:14:a2:bc:7d:3e:0b:a8:a1:24:04:
                    58:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:E8:D6:41:17:ED:79:4B:78:D3:15:ED:2E:7D:23:BB:93:B0:84
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C0EBA0D490AF11F190E7FE983611F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.236.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:bf:a9:d8:4f:1d:87:83:b8:af:00:6c:a4:fa:b6:0b:6b:d7:
         16:7c:58:e9:82:d2:fe:43:87:06:20:d3:b4:a3:77:02:29:7a:
         6b:69:9d:e6:7e:fb:75:31:18:1e:11:6e:46:22:f7:95:b3:6b:
         83:3b:e6:12:b2:3e:56:0a:c4:17:c9:40:b5:b0:2e:84:d9:6e:
         26:55:43:b4:98:8b:ba:ae:2d:a2:57:ba:e4:c7:94:9c:99:57:
         a8:89:63:a6:a0:27:fe:ec:be:30:71:30:7b:9f:cf:39:cf:8e:
         c8:f0:00:ae:07:9f:e9:fc:34:43:82:f2:de:b3:72:a6:bb:39:
         b9:49:c9:00:a6:1b:a0:3f:dc:fe:0c:e8:c1:35:28:00:6b:5f:
         17:f7:f5:bc:e5:11:5c:74:09:a5:c7:85:89:07:85:04:f0:e9:
         55:0b:b2:b8:4f:0b:1f:cd:18:f9:fa:5f:35:7d:0f:4d:68:c3:
         46:c9:50:6a:b1:88:a8:1b:5f:24:f6:6f:4d:dd:4d:ff:76:fa:
         fa:34:17:2f:c7:2c:2d:a9:58:2a:7a:c7:a8:f4:63:61:bf:39:
         a1:5e:89:a9:3a:6d:aa:75:2b:1d:7d:88:69:2a:91:1a:1c:d4:
         02:ba:ce:01:c6:d3:9a:48:b4:f5:ad:34:69:28:48:14:b9:2e:
         61:15:86:69
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMn0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwODA1MDkyNjM2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTczMDFjYi1lYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHI6gAeADlWRO9HPyjLkMrabgiyYEQIK6ZSuAKcLl3LKf2QMcKGZyIhcUl4T
J661bYEf/jkX96FsE8XJfYoBHYdRq9VX9DzB+p21K77P9nsKZb/E0H27WgFhLL9v
yMFwADbL3YM+laFKVpkbp9usw+3uFRFVA+z1jtT/aMFf2vfma0GRV0IIXmvOitQT
bsiNieCIKV0kQGfVskzek6h0Azb04WTHlqIsO/sKLgS75qOkUMcewVgo+rBm1Sqn
gL6DKAvfuGwpHMAFZbpx1evPmDA/04o/+Tqbw2iLKoCu1s2zW7xkddKgvTz4e0fP
PWYNstAk5xSivH0+C6ihJARY4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKOp6NZB
F+15S3jTFe0ufSO7k7CEMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzBFQkEwRDQ5
MEFGMTFGMTkwRTdGRTk4MzYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoOy6MA0GCSqGSIb3DQEBCwUAA4IBAQAxv6nYTx2Hg7ivAGyk+rYL
a9cWfFjpgtL+Q4cGINO0o3cCKXpraZ3mfvt1MRgeEW5GIveVs2uDO+YSsj5WCsQX
yUC1sC6E2W4mVUO0mIu6ri2iV7rkx5ScmVeoiWOmoCf+7L4wcTB7n885z47I8ACu
B5/p/DRDgvLes3Kmuzm5SckAphugP9z+DOjBNSgAa18X9/W85RFcdAmlx4WJB4UE
8OlVC7K4TwsfzRj5+l81fQ9NaMNGyVBqsYioG18k9m9N3U3/dvr6NBcvxywtqVgq
eseo9GNhvzmhXompOm2qdSsdfYhpKpEaHNQCus4BxtOaSLT1rTRpKEgUuS5hFYZp
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:25:37 2026 by rpki-client