Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/6638B4DC588E11F1A5F1B3C3CB833773.roa
File:                     6638B4DC588E11F1A5F1B3C3CB833773.roa (raw, json)
Hash identifier:          I4l0gbxkD21W3MeMT6C85HUhs9tDx4Zb4bDh4gdajag=
Subject key identifier:   E3:17:D5:5F:3E:3A:0C:BC:D0:4D:17:76:D3:71:5C:C5:D5:B2:72:DA
Certificate issuer:       /CN=A91827C5/serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
Certificate serial:       0143
Authority key identifier: 57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/6638B4DC588E11F1A5F1B3C3CB833773.roa
Signing time:             Mon 25 May 2026 23:06:45 +0000
ROA not before:           Mon 25 May 2026 23:06:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134489
IP address blocks:        160.30.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl
                          rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 07:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827C5, serialNumber=575A6ED30C373AD434D15A665DDA2E764EC89ACA
        Validity
            Not Before: May 25 23:06:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a14d605-48b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c8:a4:27:4c:95:46:e1:b6:62:34:5c:d8:19:
                    74:e2:c3:70:e7:ef:3c:ed:5c:4c:d0:39:23:72:4c:
                    54:53:62:ca:18:57:e7:ea:7f:2a:ec:e8:ea:a7:1b:
                    7d:ee:75:f5:84:6e:c4:96:75:b3:ab:f9:74:b1:18:
                    0e:e5:d5:d3:96:da:6f:72:37:a0:61:27:70:9d:e9:
                    10:91:aa:07:61:bf:f7:a1:5a:82:d4:fa:55:05:88:
                    9c:6e:f8:ee:4f:a8:ca:22:12:32:cc:b1:10:1e:e3:
                    09:3d:4d:55:54:5c:74:cb:bc:2a:1b:5e:24:93:e4:
                    66:16:47:1d:f6:f7:cc:6e:a3:7a:91:88:05:f9:b1:
                    f6:9c:98:20:72:a1:66:7b:91:31:c5:12:d8:53:76:
                    03:5c:06:e6:31:1b:e5:53:6e:54:c3:5f:72:16:74:
                    14:41:ca:65:9b:be:05:a9:81:d7:ca:77:f3:67:66:
                    88:e0:50:13:89:b5:f0:c9:a0:09:bc:9d:cb:7c:49:
                    56:f1:93:2c:27:3f:03:6f:92:2f:25:43:62:d3:5a:
                    3e:4d:d6:a8:e4:17:c3:81:41:3b:ed:e5:45:48:6e:
                    71:3c:44:b8:ee:d3:b0:c5:96:f6:b7:44:29:94:f3:
                    91:a4:6b:ae:4b:de:09:a3:f9:49:b5:d0:3d:cb:3a:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:17:D5:5F:3E:3A:0C:BC:D0:4D:17:76:D3:71:5C:C5:D5:B2:72:DA
            X509v3 Authority Key Identifier:
                keyid:57:5A:6E:D3:0C:37:3A:D4:34:D1:5A:66:5D:DA:2E:76:4E:C8:9A:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/V1pu0ww3OtQ00VpmXdoudk7Imso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V1pu0ww3OtQ00VpmXdoudk7Imso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827C5/D065ABB48AD911EF981C8283C4F9AE02/6638B4DC588E11F1A5F1B3C3CB833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:8a:0c:76:ef:59:4b:79:a0:62:58:0f:98:09:b3:56:f8:
         98:df:6c:b2:d5:90:39:28:22:c5:e8:be:8c:52:60:92:ca:64:
         f9:c6:a3:5f:d9:66:d2:11:4b:6b:57:d6:03:0f:14:46:a0:18:
         00:7d:62:ad:0a:f2:ed:93:d1:76:aa:5e:93:3f:a8:f9:98:65:
         0f:10:82:d8:a3:57:32:8f:91:2c:2f:96:9f:33:d5:21:1b:a5:
         ce:37:6f:c7:0e:bc:fb:85:a5:f8:dc:6d:04:e7:26:69:65:9d:
         9c:5e:85:e2:75:dc:82:50:fa:e1:d9:d6:a2:16:44:26:79:13:
         ad:58:b4:f9:6d:14:d2:03:5c:06:b1:cf:ac:3b:11:7c:6d:f8:
         66:da:25:e5:5b:67:63:ab:6c:6b:f9:31:fe:36:97:28:c6:da:
         36:3d:7e:af:62:6a:d0:77:d1:d3:d8:47:0e:d4:a6:51:30:20:
         f3:06:cf:ed:fb:62:ca:c2:b2:da:1a:c7:9e:d4:c5:b8:55:52:
         5b:e0:f6:00:00:03:8d:26:b7:32:4d:b4:99:a0:7a:ab:80:e9:
         15:e6:a4:76:c1:94:dd:27:1a:15:9a:3a:ef:f7:a4:6b:3a:a2:
         9b:17:88:b2:3c:31:bc:85:79:e8:0d:fd:f0:84:51:d6:79:59:
         bf:41:3b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 16:31:22 2026 by rpki-client