Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa
File:                     A63A2DFA2F5411EF9A12027FC4F9AE02.roa (raw, json)
Hash identifier:          vL9CnB4VhNfvCGfjKTpVpyZ3hX+MBOGWCdcUnoltMFE=
Subject key identifier:   10:C9:E0:94:5D:0A:A5:3B:D1:CA:29:4D:14:5E:94:CB:B4:D7:F4:69
Certificate issuer:       /CN=A9186D9F/serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
Certificate serial:       018B
Authority key identifier: 43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa
Signing time:             Tue 23 Jun 2026 05:35:06 +0000
ROA not before:           Tue 23 Jun 2026 05:35:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152893
IP address blocks:        160.22.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl
                          rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:31:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186D9F, serialNumber=43F7423F93D6BA09694059FB23DEF8528D26499D
        Validity
            Not Before: Jun 23 05:35:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a3a1b0a-3aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b7:50:8a:05:1f:3f:9b:e0:ad:8a:2e:ae:c6:
                    fe:6b:f4:6d:73:94:08:5b:6b:b8:04:7a:70:8e:9e:
                    03:88:ec:cc:58:d1:6a:31:d6:2e:b8:e3:e3:e1:27:
                    1a:67:07:ff:96:a9:6d:84:81:65:08:f8:4e:21:70:
                    0a:cf:a2:f1:9f:2e:a7:c5:56:66:13:3f:e3:be:fd:
                    ac:0c:a2:4c:22:51:ae:d0:95:8d:cc:ad:ec:c3:26:
                    f5:3b:e7:17:f4:63:92:ca:b3:19:61:d7:15:cf:c4:
                    27:5b:4d:d6:a9:68:d5:82:12:e1:a6:33:ab:68:72:
                    dc:98:b2:61:46:e0:7f:17:73:f2:94:5d:c3:b1:f1:
                    f6:c9:d5:01:e7:c6:9b:31:53:ab:ca:a8:32:69:3c:
                    be:90:20:90:71:ca:28:15:25:bf:15:7f:66:f5:de:
                    fa:fd:4a:26:cd:83:3b:38:1d:d6:5e:eb:82:02:8f:
                    22:c5:ca:e4:b4:01:e9:b5:58:53:d1:7c:e7:6f:06:
                    ba:cd:1e:38:af:c4:71:20:7a:72:49:5a:6d:97:c5:
                    29:75:48:3e:d7:c0:6b:19:63:2e:46:f5:b2:1e:db:
                    ba:56:13:e9:13:ad:76:3e:69:d2:91:fd:b5:4e:9d:
                    40:82:cd:37:9a:a7:12:54:d4:ff:11:7c:da:2c:41:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:E0:94:5D:0A:A5:3B:D1:CA:29:4D:14:5E:94:CB:B4:D7:F4:69
            X509v3 Authority Key Identifier:
                keyid:43:F7:42:3F:93:D6:BA:09:69:40:59:FB:23:DE:F8:52:8D:26:49:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/Q_dCP5PWuglpQFn7I974Uo0mSZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Q_dCP5PWuglpQFn7I974Uo0mSZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186D9F/A936E4402E0411EF86F29D79C4F9AE02/A63A2DFA2F5411EF9A12027FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:25:0f:fa:60:e9:a5:26:09:93:ba:bd:e1:e7:57:0a:93:13:
         bd:15:20:62:64:44:22:d7:8a:63:5d:55:95:b7:90:bc:c6:e1:
         f3:ea:cd:12:93:d3:56:d7:32:cd:e3:b4:e4:17:fa:21:71:87:
         15:42:49:0f:25:e6:26:48:b3:4d:2e:ab:2e:94:5c:66:e2:e7:
         ff:4a:4f:26:ff:90:b1:1e:ee:fa:05:66:f3:a7:18:ae:c6:67:
         95:09:ea:9e:22:4e:ae:e0:90:6b:5e:81:ac:88:d5:67:ca:e0:
         06:b6:c9:1d:df:a7:59:7e:26:17:8d:5b:bb:0c:29:f9:4e:bb:
         d2:26:f0:6b:65:71:6d:e0:2c:8f:43:95:b3:33:c0:5a:fb:49:
         c9:94:24:25:39:90:88:59:54:bc:54:fa:5b:fd:c8:0d:6c:33:
         ad:c0:ee:97:a5:88:dd:67:a9:a3:54:9d:91:4c:7b:49:5e:a3:
         8a:1e:c5:ee:46:aa:f2:b7:6d:1b:d9:d5:b8:8c:a0:05:98:85:
         c9:cb:51:83:83:bb:3c:b1:bb:e0:8c:a9:50:34:03:9b:62:c2:
         a6:c8:8a:d8:d4:63:24:61:fb:0b:94:11:3d:cf:5b:7e:cc:32:
         0c:9c:9b:34:4a:43:e1:08:e1:fd:d4:46:12:87:c4:2b:6d:e4:
         84:e3:b6:77
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZEOUYxMTAvBgNVBAUTKDQzRjc0MjNGOTNENkJBMDk2OTQwNTlGQjIzREVGODUy
OEQyNjQ5OUQwHhcNMjYwNjIzMDUzNTA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNhMWIwYS0zYWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz7dQigUfP5vgrYoursb+a/Rtc5QIW2u4BHpwjp4DiOzMWNFqMdYuuOPj4Sca
Zwf/lqlthIFlCPhOIXAKz6Lxny6nxVZmEz/jvv2sDKJMIlGu0JWNzK3swyb1O+cX
9GOSyrMZYdcVz8QnW03WqWjVghLhpjOraHLcmLJhRuB/F3PylF3DsfH2ydUB58ab
MVOryqgyaTy+kCCQccooFSW/FX9m9d76/UomzYM7OB3WXuuCAo8ixcrktAHptVhT
0Xznbwa6zR44r8RxIHpySVptl8UpdUg+18BrGWMuRvWyHtu6VhPpE612PmnSkf21
Tp1Ags03mqcSVNT/EXzaLEEQGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBDJ4JRd
CqU70copTRRelMu01/RpMB8GA1UdIwQYMBaAFEP3Qj+T1roJaUBZ+yPe+FKNJkmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkQ5Ri9BOTM2RTQ0MDJF
MDQxMUVGODZGMjlENzlDNEY5QUUwMi9RX2RDUDVQV3VnbHBRRm43STk3NFVvMG1T
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1FfZENQNVBXdWdscFFGbjdJOTc0VW8wbVNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZEOUYvQTkzNkU0NDAyRTA0MTFFRjg2RjI5RDc5QzRGOUFFMDIvQTYzQTJERkEy
RjU0MTFFRjlBMTIwMjdGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBYqMA0GCSqGSIb3DQEBCwUAA4IBAQAiJQ/6YOmlJgmTur3h51cK
kxO9FSBiZEQi14pjXVWVt5C8xuHz6s0Sk9NW1zLN47TkF/ohcYcVQkkPJeYmSLNN
LqsulFxm4uf/Sk8m/5CxHu76BWbzpxiuxmeVCeqeIk6u4JBrXoGsiNVnyuAGtskd
36dZfiYXjVu7DCn5TrvSJvBrZXFt4CyPQ5WzM8Ba+0nJlCQlOZCIWVS8VPpb/cgN
bDOtwO6XpYjdZ6mjVJ2RTHtJXqOKHsXuRqryt20b2dW4jKAFmIXJy1GDg7s8sbvg
jKlQNAObYsKmyIrY1GMkYfsLlBE9z1t+zDIMnJs0SkPhCOH91EYSh8QrbeSE47Z3
-----END CERTIFICATE-----
Generated at Sat Jul 18 06:13:04 2026 by rpki-client