Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16F2C90C31D411F180221CCCC7833773.roa
File:                     16F2C90C31D411F180221CCCC7833773.roa (raw, json)
Hash identifier:          /7y0/YYqYAd5aCqDFsjcdZq85JiFYwjuzCadjmzvH5s=
Subject key identifier:   8F:89:CD:99:64:EC:B4:38:13:F6:A6:5D:B1:F7:88:19:FC:FE:A6:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2ECB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16F2C90C31D411F180221CCCC7833773.roa
Signing time:             Sun 31 May 2026 16:20:48 +0000
ROA not before:           Sun 31 May 2026 16:20:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     140171
IP address blocks:        138.252.110.0/24 maxlen: 24
                          160.187.82.0/24 maxlen: 24
                          160.187.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11979 (0x2ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:20:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5fe0-19f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:ec:6a:18:66:ea:e7:f4:99:5f:09:89:4c:
                    f5:ad:be:a3:34:b8:77:c7:0e:13:35:41:73:2f:30:
                    5c:b8:f0:b4:75:f0:46:f2:05:b4:d4:a2:2c:a2:39:
                    3e:fc:be:4d:b5:49:73:09:df:3e:12:77:42:0e:ba:
                    88:87:93:62:ce:a5:5a:30:2c:d7:eb:95:b3:5f:3a:
                    c2:89:c8:16:b0:15:6d:b1:b3:42:15:78:e2:83:8b:
                    7f:31:04:5e:f6:fd:a6:d2:a8:a0:1f:f0:9c:12:84:
                    ae:11:90:be:1f:44:59:39:14:9d:04:7f:4d:be:52:
                    3a:91:7b:21:8e:bf:89:cb:38:74:e2:b5:8c:ec:43:
                    04:49:fc:1d:0d:78:19:29:fb:3d:b0:07:1c:25:88:
                    c5:e5:36:e9:ad:5d:70:7a:bf:f9:ee:ce:f7:d7:d5:
                    fb:99:2a:fa:50:28:a8:fb:ae:9f:60:4d:53:2e:95:
                    18:81:e5:8d:ed:f6:14:1c:7d:65:2a:13:65:2a:e9:
                    ae:73:0f:54:21:d6:b2:b1:ba:48:c4:0e:6c:a9:e4:
                    68:04:6a:86:0e:eb:d0:64:9b:78:af:e8:a8:47:09:
                    a5:56:27:a2:9b:6e:e6:51:b6:ba:db:e6:9c:9f:ea:
                    f0:6c:88:78:57:ff:3e:6d:c1:6b:85:1d:40:59:30:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:89:CD:99:64:EC:B4:38:13:F6:A6:5D:B1:F7:88:19:FC:FE:A6:C5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/16F2C90C31D411F180221CCCC7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.110.0/24
                  160.187.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:38:96:5c:40:f0:c0:cf:7d:b8:aa:d3:57:63:b9:90:c4:0d:
         3e:54:0d:5e:02:bf:39:a3:30:97:86:53:58:dc:58:46:12:b9:
         16:d3:45:06:8f:b3:b5:97:4f:93:2e:5e:86:6f:1d:c6:ab:d0:
         c2:67:0e:98:02:3e:d0:c5:cb:59:cd:43:86:2a:85:7f:44:ad:
         d7:5b:41:93:4c:3d:9d:49:27:86:96:fa:78:2c:d5:11:20:1a:
         69:0e:b4:40:c1:3d:53:01:f5:c3:26:a0:6c:b2:a1:02:36:be:
         9c:15:a5:e7:af:44:7e:4e:c2:3c:09:eb:cc:89:31:42:ed:11:
         7a:9b:ee:19:59:36:d6:2b:d6:bc:a9:b9:69:5f:37:28:39:77:
         04:7c:5e:60:18:df:f5:ce:26:f7:97:7d:8e:f7:41:da:c7:be:
         61:0f:f0:ff:89:31:96:d6:47:a8:ee:9b:f4:e2:7d:79:fc:7c:
         98:d7:a3:bd:5c:d0:31:2d:0f:f3:4a:66:20:d2:4d:e5:0c:7a:
         38:6b:62:2c:c0:0e:ae:6a:6d:e6:8b:49:d4:10:6b:54:be:d3:
         18:6b:22:72:8a:55:32:17:8e:3a:19:dd:34:88:98:57:dd:5a:
         23:40:91:b1:11:76:ad:63:0d:83:f4:f5:12:cf:9e:10:53:06:
         3c:b9:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:22:20 2026 by rpki-client