Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1BD3932CBED211F0B5F2A370C4F9AE02.roa
File:                     1BD3932CBED211F0B5F2A370C4F9AE02.roa (raw, json)
Hash identifier:          COqEkhYbeWOd5iI30sQkQVb2SZuS2Kbj4ec0b+IpZAc=
Subject key identifier:   4B:7C:B8:56:93:50:02:60:C8:14:C0:C0:8A:95:AD:F8:8C:25:5A:55
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3117
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1BD3932CBED211F0B5F2A370C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:19:35 +0000
ROA not before:           Mon 06 Jul 2026 16:19:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     146865
IP address blocks:        160.30.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12567 (0x3117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:19:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd597-33bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:16:c3:80:2a:2a:cb:6f:44:ee:cd:39:41:98:
                    16:ba:e8:c0:8f:eb:12:bb:4f:02:b6:de:1a:8d:81:
                    f6:b2:a4:14:05:71:73:b8:bf:29:85:c0:da:94:a2:
                    c7:1b:c0:ca:43:97:33:03:33:d2:82:d4:43:e5:88:
                    5d:c0:3d:a6:61:6c:2b:9a:35:3c:75:09:68:b1:17:
                    d8:f1:92:6e:ea:78:7d:15:a0:6f:2e:9a:34:65:04:
                    e2:1b:3e:25:ee:ea:ea:c2:cd:5e:e9:65:e7:87:99:
                    9f:32:4b:55:7d:9d:3f:81:7e:21:81:28:d9:43:4a:
                    d8:82:57:93:92:b9:8b:c2:38:d0:ff:82:f9:3d:7e:
                    a7:a1:25:63:c9:56:94:f4:5a:72:3d:5c:cd:6a:2a:
                    fe:e8:88:36:ec:7a:0c:f5:8b:a1:3b:9f:84:e3:50:
                    d9:42:91:5f:41:6e:c7:6d:15:87:d9:43:38:a5:ab:
                    58:5e:e0:40:cc:c4:f4:ad:0a:81:5c:a1:3a:02:3d:
                    40:b4:0c:90:81:bf:94:03:78:2b:b6:fa:51:f1:38:
                    cf:85:0b:06:13:d1:c3:37:b8:68:44:3d:02:e9:72:
                    8d:a4:9f:76:c9:83:3c:37:5e:6e:18:b8:95:57:df:
                    f6:72:4f:49:c1:4f:af:8d:20:44:fb:66:3e:03:29:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:7C:B8:56:93:50:02:60:C8:14:C0:C0:8A:95:AD:F8:8C:25:5A:55
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/1BD3932CBED211F0B5F2A370C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:34:0f:c2:36:a5:0a:1c:de:82:bf:a9:e8:45:02:c4:20:
         52:43:9f:8c:bd:65:8e:5f:f4:9f:ea:ca:a7:9b:c4:7d:b4:df:
         bd:50:3c:36:ac:eb:30:77:78:0f:cb:01:bb:2a:46:3d:86:39:
         fd:d0:fb:1c:97:f6:e9:cd:64:b3:dd:20:27:1d:b7:78:b1:07:
         b4:47:e5:64:ea:88:98:58:b8:b6:12:d0:3d:a6:e7:cf:0c:1a:
         8e:60:f1:62:e1:c6:2a:4c:ca:96:e2:46:2c:19:b9:ea:11:16:
         9e:c8:fd:60:b6:60:12:5a:42:c3:51:e1:29:48:e7:e2:a3:03:
         d5:4e:a7:3e:d6:6c:fc:7a:36:2d:c5:a8:24:81:fd:b4:b4:64:
         1f:4f:c3:73:36:3c:83:a1:cc:c1:a7:9f:c2:0b:a9:fa:a9:c8:
         d3:5e:d1:bb:dc:13:06:93:8f:78:bc:41:37:60:cd:bc:b2:4c:
         20:08:ac:8c:1f:ee:ae:38:76:73:10:08:c5:d1:3e:05:de:ea:
         5a:8b:4a:c2:8f:74:fd:b5:c2:d2:cd:9d:ba:04:13:cf:f6:4d:
         3d:be:fd:0d:d4:5f:0d:e8:9b:fb:64:31:dd:75:20:a6:48:47:
         bb:de:6e:5a:af:0b:fc:6a:9b:72:f9:9a:f2:d9:55:2f:71:20:
         6c:95:2a:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:33 2026 by rpki-client