Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21485A36818D11F084DE8A13C4F9AE02.roa
File:                     21485A36818D11F084DE8A13C4F9AE02.roa (raw, json)
Hash identifier:          npqgH6Lh5s5F681sXjXUlQ6Du+zqp33xsWZ+kKkyE1Y=
Subject key identifier:   95:23:74:07:22:EE:BE:4F:89:06:05:3E:B0:FC:CC:2C:F1:32:BC:FB
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E76
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21485A36818D11F084DE8A13C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:18:06 +0000
ROA not before:           Sun 31 May 2026 16:18:06 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133316
IP address blocks:        160.250.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11894 (0x2e76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:18:06 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f3e-5909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:f8:91:a6:b7:61:d9:ff:aa:18:c2:70:64:
                    c0:96:8d:9f:f2:96:b2:69:a0:77:e1:8a:dd:e2:c0:
                    dd:32:19:18:a0:81:72:10:f4:68:dc:c3:64:d7:ed:
                    b6:69:d7:96:19:5b:25:c5:2d:c2:bc:84:9e:a8:2f:
                    9f:ef:9a:a2:d0:1f:b2:1a:f0:bf:fb:71:24:ae:c8:
                    96:47:e4:e2:ed:ee:4b:62:2b:d0:be:67:ed:fe:c8:
                    23:51:fa:7c:55:25:2f:ae:cc:59:df:cb:bf:ac:a8:
                    b2:bd:6b:57:c1:dd:bf:2e:2c:29:56:07:f0:32:17:
                    95:79:ab:31:a8:80:45:54:06:cb:1c:c0:41:44:ec:
                    ea:89:fe:4e:6c:4b:c3:6b:dc:3e:45:7d:d9:0d:29:
                    fb:65:5a:50:42:14:ad:96:01:52:d8:23:0c:d9:23:
                    5d:f1:cc:40:26:0a:c2:2e:e8:27:48:82:50:fb:74:
                    bd:50:b9:cd:8e:86:b2:41:79:45:0d:41:28:a5:30:
                    54:24:1d:a5:70:d4:a2:63:ab:ef:36:65:24:fb:b5:
                    ed:96:ed:be:59:eb:51:4c:e7:61:0d:b6:26:cf:20:
                    46:e2:86:bc:e9:0b:6f:87:c3:1d:f6:13:fb:17:c8:
                    da:95:ea:b8:c1:25:7b:46:5f:ec:e3:b1:6f:80:7f:
                    3d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:23:74:07:22:EE:BE:4F:89:06:05:3E:B0:FC:CC:2C:F1:32:BC:FB
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/21485A36818D11F084DE8A13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:8b:fd:e6:14:3c:94:33:3a:41:48:f3:4e:e7:81:d8:1f:
         fd:af:b6:bf:31:f6:9b:5d:c5:26:39:12:78:9b:89:cc:72:56:
         62:14:c7:05:ca:c8:a3:d1:88:54:99:a7:2e:82:2e:16:7e:9e:
         1a:6a:7c:57:10:0b:ce:13:dd:a2:3e:26:2c:fd:d1:e4:38:01:
         29:06:6c:10:fa:63:e7:ea:a5:49:a7:b4:65:fc:63:e1:d0:5d:
         5b:63:e3:8a:7c:1e:a6:a7:a0:2f:56:99:d2:0e:32:1e:41:d6:
         31:ff:23:50:03:46:69:94:4e:d8:51:7a:84:db:37:37:9b:49:
         06:aa:da:0d:ed:db:05:e1:09:29:f2:9e:12:fe:0e:45:55:08:
         37:31:4a:63:88:3b:41:9c:2d:bb:5a:c3:8e:cf:b5:a7:06:fb:
         0b:a4:7d:41:30:49:74:84:3e:ca:88:1b:03:ee:f0:c6:79:6b:
         79:74:d1:3e:0e:67:b9:d3:12:cc:0c:39:2e:2c:0e:f1:b9:da:
         f9:a6:87:40:4f:28:50:9e:5f:47:1c:7c:9d:7d:02:95:12:2a:
         aa:4c:c1:93:08:b0:f1:2e:37:9c:4d:4a:3c:b1:52:ca:9a:61:
         20:7c:5c:30:bd:e0:8f:e0:46:f4:61:39:ed:9c:82:d9:38:11:
         d9:b8:b6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:42:50 2026 by rpki-client