Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2168B91E562011EF9AA81166C4F9AE02.roa
File:                     2168B91E562011EF9AA81166C4F9AE02.roa (raw, json)
Hash identifier:          hFqv6MseHCrllBn0NYQywCMx66POK/Jjoq+OK85/nhs=
Subject key identifier:   6D:F7:34:42:46:08:00:80:4F:02:38:2F:71:69:DB:4A:EA:1C:05:A9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3197
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2168B91E562011EF9AA81166C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:23:51 +0000
ROA not before:           Mon 06 Jul 2026 16:23:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152563
IP address blocks:        160.30.72.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12695 (0x3197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:23:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd697-ddb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:68:7b:3e:ad:01:45:47:79:de:56:d1:b0:
                    e2:09:ee:35:35:d8:e4:a7:fd:ae:51:49:d2:26:67:
                    cf:80:ef:1e:7b:96:1b:1f:40:fc:dd:ea:ff:19:aa:
                    d9:ea:c8:4f:7a:5b:da:fa:d0:2b:aa:d4:64:e5:02:
                    01:7c:93:97:e6:d5:aa:46:3d:2e:bc:93:17:95:80:
                    bc:6d:ef:6b:03:76:dd:6e:22:a2:0d:69:52:67:ff:
                    0b:3d:01:18:32:58:d4:07:79:d0:c4:37:a8:78:f8:
                    01:1a:ff:2e:4f:ae:b7:91:f1:90:e5:c0:a8:ac:0e:
                    55:69:46:77:81:d4:ca:37:c1:4f:68:cc:f4:a3:e8:
                    bd:56:ec:5f:2a:41:2b:a5:62:47:e2:16:42:48:ff:
                    ba:27:bd:ed:48:79:10:ca:24:f7:a9:27:ff:f1:c0:
                    28:ec:28:e6:32:fe:da:20:e3:da:5d:17:a5:a8:62:
                    b4:18:2a:7f:b2:0c:ef:49:29:69:bf:cc:dd:40:5e:
                    3f:3d:18:28:1c:49:9a:97:29:90:32:86:80:bd:47:
                    92:62:2a:2e:84:fa:1b:7e:37:43:f4:6d:56:ea:4e:
                    a2:47:2e:29:da:41:56:55:f2:bc:0c:a3:89:19:9d:
                    93:b5:29:4c:61:57:ff:8b:24:7d:f8:61:4f:4c:6f:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:34:42:46:08:00:80:4F:02:38:2F:71:69:DB:4A:EA:1C:05:A9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/2168B91E562011EF9AA81166C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:5a:c8:a0:69:e5:8b:89:e6:a0:75:cb:36:62:95:fc:ea:5f:
         52:42:3f:f8:0a:34:03:29:4b:d6:26:0e:bc:25:47:46:fe:88:
         ae:7b:47:ec:b7:19:71:9d:1e:5f:e7:52:6e:53:6c:72:46:18:
         1d:d1:3c:f1:b9:f6:7c:26:9e:a8:4c:43:d3:22:1d:16:31:45:
         f5:86:60:83:fd:84:02:f9:ba:5d:f2:4e:80:7f:01:9b:4b:5c:
         59:da:73:1a:3a:2c:36:c6:21:83:3d:8a:7c:1b:0c:1d:f3:3f:
         b3:2a:0b:1c:8f:b7:ee:6a:51:fa:45:1e:e1:eb:62:89:ab:69:
         6f:89:2d:89:cd:f5:c8:96:29:ad:0d:3d:73:32:4c:57:b3:5a:
         fb:f6:a0:4e:f2:d8:bf:ef:38:ea:6b:85:07:a9:6a:c5:b5:97:
         d3:bf:79:4b:94:4f:0f:e2:57:b7:2b:d9:a9:2f:71:11:1a:9d:
         0b:64:d6:95:b3:b8:15:ac:f1:01:cb:56:07:84:43:d3:9d:a7:
         70:21:bc:ae:2b:12:42:2c:f9:c3:27:4c:ec:2b:0b:5e:02:06:
         ec:a2:42:7d:06:28:68:8a:4e:79:36:8f:a7:20:ac:5e:2c:48:
         2b:47:72:f8:a8:9d:ec:08:9c:d0:ff:50:ec:0a:21:59:bd:a0:
         29:78:8d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:11 2026 by rpki-client