Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/375F1062D70111EFB7290E6AC4F9AE02.roa
File:                     375F1062D70111EFB7290E6AC4F9AE02.roa (raw, json)
Hash identifier:          3H574K8w2C/DO76nuBzVWCoLV+/v8GsAXxDKHt+6WCM=
Subject key identifier:   45:60:76:9F:7B:E3:4A:E0:0D:F6:B8:62:8A:35:07:C8:BC:1C:43:60
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FAD
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/375F1062D70111EFB7290E6AC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:57 +0000
ROA not before:           Sun 31 May 2026 16:27:57 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153301
IP address blocks:        161.248.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12205 (0x2fad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:57 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c618d-eee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d0:66:80:ea:aa:fc:e9:b0:dc:29:33:cd:08:
                    3f:99:93:15:e7:5b:32:cd:5b:c0:a9:93:5e:04:07:
                    aa:3f:2c:5e:0c:fe:6f:8b:ca:9b:24:15:25:e5:f3:
                    14:d5:7e:a7:e6:26:05:20:92:19:6b:67:83:f3:00:
                    c1:94:86:8d:95:fb:0b:cb:18:34:72:2f:64:e3:fd:
                    1b:d2:e7:c0:1c:e5:70:5c:9c:30:b5:d8:aa:18:10:
                    32:32:89:97:86:f5:e0:ca:67:da:56:b2:4a:e3:b7:
                    7f:a3:7d:5e:7a:63:01:27:69:26:9a:ac:bd:aa:ef:
                    33:66:4f:db:be:ce:50:a1:8e:4b:9a:58:7a:52:ae:
                    27:71:96:f5:c5:92:c5:9d:c1:65:8d:04:3e:65:4f:
                    d7:6f:de:9c:a4:25:2b:85:21:f1:61:99:7e:54:0f:
                    bf:a1:98:bb:90:9e:49:fc:40:29:55:98:27:ec:67:
                    0b:af:d1:32:38:61:41:5d:54:e9:12:35:e9:3e:5b:
                    61:54:df:f5:fc:0f:49:08:bc:a5:74:7f:2d:ba:61:
                    46:33:f8:fd:5e:b3:be:d4:c4:06:ec:61:d7:29:7d:
                    ee:59:93:a7:74:31:c4:31:bc:79:86:68:6f:71:4e:
                    f5:11:98:6f:a3:82:65:27:07:28:bd:71:de:45:f2:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:60:76:9F:7B:E3:4A:E0:0D:F6:B8:62:8A:35:07:C8:BC:1C:43:60
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/375F1062D70111EFB7290E6AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8e:83:62:46:1c:13:c1:56:e5:c4:fd:8c:7c:97:d2:18:f9:
         e4:6a:4f:eb:42:e6:de:e4:45:05:e8:46:25:d6:ea:4c:5d:5a:
         2f:2e:33:2e:ae:d2:cf:b3:69:3e:69:a5:3b:e1:18:cf:74:c7:
         ab:ae:f8:34:b0:54:86:0f:d6:83:33:b0:fc:ce:6f:cf:95:a6:
         54:79:79:35:0e:ff:b4:fa:c9:4e:08:6c:c1:2e:42:de:14:36:
         84:08:56:9c:52:4c:85:ac:13:64:59:c0:3f:dd:23:e8:07:c6:
         3a:8a:cc:79:7b:1b:fb:76:e3:14:52:fc:43:46:ec:bd:86:a3:
         a1:e7:3e:6c:63:97:46:ea:b0:58:03:ef:3d:10:3b:fc:ad:55:
         ec:fb:db:95:8a:f1:7e:c5:ab:b0:49:33:9d:19:4e:95:c1:53:
         8d:91:08:98:73:ee:46:e3:96:26:8b:0c:67:cf:4e:31:f2:2f:
         04:c9:bd:a0:8e:d2:92:3e:c0:75:8b:4b:66:f0:b7:01:77:d0:
         41:3c:fe:88:16:f4:f6:ec:7d:c6:9a:f9:38:0f:84:94:b6:dd:
         4b:33:9a:15:9a:3a:31:ba:7d:5d:f1:a5:da:db:36:2b:e6:34:
         45:34:57:26:b8:a3:18:ba:ba:37:5a:45:f6:86:0a:32:d3:6d:
         a7:be:71:aa
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICL60wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYyNzU3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNjE4ZC1lZWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdBmgOqq/Omw3CkzzQg/mZMV51syzVvAqZNeBAeqPyxeDP5vi8qbJBUl5fMU
1X6n5iYFIJIZa2eD8wDBlIaNlfsLyxg0ci9k4/0b0ufAHOVwXJwwtdiqGBAyMomX
hvXgymfaVrJK47d/o31eemMBJ2kmmqy9qu8zZk/bvs5QoY5Lmlh6Uq4ncZb1xZLF
ncFljQQ+ZU/Xb96cpCUrhSHxYZl+VA+/oZi7kJ5J/EApVZgn7GcLr9EyOGFBXVTp
EjXpPlthVN/1/A9JCLyldH8tumFGM/j9XrO+1MQG7GHXKX3uWZOndDHEMbx5hmhv
cU71EZhvo4JlJwcovXHeRfKZKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEVgdp97
40rgDfa4Yoo1B8i8HENgMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvMzc1RjEwNjJE
NzAxMTFFRkI3MjkwRTZBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAofifMA0GCSqGSIb3DQEBCwUAA4IBAQB+joNiRhwTwVblxP2MfJfS
GPnkak/rQube5EUF6EYl1upMXVovLjMurtLPs2k+aaU74RjPdMerrvg0sFSGD9aD
M7D8zm/PlaZUeXk1Dv+0+slOCGzBLkLeFDaECFacUkyFrBNkWcA/3SPoB8Y6isx5
exv7duMUUvxDRuy9hqOh5z5sY5dG6rBYA+89EDv8rVXs+9uVivF+xauwSTOdGU6V
wVONkQiYc+5G45Ymiwxnz04x8i8Eyb2gjtKSPsB1i0tm8LcBd9BBPP6IFvT27H3G
mvk4D4SUtt1LM5oVmjoxun1d8aXa2zYr5jRFNFcmuKMYuro3WkX2hgoy022nvnGq
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:25:40 2026 by rpki-client