Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3E3DC8C06EA511EF821CAA1CC4F9AE02.roa
File:                     3E3DC8C06EA511EF821CAA1CC4F9AE02.roa (raw, json)
Hash identifier:          ZjdBAvKDx8VJdZN1xgKKIM7d7MqUScq/oiM6qpUKSX8=
Subject key identifier:   F5:F4:57:D4:91:C1:55:A1:18:19:24:50:B7:C2:77:A2:4E:F9:D4:8F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30C2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3E3DC8C06EA511EF821CAA1CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:47 +0000
ROA not before:           Mon 06 Jul 2026 16:16:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135778
IP address blocks:        160.30.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12482 (0x30c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4ef-8391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cd:cc:9c:e7:5f:c1:eb:fc:18:4d:5a:e4:84:
                    15:c7:21:19:9b:df:b9:10:ec:2d:16:7a:0d:a9:24:
                    0f:6e:61:ac:9e:3a:6c:53:9a:a0:3d:4a:49:6a:ba:
                    34:7b:14:ab:e5:b9:b2:0c:44:a6:16:1d:46:5d:09:
                    44:01:1d:4f:d7:b9:10:36:e6:d1:5f:0a:1d:d9:08:
                    7c:b8:07:03:2c:73:7b:f2:ea:5b:ab:9b:29:fd:f2:
                    3c:aa:00:69:1b:c4:d1:ed:b0:e5:b2:d5:54:fa:30:
                    2f:29:15:0b:0f:d4:02:57:69:df:70:2a:a5:55:65:
                    91:aa:81:25:50:8d:09:34:4f:c8:77:5e:31:e7:18:
                    9d:bd:2f:33:2c:66:5b:53:e9:4f:ab:74:f3:05:27:
                    ab:64:fb:c8:64:95:45:de:d8:56:a9:bc:a3:9c:9e:
                    37:2b:dd:d8:a1:56:96:b0:d4:16:b5:e8:7e:92:23:
                    bb:51:90:b9:2e:ba:1e:f3:04:3b:07:09:7c:9e:b8:
                    ea:67:3f:29:00:aa:49:ba:2f:f4:36:d0:2b:6b:91:
                    f8:cc:9f:06:b3:3b:40:d4:e5:aa:b7:06:2d:1d:97:
                    00:11:32:f3:43:ef:0e:01:7a:23:46:7b:3d:96:28:
                    88:ae:db:ef:f6:26:16:c7:bd:5f:79:c9:4f:20:11:
                    6d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:57:D4:91:C1:55:A1:18:19:24:50:B7:C2:77:A2:4E:F9:D4:8F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3E3DC8C06EA511EF821CAA1CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3d:0b:ff:4d:2e:e3:d8:9b:01:65:54:e4:9a:e2:69:a1:4e:8a:
         fc:33:e2:1e:98:47:85:8b:9f:95:bb:92:9c:27:42:fa:8f:2e:
         58:b9:53:0c:e5:dd:8d:79:22:3e:f3:20:cc:0a:8c:92:67:04:
         42:48:c0:47:96:ef:c5:66:9c:29:fd:e7:4b:4a:c0:d0:b4:1d:
         8c:5f:9b:30:93:fe:a6:c7:c6:c9:f4:9b:6e:d4:61:a7:48:d2:
         8c:64:6c:3d:f4:a8:66:e0:04:7e:1d:7a:75:3d:21:72:96:3b:
         42:0f:a2:bc:a0:99:c1:fd:e6:4f:82:94:2e:9a:fe:09:a9:37:
         6a:30:0f:78:f0:37:3b:78:03:59:3a:47:a6:57:bc:46:f8:19:
         bc:16:bf:4f:46:8e:af:ac:7f:ed:f1:73:a6:31:c7:b0:64:57:
         73:8a:a0:44:75:32:74:fa:5d:6e:3b:06:8b:81:3e:77:39:1f:
         fc:b1:48:4d:ad:42:ff:9d:df:85:55:e9:c9:99:f3:ac:d7:56:
         7e:79:3d:25:ce:ce:bb:ed:9b:73:ca:85:61:99:b9:b7:38:bf:
         b6:d4:f3:e8:09:09:35:2c:c4:f1:e7:1a:21:fe:f1:2d:91:4c:
         3d:18:6e:d7:43:6f:1b:5a:49:a7:69:1d:ab:6e:15:96:ef:a4:
         77:4b:60:98
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYxNjQ3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDRlZi04MzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6s3MnOdfwev8GE1a5IQVxyEZm9+5EOwtFnoNqSQPbmGsnjpsU5qgPUpJaro0
exSr5bmyDESmFh1GXQlEAR1P17kQNubRXwod2Qh8uAcDLHN78upbq5sp/fI8qgBp
G8TR7bDlstVU+jAvKRULD9QCV2nfcCqlVWWRqoElUI0JNE/Id14x5xidvS8zLGZb
U+lPq3TzBSerZPvIZJVF3thWqbyjnJ43K93YoVaWsNQWteh+kiO7UZC5Lroe8wQ7
Bwl8nrjqZz8pAKpJui/0NtAra5H4zJ8GsztA1OWqtwYtHZcAETLzQ+8OAXojRns9
liiIrtvv9iYWx71feclPIBFtLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPX0V9SR
wVWhGBkkULfCd6JO+dSPMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvM0UzREM4QzA2
RUE1MTFFRjgyMUNBQTFDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB4cMA0GCSqGSIb3DQEBCwUAA4IBAQA9C/9NLuPYmwFlVOSa4mmh
Tor8M+IemEeFi5+Vu5KcJ0L6jy5YuVMM5d2NeSI+8yDMCoySZwRCSMBHlu/FZpwp
/edLSsDQtB2MX5swk/6mx8bJ9Jtu1GGnSNKMZGw99Khm4AR+HXp1PSFyljtCD6K8
oJnB/eZPgpQumv4JqTdqMA948Dc7eANZOkemV7xG+Bm8Fr9PRo6vrH/t8XOmMcew
ZFdziqBEdTJ0+l1uOwaLgT53OR/8sUhNrUL/nd+FVenJmfOs11Z+eT0lzs677Ztz
yoVhmbm3OL+21PPoCQk1LMTx5xoh/vEtkUw9GG7XQ28bWkmnaR2rbhWW76R3S2CY
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:35 2026 by rpki-client