Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DDA75D4773911EFB312F242C4F9AE02.roa
File:                     4DDA75D4773911EFB312F242C4F9AE02.roa (raw, json)
Hash identifier:          DqqYce0+XY+hgSzd+QPcyJ/godZ0xhVxFdTUcVg2fTs=
Subject key identifier:   95:21:36:D4:6B:3D:04:2D:18:84:82:24:15:F3:43:90:DB:77:98:76
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31A4
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DDA75D4773911EFB312F242C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:24:16 +0000
ROA not before:           Mon 06 Jul 2026 16:24:16 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153209
IP address blocks:        160.187.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12708 (0x31a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:24:16 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6af-dc96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:82:2d:ca:bd:36:cc:58:06:96:10:a8:4c:88:
                    bd:d3:03:11:bb:83:96:f3:15:54:ce:7e:61:18:5c:
                    60:25:2d:c9:3d:36:4e:a4:c0:47:6c:c0:29:cd:0c:
                    87:1b:17:d1:81:95:d5:5c:58:2b:f4:e4:58:f5:fc:
                    d5:b4:cf:2a:ab:2c:06:05:12:3a:84:b8:93:c0:75:
                    e9:fe:dd:be:01:a9:57:3c:99:42:57:e4:a5:04:f3:
                    b6:0d:55:3f:cc:c7:7b:aa:97:87:01:98:c4:54:05:
                    17:5a:24:51:22:ca:20:aa:7f:5c:50:be:62:63:5f:
                    9d:5e:46:c8:12:80:44:df:f2:59:65:f4:07:e7:01:
                    98:61:12:c3:36:3a:9a:c8:9e:a0:7b:3e:b8:c8:cd:
                    87:69:ff:55:ff:98:d6:c9:03:f8:b8:31:2b:79:ea:
                    95:eb:47:85:d7:e7:61:15:6d:11:ee:43:2c:2e:bb:
                    bf:36:aa:72:c1:1a:6f:53:89:82:99:2a:1c:d6:87:
                    80:6c:38:83:fa:3a:b7:a0:36:c8:ff:1d:5e:9c:40:
                    7c:0c:54:7f:61:20:ce:08:7f:5d:e6:ab:d5:fc:75:
                    f5:9b:9d:b3:b7:32:d5:93:f5:75:78:25:f0:2d:ec:
                    2b:03:83:a1:c6:c6:eb:c2:4c:ac:ac:ca:ee:c5:b7:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:21:36:D4:6B:3D:04:2D:18:84:82:24:15:F3:43:90:DB:77:98:76
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/4DDA75D4773911EFB312F242C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:63:b2:e4:99:7b:45:c6:b3:46:a5:96:0f:17:25:ff:0d:96:
         2f:56:66:f0:b6:05:0a:56:b5:b2:bb:31:21:be:a3:ec:9c:00:
         e0:3c:66:3b:8e:6d:7a:47:56:de:d5:97:12:65:ad:e2:70:6a:
         71:ef:99:f6:3f:87:9c:20:33:ff:d3:b0:4f:4a:57:29:72:84:
         80:8f:61:ec:29:1f:ac:43:b9:b5:9e:b4:0d:10:0b:e9:63:17:
         9e:26:8c:36:c8:7b:b0:ff:91:f8:33:7c:cd:b8:c6:ae:ce:31:
         3b:d4:bc:4e:25:94:32:11:68:50:7e:e4:ac:b5:da:80:e2:60:
         85:5b:f6:90:d2:ac:04:b5:bb:e5:56:90:e2:39:d6:30:14:4f:
         3b:8a:fa:c3:3c:25:ad:92:05:86:61:3a:a8:fa:f1:b5:d0:c4:
         51:ff:1a:e2:a6:01:cd:7e:55:29:62:25:7b:2f:25:f0:6b:ea:
         ec:8c:82:56:ff:f9:21:41:b5:e4:9d:c3:1d:e3:eb:71:48:3e:
         d9:0a:db:4d:3a:58:b1:cc:58:d3:0a:f5:6e:f7:62:e3:4d:ea:
         ac:b2:5f:b6:c6:2d:30:1e:24:c2:f5:22:a9:c1:4b:c5:00:30:
         e2:e3:37:4c:cd:92:d9:96:58:42:c1:ec:7c:56:93:1b:ea:1f:
         d7:9c:45:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:24 2026 by rpki-client