Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa
File:                     5222D5DE9AA011EFA29FDF65C4F9AE02.roa (raw, json)
Hash identifier:          0nhk1WjghpWvkizv8OokGWmOgzq8EQBPBlTUUDRp9i8=
Subject key identifier:   6C:36:1E:0D:11:78:55:F9:07:4B:08:BF:2D:23:A0:BD:F1:05:F7:6E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31B1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:24:42 +0000
ROA not before:           Mon 06 Jul 2026 16:24:42 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153233
IP address blocks:        160.191.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12721 (0x31b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:24:42 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6ca-5e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3d:d1:e7:62:c5:92:03:61:d5:59:e1:3b:09:
                    1f:42:f9:7c:84:09:4d:e3:f2:37:f8:39:c7:12:54:
                    8a:aa:5f:46:8b:cb:f8:2d:45:18:cf:48:ea:94:d0:
                    f0:20:4c:5f:36:1f:19:d7:12:db:91:05:83:77:36:
                    70:71:ef:0e:70:a6:c6:5a:23:12:5d:d0:73:54:25:
                    8b:17:6e:7b:30:14:07:8a:93:76:48:8a:bd:ab:59:
                    22:76:f3:32:e5:c0:ac:47:51:4a:d3:c0:7a:34:5f:
                    f8:96:35:b7:5b:61:58:c3:c8:74:ba:5a:07:52:6e:
                    9b:f2:7d:dd:61:ee:50:37:e0:46:cb:5b:95:ca:80:
                    50:e3:ca:dd:0c:f2:3d:b5:61:38:e6:cf:e8:7e:d5:
                    27:de:ca:f4:c0:80:11:42:8d:42:86:e8:6b:22:2b:
                    af:70:fe:35:12:8c:52:33:d2:9b:09:e8:31:99:6b:
                    6a:58:e8:fa:88:94:14:38:d1:19:6f:7b:3e:d3:b4:
                    d0:ed:d3:00:23:98:86:81:35:0c:ec:51:28:68:4e:
                    9e:f8:bd:bb:6c:91:fe:8f:12:52:ee:3f:0a:6d:91:
                    13:47:a4:a7:ee:90:7e:5b:e8:cb:a1:88:c8:f2:11:
                    44:a4:d3:6a:c5:a0:5d:47:2d:cd:a9:f3:ed:57:fc:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:1E:0D:11:78:55:F9:07:4B:08:BF:2D:23:A0:BD:F1:05:F7:6E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5222D5DE9AA011EFA29FDF65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:b2:0e:c5:ab:26:cf:26:d7:c1:27:eb:41:53:71:1a:ef:fb:
         2c:a8:e1:60:20:55:04:a6:52:24:27:95:7d:0e:2e:41:06:3d:
         f5:6e:2c:52:2e:03:30:36:2f:f3:ab:97:d2:71:9c:79:02:c8:
         ee:2f:b6:d7:6d:06:fa:57:15:7d:7b:7e:f4:5c:70:af:4e:d4:
         7c:50:32:88:16:6b:9b:52:b2:f1:bf:ef:86:b5:49:7c:8b:9f:
         d7:76:69:fa:05:e2:b4:81:63:20:7c:a8:f9:1b:dc:be:3e:e2:
         cd:1a:d1:99:cf:23:a4:67:a4:29:f7:08:7a:20:8c:44:36:99:
         93:e7:bf:48:92:e4:04:fb:cd:8d:74:e8:68:c3:f8:61:5f:56:
         80:6f:40:7a:15:c8:b3:0e:7a:76:71:81:b1:4c:ea:d7:72:b8:
         41:4a:2a:8a:21:bd:f1:42:81:77:84:ca:e1:06:c7:b2:ab:3d:
         82:cd:07:00:cf:68:e1:6e:b7:29:c8:37:1f:a8:00:46:22:6c:
         24:00:e1:ca:87:87:83:c7:29:f9:e8:86:f5:fb:bd:80:26:d5:
         6b:ac:cd:d6:74:82:54:b1:8a:ad:e9:a7:92:d5:5b:2f:9d:52:
         68:83:09:3a:69:35:ad:4b:5a:65:46:ff:e2:ad:40:f4:58:16:
         ea:32:41:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:04 2026 by rpki-client