Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa
File:                     56494EB6DD5F11EFA1B96834C4F9AE02.roa (raw, json)
Hash identifier:          wB3WNgsYYkOgKJbhQXwf8kukcByqSywMCXnkuQoMCBI=
Subject key identifier:   A1:C4:E7:33:61:B3:5D:60:C2:70:6E:7D:FC:F4:EB:5A:9B:6E:E2:F2
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F51
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:25:07 +0000
ROA not before:           Sun 31 May 2026 16:25:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152522
IP address blocks:        160.22.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12113 (0x2f51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:25:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60e2-9763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:3a:c0:26:a6:97:b3:09:6b:73:af:05:99:
                    2b:9d:97:59:57:20:5b:89:83:20:f0:4f:51:4a:7e:
                    14:64:a7:54:53:ec:9c:53:79:93:7f:00:16:5c:5f:
                    c9:e9:47:42:0e:ac:11:1d:67:6d:f9:66:c4:59:fd:
                    08:9e:ee:7d:30:0b:58:4a:33:32:a3:a4:cf:94:c0:
                    48:68:1c:5d:40:d5:c7:53:9f:21:39:ad:a5:8b:0f:
                    e1:04:d8:ea:c7:25:e9:32:70:83:26:41:39:34:6e:
                    ee:f5:b3:8c:90:b3:dd:e0:d5:31:6e:7e:d0:5f:1a:
                    68:f7:f7:23:0f:8f:f4:ad:60:00:e8:36:50:d5:eb:
                    b3:28:18:5b:bd:d8:0c:8a:ca:2a:b4:cb:1f:4e:79:
                    e5:cc:a9:cd:75:25:f3:72:7a:59:30:6d:d3:7d:85:
                    26:31:e3:4b:26:f7:0a:a9:8a:01:53:07:7e:e5:43:
                    03:80:ae:7b:09:0f:c5:e0:3d:46:03:9b:81:ec:5f:
                    e3:6b:e7:76:62:e8:f6:d0:77:58:45:fc:7a:60:d9:
                    5d:3f:a7:26:60:b5:69:af:bc:b2:1f:b4:53:32:bd:
                    08:e0:43:a1:b1:11:ad:ea:fb:a8:33:3e:b2:ee:35:
                    dc:7e:7e:a5:b3:e7:ca:37:cf:c3:cf:d0:62:b1:e1:
                    0e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C4:E7:33:61:B3:5D:60:C2:70:6E:7D:FC:F4:EB:5A:9B:6E:E2:F2
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/56494EB6DD5F11EFA1B96834C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:3c:84:a9:78:f3:92:49:d3:89:f9:b1:e7:29:9d:fa:2b:56:
         9e:c2:7d:10:0a:07:b4:36:a1:60:70:9f:cd:91:c8:ee:33:d8:
         87:9b:a8:12:68:92:f7:32:34:34:d7:1b:76:95:cf:13:6f:63:
         a7:b2:ff:78:38:1a:d4:3a:d5:60:98:56:63:4a:52:a7:6d:3c:
         7f:06:5a:da:cd:bf:25:fb:76:5b:ed:2d:df:d3:d9:27:66:e5:
         6f:78:73:7f:f6:ac:2c:19:cd:73:20:f7:54:4e:83:25:78:f4:
         1f:3b:e9:8c:d7:8f:94:11:ad:b9:c1:d5:13:d8:1e:64:42:18:
         77:11:1b:95:17:44:ae:dd:8d:ff:d6:38:e9:25:67:8c:0b:fd:
         90:28:32:08:f3:0f:36:5c:76:af:ad:16:dd:d9:6d:b7:5a:8e:
         7e:fb:4a:8c:8e:c0:69:50:72:9d:dc:f4:31:a9:c2:4c:58:23:
         97:90:69:42:d6:a5:8f:01:2c:3b:ff:b7:0a:96:dd:12:72:bc:
         a2:fe:89:95:87:73:cb:45:c9:7f:6b:b9:27:b3:29:0b:30:d2:
         f5:0b:9c:68:e4:ea:fe:fe:eb:cb:f1:96:a6:b0:b6:e0:f7:3a:
         b4:b2:e0:c2:16:58:3d:fe:d3:b4:7f:cf:25:ff:3e:3c:e0:26:
         e2:d0:58:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:20 2026 by rpki-client