Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6334900819C011EFA9805B58C4F9AE02.roa
File:                     6334900819C011EFA9805B58C4F9AE02.roa (raw, json)
Hash identifier:          UVDLhJAIh5zbY+4juYnHT7Qj4srEkj50kRju74tnwr4=
Subject key identifier:   AB:C9:C3:D7:84:02:38:31:45:41:EF:56:42:20:2A:3C:6D:D2:9B:80
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3182
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6334900819C011EFA9805B58C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:23:08 +0000
ROA not before:           Mon 06 Jul 2026 16:23:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152533
IP address blocks:        160.20.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12674 (0x3182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:23:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd66c-84ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:5c:56:33:bc:ba:80:7b:0b:1e:4b:c0:94:
                    3a:91:8b:c4:1b:73:87:f0:bc:67:22:62:82:40:cf:
                    8e:45:94:81:42:f5:2a:42:75:ca:fe:ad:99:2a:81:
                    cb:d7:7d:65:21:18:54:0a:18:df:b3:ce:b7:1f:f4:
                    c3:d4:29:ec:fe:5a:9a:51:31:dc:09:5a:e1:ad:ee:
                    11:91:4a:a8:21:df:8c:4b:11:25:e6:52:72:48:38:
                    35:4d:cb:78:b5:f9:24:ce:3a:0d:46:61:25:29:70:
                    86:f2:7a:08:58:b9:fb:d0:f3:51:fb:92:4b:5b:ec:
                    35:e8:33:2b:c6:0c:f0:5c:1e:99:b4:89:14:55:c7:
                    13:80:ef:4f:3c:4b:49:6d:44:62:58:e5:71:a9:4b:
                    61:ea:23:56:5d:da:32:80:e8:cf:a2:6d:2d:87:24:
                    b7:3b:43:bc:61:39:db:a0:ed:97:62:1a:1e:9b:80:
                    6a:9b:dc:d0:04:df:f9:e2:4c:17:45:27:50:53:99:
                    02:10:0b:b6:3a:dd:64:e6:1d:4a:0b:20:11:fd:3d:
                    11:e1:53:ac:68:10:28:f2:48:e0:61:a5:02:3f:27:
                    e3:89:34:62:19:c7:8d:e1:64:ca:7d:04:73:63:a5:
                    a0:d0:1f:e3:d9:8f:2f:3a:30:b3:cc:79:a5:be:b0:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C9:C3:D7:84:02:38:31:45:41:EF:56:42:20:2A:3C:6D:D2:9B:80
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6334900819C011EFA9805B58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:6d:be:e1:e8:86:aa:12:cf:8c:c3:21:78:91:09:04:96:c1:
         38:75:48:00:78:88:20:6a:f5:e1:23:dd:38:6f:5c:1d:f9:e7:
         3f:7d:dc:c0:1b:34:1d:81:ad:82:e6:b0:2e:a5:a3:a1:6f:e9:
         cf:b8:4e:63:54:c9:22:32:6d:83:ed:aa:e6:52:76:47:cb:42:
         c9:b6:ad:48:15:7c:10:b8:73:57:c0:8f:f6:1b:d4:3c:02:61:
         dc:db:3e:79:28:3f:e6:88:2f:d7:22:3e:b2:e3:bd:e3:87:1f:
         99:30:24:4b:42:4e:24:1d:6f:61:d3:68:cc:41:00:77:b6:c8:
         7b:aa:a8:2f:06:16:11:90:28:ae:0e:09:83:7e:bf:aa:8b:07:
         43:97:a6:61:69:9f:38:94:d3:a8:d1:66:e8:2b:a9:5c:97:ac:
         9f:05:7f:05:5c:22:f2:37:1f:f8:ac:6f:95:f8:92:3d:ce:cd:
         6a:42:50:96:d7:29:5d:19:f4:2a:4d:fc:e7:61:36:a0:f6:8d:
         bc:fd:54:08:3a:08:bb:93:5c:4c:d0:aa:17:07:74:8c:d5:95:
         a3:fa:56:a9:f1:e3:9d:b2:d8:12:ef:79:85:c1:93:24:00:c5:
         e1:44:21:e9:67:b3:4a:91:1b:56:df:2f:4e:f2:b0:41:06:a6:
         c0:6c:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:34 2026 by rpki-client