Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa
File:                     6720B0E2E45511EFAEF28877C4F9AE02.roa (raw, json)
Hash identifier:          wUvFMECJ4S7caKb9O6eemHFbLN4DGdrm9RW/5AHn8Zo=
Subject key identifier:   28:B4:1E:11:D5:33:2B:DA:4A:85:7F:62:E4:61:15:34:DC:03:CC:F1
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EA2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:19:30 +0000
ROA not before:           Sun 31 May 2026 16:19:30 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135824
IP address blocks:        160.250.236.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jun 2026 09:54:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11938 (0x2ea2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:19:30 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f92-6544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:b7:89:ed:08:7f:c0:1a:97:18:40:d4:1a:
                    b9:0f:8c:6b:25:9b:be:33:9a:68:2c:c8:4c:de:2f:
                    46:ea:5c:40:58:b6:3d:68:90:80:9b:81:4c:e2:f0:
                    9c:aa:87:dc:f0:d5:65:47:b7:98:d1:8d:c5:5a:d3:
                    db:6c:11:ea:31:fe:1f:58:35:37:11:0b:dd:69:cf:
                    81:31:05:a2:57:fb:72:f1:e1:33:1b:29:ff:f9:59:
                    52:9c:77:80:e7:5f:ee:39:27:ef:14:86:d2:a4:e9:
                    e1:09:27:4d:40:92:84:57:20:d7:2c:6e:40:92:3a:
                    ee:b2:4d:ba:2b:70:43:64:ad:61:ba:23:0e:ae:4d:
                    72:cb:93:2a:7d:6d:46:aa:03:76:95:90:c4:c6:f3:
                    35:3b:9c:b0:06:ff:58:1a:6b:6c:51:51:2c:47:b6:
                    2b:1f:d7:0f:de:0e:d0:d9:aa:7e:e4:80:a2:ae:15:
                    df:d6:67:56:f8:45:20:25:8e:a7:f4:ab:67:d6:71:
                    26:9c:8a:15:02:6e:45:9c:e4:27:b6:eb:c1:94:26:
                    d4:de:b2:68:9f:87:f2:a8:6f:c6:67:6c:31:6a:5b:
                    a0:d7:35:a5:51:35:08:00:c2:8c:7f:72:c1:3f:66:
                    e5:96:a4:44:ce:0c:02:e8:53:28:8a:e0:be:7b:0b:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B4:1E:11:D5:33:2B:DA:4A:85:7F:62:E4:61:15:34:DC:03:CC:F1
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6720B0E2E45511EFAEF28877C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:02:ce:8a:1a:57:c9:c9:06:a9:1b:2f:cd:c8:4b:26:bf:2c:
         b9:77:a1:77:04:0e:76:c5:37:71:8f:95:f9:a5:e9:65:f3:6d:
         e6:33:60:62:af:7e:f4:16:57:88:95:88:ab:fe:08:07:30:72:
         e9:6b:fa:08:7a:2e:cb:65:ee:25:97:0e:ca:44:ac:fc:fe:d2:
         91:21:99:1a:47:eb:0f:20:fc:d9:ed:3b:be:2b:11:03:cf:c9:
         77:fd:17:b4:02:a2:be:4f:3a:48:3c:f6:a5:a4:7f:f4:83:d0:
         f0:35:0a:c3:bb:e9:b6:ac:66:da:cf:1b:40:3f:7d:fc:36:2c:
         34:82:87:e9:b4:f4:65:13:84:89:ab:51:5d:79:0f:ed:1c:b1:
         09:30:36:53:72:ce:06:5f:d4:e4:cd:f8:79:be:61:45:a0:f6:
         61:10:8d:ac:3e:82:40:57:ab:e9:35:0a:4d:07:bf:ae:7b:15:
         a7:9d:c9:31:3d:2c:06:04:b3:be:e8:a8:8d:de:3d:c0:c7:01:
         ad:57:20:a1:a3:c9:56:02:0c:da:25:62:61:f2:57:1b:c5:2b:
         65:67:7d:85:fa:2d:25:db:5e:9c:0b:9e:f0:ba:2a:27:56:92:
         e0:e4:ff:bb:1e:7e:20:8b:40:17:45:8b:f8:bb:84:24:6c:14:
         f9:78:96:94
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxOTMwWhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWY5Mi02NTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAppG3ie0If8AalxhA1Bq5D4xrJZu+M5poLMhM3i9G6lxAWLY9aJCAm4FM4vCc
qofc8NVlR7eY0Y3FWtPbbBHqMf4fWDU3EQvdac+BMQWiV/ty8eEzGyn/+VlSnHeA
51/uOSfvFIbSpOnhCSdNQJKEVyDXLG5Akjrusk26K3BDZK1huiMOrk1yy5MqfW1G
qgN2lZDExvM1O5ywBv9YGmtsUVEsR7YrH9cP3g7Q2ap+5ICirhXf1mdW+EUgJY6n
9Ktn1nEmnIoVAm5FnOQntuvBlCbU3rJon4fyqG/GZ2wxalug1zWlUTUIAMKMf3LB
P2bllqREzgwC6FMoiuC+ewseDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCi0HhHV
MyvaSoV/YuRhFTTcA8zxMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjcyMEIwRTJF
NDU1MTFFRkFFRjI4ODc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPrsMA0GCSqGSIb3DQEBCwUAA4IBAQAIAs6KGlfJyQapGy/NyEsm
vyy5d6F3BA52xTdxj5X5pell823mM2Bir370FleIlYir/ggHMHLpa/oIei7LZe4l
lw7KRKz8/tKRIZkaR+sPIPzZ7Tu+KxEDz8l3/Re0AqK+TzpIPPalpH/0g9DwNQrD
u+m2rGbazxtAP338Niw0gofptPRlE4SJq1FdeQ/tHLEJMDZTcs4GX9Tkzfh5vmFF
oPZhEI2sPoJAV6vpNQpNB7+uexWnnckxPSwGBLO+6KiN3j3AxwGtVyCho8lWAgza
JWJh8lcbxStlZ32F+i0l216cC57wuionVpLg5P+7Hn4gi0AXRYv4u4QkbBT5eJaU
-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:43 2026 by rpki-client