Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/69D7FD54650C11EFAA04396EC4F9AE02.roa
File:                     69D7FD54650C11EFAA04396EC4F9AE02.roa (raw, json)
Hash identifier:          Ar3lW1EV8QkGILmly9ATSuT/AsjTb1qfk7wL867D6JE=
Subject key identifier:   0F:71:98:D6:B3:B4:40:D0:7A:0C:24:C3:1B:5A:2C:CF:C1:BE:5D:54
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       319D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/69D7FD54650C11EFAA04396EC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:24:02 +0000
ROA not before:           Mon 06 Jul 2026 16:24:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152575
IP address blocks:        160.30.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12701 (0x319d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:24:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6a2-ea2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c8:a4:b3:88:c3:c0:04:b3:f4:cb:10:2d:68:
                    20:cf:dd:e8:15:4b:47:fa:1d:8d:54:f7:ed:d2:63:
                    02:dd:6a:f8:91:e6:6b:d2:73:20:93:ed:e9:d7:16:
                    4e:05:f0:c2:1a:9a:7f:f7:1e:78:79:0e:69:2e:f3:
                    a2:b8:78:90:c3:7e:43:dd:bb:ec:ca:76:97:00:9c:
                    fa:5f:c3:28:20:ca:8a:d1:f1:ef:71:9a:fa:65:8d:
                    40:af:15:3d:f8:f7:7a:0a:b9:c8:ef:22:a0:83:a0:
                    32:27:cc:49:15:ce:8c:33:e9:f3:eb:b1:6e:ae:b8:
                    e4:b4:80:1d:06:d5:5f:43:36:44:37:2b:57:fa:85:
                    b4:51:4e:d2:ff:a7:7b:92:95:c3:24:86:ad:40:a2:
                    16:d2:3e:8e:21:87:e2:97:e4:cd:5f:b5:d6:29:69:
                    5e:bd:74:2e:8e:64:89:0c:fc:c4:8c:42:73:18:81:
                    fb:36:c2:82:25:1b:2b:02:94:2b:fe:85:ca:25:16:
                    c3:fd:9f:64:72:ed:8a:07:12:a3:e2:64:be:96:4a:
                    40:08:a2:03:f8:f3:0d:3d:f9:7c:01:2d:7e:2d:25:
                    1d:76:76:40:e5:a8:b2:27:f9:42:f7:c8:47:6c:5b:
                    8f:3e:bb:65:3b:9f:ac:52:95:0d:dc:1c:12:c9:6b:
                    27:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:98:D6:B3:B4:40:D0:7A:0C:24:C3:1B:5A:2C:CF:C1:BE:5D:54
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/69D7FD54650C11EFAA04396EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:a8:e3:bd:9f:a2:60:a5:b3:ff:f2:d6:96:b7:ca:fa:40:c3:
         0c:40:8a:ee:d8:c4:f9:9d:15:44:06:3a:dc:6e:e5:38:71:b9:
         88:99:7d:e1:f6:19:2b:dc:fc:35:7f:cd:8c:b5:e4:1b:e2:e1:
         0f:69:ba:91:41:3d:5a:eb:25:e3:c1:4f:e6:a1:86:db:0d:f2:
         92:fd:a6:01:07:31:38:02:29:f0:6a:31:8d:ea:b4:b5:70:71:
         25:12:b4:83:08:6e:6a:df:04:15:a5:f6:c3:e8:89:8d:ff:df:
         92:a3:56:b9:9b:f3:1a:a5:8f:12:f2:6b:e9:0e:b7:11:96:37:
         72:90:df:cb:02:d8:19:be:f1:be:f3:df:c2:af:3c:eb:18:37:
         a1:cf:6f:8d:79:ad:71:75:54:4b:13:2c:e2:b8:da:6d:f2:14:
         b9:e3:da:e6:35:3d:5f:22:d5:20:58:a4:e6:a0:e4:0d:a7:e4:
         9f:d0:7d:8e:ed:7b:10:92:f7:f2:4f:eb:c1:65:60:a6:0e:9b:
         f8:76:9b:50:3d:00:93:8b:23:9f:46:2a:b9:8d:60:3b:ed:62:
         97:68:58:80:12:7d:6d:c4:98:b2:a1:a3:45:95:49:c3:60:f1:
         61:02:c3:2b:93:ee:c3:ee:58:50:78:40:ca:cc:9e:22:98:99:
         b5:f3:a6:15
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNDAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDZhMi1lYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsiks4jDwASz9MsQLWggz93oFUtH+h2NVPft0mMC3Wr4keZr0nMgk+3p1xZO
BfDCGpp/9x54eQ5pLvOiuHiQw35D3bvsynaXAJz6X8MoIMqK0fHvcZr6ZY1ArxU9
+Pd6CrnI7yKgg6AyJ8xJFc6MM+nz67FurrjktIAdBtVfQzZENytX+oW0UU7S/6d7
kpXDJIatQKIW0j6OIYfil+TNX7XWKWlevXQujmSJDPzEjEJzGIH7NsKCJRsrApQr
/oXKJRbD/Z9kcu2KBxKj4mS+lkpACKID+PMNPfl8AS1+LSUddnZA5aiyJ/lC98hH
bFuPPrtlO5+sUpUN3BwSyWsnjwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA9xmNaz
tEDQegwkwxtaLM/Bvl1UMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjlEN0ZENTQ2
NTBDMTFFRkFBMDQzOTZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB5UMA0GCSqGSIb3DQEBCwUAA4IBAQCVqOO9n6JgpbP/8taWt8r6
QMMMQIru2MT5nRVEBjrcbuU4cbmImX3h9hkr3Pw1f82MteQb4uEPabqRQT1a6yXj
wU/moYbbDfKS/aYBBzE4AinwajGN6rS1cHElErSDCG5q3wQVpfbD6ImN/9+So1a5
m/MapY8S8mvpDrcRljdykN/LAtgZvvG+89/CrzzrGDehz2+Nea1xdVRLEyziuNpt
8hS549rmNT1fItUgWKTmoOQNp+Sf0H2O7XsQkvfyT+vBZWCmDpv4dptQPQCTiyOf
Riq5jWA77WKXaFiAEn1txJiyoaNFlUnDYPFhAsMrk+7D7lhQeEDKzJ4imJm186YV
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:57 2026 by rpki-client