Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6AC5C192B7A511EF9BFA342FC4F9AE02.roa
File:                     6AC5C192B7A511EF9BFA342FC4F9AE02.roa (raw, json)
Hash identifier:          SU6C5Vjo5FQ8X3UNz/ddTlq4iVvvVFB5+Loc01m6szY=
Subject key identifier:   47:15:C3:3E:B2:0B:5D:4B:6F:99:58:F8:8B:61:86:BB:46:BE:9E:F6
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31C6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6AC5C192B7A511EF9BFA342FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:25:22 +0000
ROA not before:           Mon 06 Jul 2026 16:25:22 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153262
IP address blocks:        160.250.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12742 (0x31c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:25:22 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6f2-6e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:30:99:f2:c0:03:bb:b2:b2:90:37:30:ce:
                    a6:8f:c6:0a:80:81:e4:1a:82:c0:b4:19:8d:37:6e:
                    b9:8b:f4:fc:31:61:b7:97:74:2d:1c:06:31:53:91:
                    ce:61:e2:19:f8:f4:9c:87:f9:f5:40:45:07:13:84:
                    da:b7:64:3f:77:c0:8f:0c:f6:27:89:3e:c5:11:d3:
                    ca:b9:ab:80:5e:8a:fe:98:98:ec:23:d2:07:25:29:
                    04:6a:81:a5:48:0d:96:f7:2f:8f:1b:a7:64:3f:3b:
                    bc:e1:89:99:16:54:5b:12:db:79:01:be:88:e1:35:
                    94:d7:42:c5:fd:d4:4a:e6:43:72:86:f4:6f:ca:f3:
                    6a:5d:88:91:14:56:6b:41:39:ad:1c:98:ee:fd:21:
                    04:7b:94:a8:c5:ec:fd:38:0d:34:2e:fa:29:91:40:
                    05:d0:5e:95:36:f1:d1:1a:bb:42:77:3a:fc:f9:96:
                    03:2f:7d:ca:4e:5e:fb:7a:a6:7e:11:17:53:a1:c2:
                    9a:20:df:a8:cb:bd:54:41:49:be:6b:16:76:e8:62:
                    14:16:38:8a:b7:c8:4d:72:7f:6d:53:f0:2c:5f:ff:
                    6e:61:17:6b:8a:b7:80:a2:9e:6e:12:20:bb:12:5a:
                    ec:c2:b9:4b:f6:ef:a6:58:ac:d9:dc:6d:c2:87:83:
                    b3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:15:C3:3E:B2:0B:5D:4B:6F:99:58:F8:8B:61:86:BB:46:BE:9E:F6
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6AC5C192B7A511EF9BFA342FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:fa:6c:87:1d:cd:c2:83:64:bb:03:67:53:4b:31:58:c4:
         76:32:d0:f6:e7:47:32:c3:c0:73:46:e5:f9:c0:e0:a7:f7:f5:
         47:d8:ee:f7:17:ab:5d:fd:b0:a1:49:2d:bf:1d:20:f2:6d:bd:
         da:a0:d3:5d:4b:6a:fa:26:ba:a0:4a:42:c3:13:bc:a5:58:b9:
         e0:e0:80:b3:b3:2f:7c:98:72:62:ff:e9:7f:8f:a1:ae:e4:38:
         d1:fe:f2:98:91:6a:ff:20:e0:94:8a:c0:c1:24:0a:9e:d9:48:
         79:f7:8d:48:03:d3:c7:b2:4b:a1:c8:9d:a4:6f:c5:dd:6e:a8:
         56:d2:2f:36:cc:c8:b3:7f:e6:0f:0a:1b:8a:76:7c:6a:53:c3:
         7e:60:ad:d2:f0:de:b7:9b:3d:1a:67:59:87:39:c2:f9:f0:09:
         40:6f:c8:31:86:53:34:a6:5a:e2:b6:71:c0:31:0c:22:cd:3f:
         fe:6d:bf:d6:81:cd:88:b6:f0:e3:02:a7:1f:5a:15:53:25:40:
         50:23:7c:18:29:1c:81:f6:86:db:ba:c3:f7:9e:fc:a9:49:29:
         12:f6:57:52:58:ac:79:a5:b5:16:1f:5c:08:5a:8c:ce:d7:ab:
         a4:a7:c0:da:c0:ec:26:cf:b7:da:79:a3:37:09:77:74:6d:2f:
         06:b2:ac:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:42 2026 by rpki-client