Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6B910002F7F411EFA0F3E52DC4F9AE02.roa
File:                     6B910002F7F411EFA0F3E52DC4F9AE02.roa (raw, json)
Hash identifier:          e1AjxBH+uuNqsM+C1vWK7MEwGxAPZ1QvO8IurhO2ek4=
Subject key identifier:   F0:23:CC:DB:71:86:ED:7C:19:A1:64:CB:55:B2:CC:3D:D4:E4:70:BF
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2ED6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6B910002F7F411EFA0F3E52DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:21:10 +0000
ROA not before:           Sun 31 May 2026 16:21:10 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141317
IP address blocks:        160.191.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11990 (0x2ed6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:21:10 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5ff6-8d0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:24:db:cb:ed:0a:fa:61:6a:ca:c8:6f:39:20:
                    01:8a:3a:8b:78:9c:7d:70:e3:b4:9b:25:59:cf:6e:
                    aa:93:3e:38:53:35:2e:0d:1f:64:39:f6:51:43:b7:
                    00:f3:69:d6:36:83:e5:ad:3f:0f:a3:a6:9f:03:1f:
                    4c:42:98:77:c1:47:2f:ad:ab:3f:e0:fc:2a:61:65:
                    d5:53:49:af:cc:54:47:17:27:21:b6:d6:90:14:98:
                    eb:83:65:1f:02:a8:76:b3:17:8d:03:75:e4:7e:a3:
                    54:3a:14:78:49:16:bd:17:2f:71:a6:11:db:ce:42:
                    fe:90:e5:f2:88:64:40:c2:21:17:90:63:56:cb:f2:
                    1a:2c:36:c2:38:c2:b6:20:ea:ef:55:13:86:1d:af:
                    c8:db:b8:df:ff:06:e4:a2:8d:06:b0:a2:3a:24:b8:
                    ab:19:74:03:39:1e:5f:e6:2a:f7:e2:6e:ed:49:4f:
                    ed:8b:90:e7:e3:38:2a:58:0c:8b:96:8e:55:a1:c6:
                    92:d6:48:65:df:69:95:de:44:50:8d:cb:b6:05:98:
                    7f:af:fb:76:12:b7:bf:3e:90:70:52:dd:1f:cd:1a:
                    65:07:54:e3:ef:39:da:ab:b8:fe:da:a5:b3:18:23:
                    9e:f6:10:76:41:68:a8:f7:7f:f9:57:69:2e:a4:ce:
                    8f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:23:CC:DB:71:86:ED:7C:19:A1:64:CB:55:B2:CC:3D:D4:E4:70:BF
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6B910002F7F411EFA0F3E52DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:40:56:d0:05:ff:9e:f2:7e:df:c7:71:28:be:40:cd:5e:6c:
         6a:76:b6:fb:a0:74:0e:d2:ef:fc:a7:3b:d6:02:5a:ae:e0:58:
         56:8d:dc:40:d1:dd:45:c5:bb:fa:b5:2f:47:04:86:11:b5:0e:
         5b:a7:51:a7:41:be:65:b9:47:9d:9b:45:b6:c6:b9:87:82:e9:
         5f:34:ca:6a:fd:b7:3c:95:19:63:6b:7a:6a:82:60:b5:9f:cd:
         f3:42:f5:a7:8c:ef:3c:e7:7e:91:2a:b2:2c:c6:b5:48:eb:ef:
         8e:57:55:88:0f:ff:2e:a4:fb:ea:5e:d6:cd:3a:82:05:30:4a:
         79:f7:ff:ce:b2:d9:6c:ed:14:f1:cf:1e:f3:01:46:1e:74:1b:
         42:46:4f:f7:a3:e7:d6:3c:80:9d:1b:27:1b:13:53:61:26:8a:
         cb:23:70:18:20:00:b0:d6:78:38:48:74:e1:8d:c4:d2:0c:4b:
         d2:ac:01:6b:d2:bd:30:ec:b4:bd:fc:ef:ec:47:17:8a:de:b9:
         19:cd:f8:cb:3b:d5:18:71:f9:b7:3e:44:44:6f:a6:5b:42:b6:
         f6:5f:ff:1d:c4:10:98:24:91:c3:f5:5c:e3:d7:1d:e4:05:fe:
         33:e6:ba:e3:b9:27:6c:d5:49:ef:51:fd:5a:a4:98:57:36:a2:
         fa:1b:eb:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:22 2026 by rpki-client