Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6F1E2EBC182911EF93CA342CC4F9AE02.roa
File:                     6F1E2EBC182911EF93CA342CC4F9AE02.roa (raw, json)
Hash identifier:          obG1udZti5Bo1ZSeEdaM8MbdhABAPyq88r6kaHXUhe0=
Subject key identifier:   FB:AD:CF:A3:7E:7E:C8:88:CC:6E:D0:1F:48:88:70:90:8A:36:E5:9F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F58
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6F1E2EBC182911EF93CA342CC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:25:19 +0000
ROA not before:           Sun 31 May 2026 16:25:19 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152532
IP address blocks:        160.20.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12120 (0x2f58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:25:19 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c60ef-e669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:c8:f2:0a:cf:94:8d:72:c4:03:2d:a7:24:
                    36:55:45:24:ed:bc:67:25:95:e2:fa:81:f2:66:39:
                    0c:a4:e4:5c:98:27:7d:37:d9:3a:ac:40:ce:86:1b:
                    cc:d3:91:fc:b5:0b:86:52:e3:7d:0b:5e:bc:d0:15:
                    e8:3f:f5:12:f3:a5:26:8b:41:88:70:12:7e:fc:d2:
                    2f:47:a1:cd:9d:3d:98:b2:fd:31:e7:63:39:e9:eb:
                    48:6e:e9:f3:80:19:ce:2a:fc:78:41:fc:75:69:36:
                    9d:34:a6:35:ae:82:7b:0d:a3:e4:3d:c2:2f:94:78:
                    df:29:b8:d9:b8:f7:33:16:5d:34:5b:5a:a5:bc:8a:
                    a4:30:d8:5f:51:62:ce:31:44:77:ea:f1:06:7a:5c:
                    de:88:e6:af:d0:21:63:af:b7:de:0d:1e:c9:79:d2:
                    01:fa:a0:86:36:e2:10:32:92:a9:2b:a7:f1:1d:2a:
                    39:92:c8:73:4e:88:76:fa:98:43:bc:dd:51:89:b1:
                    4f:ec:69:6a:92:79:df:13:51:f5:d8:0a:d6:26:77:
                    bd:d1:a4:e0:54:e0:dc:cd:74:0d:28:50:23:68:aa:
                    26:b7:d5:e2:4c:c9:5f:e4:e7:de:9d:fb:8b:2a:ac:
                    7a:06:9d:12:c7:ed:f6:ec:0b:47:43:ec:ad:75:fc:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AD:CF:A3:7E:7E:C8:88:CC:6E:D0:1F:48:88:70:90:8A:36:E5:9F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6F1E2EBC182911EF93CA342CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:c5:c8:a4:87:91:b9:ea:f0:93:32:44:4e:0a:ba:9f:8a:a1:
         79:d0:ac:b9:44:07:76:c5:5e:27:1e:b5:87:e2:22:f7:54:0b:
         26:08:96:6e:66:b3:a3:59:a2:15:59:b4:a9:3c:3b:db:1d:14:
         07:28:6b:9b:43:b3:71:4f:a5:5b:6b:ce:a3:6b:ab:d2:70:ea:
         f8:93:24:dd:36:5c:18:da:ca:02:57:91:43:b8:02:f9:03:e6:
         90:7a:65:9d:99:74:5b:b7:8e:87:4b:15:5b:fe:28:ea:3e:c7:
         8c:15:01:fe:a4:a5:7f:08:e3:44:e6:9f:64:e5:0b:20:f0:28:
         81:64:70:33:0b:da:32:83:ba:b0:63:ad:66:cc:a6:b1:bb:89:
         1f:9b:07:88:1d:71:88:d1:84:97:53:5c:4f:20:70:5e:91:35:
         39:fd:65:e7:8a:8a:65:ab:ad:f2:c7:48:b8:03:9c:b8:dc:bd:
         a4:8b:e4:53:5e:16:67:82:3f:d8:38:29:a1:88:cb:ea:0e:3a:
         f1:7d:88:c9:52:16:ff:94:f2:82:41:9d:63:1e:51:9f:39:78:
         b5:3f:28:59:17:bf:db:cc:8b:32:7b:c4:1b:a5:6d:67:52:fa:
         53:09:59:e1:e1:73:80:ba:a6:59:3d:c1:d2:d8:c4:e5:64:19:
         bf:9f:ff:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:23:49 2026 by rpki-client