Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72B6A58EEEA411EF980AE31AC4F9AE02.roa
File:                     72B6A58EEEA411EF980AE31AC4F9AE02.roa (raw, json)
Hash identifier:          Ddo3SDf4K0JvO0OP0r9J3M5GkGkA3kDg+zrNuNJx1QI=
Subject key identifier:   E3:C3:D5:96:63:8B:67:C5:5D:ED:9D:57:C0:FF:AA:1B:8C:99:FF:61
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       313C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72B6A58EEEA411EF980AE31AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:20:48 +0000
ROA not before:           Mon 06 Jul 2026 16:20:48 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151108
IP address blocks:        160.250.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12604 (0x313c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:20:48 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd5e0-3a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:3f:2c:d8:39:f5:d1:41:a3:31:78:bd:b4:
                    88:84:35:22:fe:44:9f:f4:8c:b3:36:74:4a:88:e1:
                    ca:d8:77:ff:40:d5:31:6b:cb:95:47:ee:3a:e3:f3:
                    05:69:40:58:8a:1f:8c:df:8a:b3:3c:ab:3c:f0:6b:
                    e0:d8:f8:6e:be:6d:4b:62:a7:c2:3c:47:1a:25:0f:
                    2e:db:7a:c6:12:11:9e:fa:44:22:d5:b2:d5:88:9d:
                    44:6c:b8:c5:dd:70:c6:e3:2b:25:12:26:ab:a3:f0:
                    d2:6a:53:1d:e5:cf:f2:86:7c:c6:b7:80:34:f9:be:
                    c0:f9:68:27:80:e4:d9:63:53:85:bc:9f:4c:b5:51:
                    c2:da:92:e7:87:2f:cd:5b:4c:53:0b:9b:3e:58:e1:
                    e1:8a:4c:6a:30:d9:d6:29:12:49:29:0c:ac:82:82:
                    d5:93:d3:62:a0:dd:94:3c:3c:fe:ce:11:9e:69:26:
                    ce:de:98:39:8e:ee:2f:3a:a3:09:9f:65:5a:07:a8:
                    30:fd:d4:63:3c:cd:a8:7e:31:ef:37:00:dc:57:75:
                    d6:68:4b:05:26:fb:1e:52:00:80:ce:be:2f:53:13:
                    d4:c5:14:fa:5e:29:5a:69:2c:70:ca:1e:2c:84:62:
                    2e:42:85:db:e7:b5:26:b7:80:e5:57:ac:6e:aa:72:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C3:D5:96:63:8B:67:C5:5D:ED:9D:57:C0:FF:AA:1B:8C:99:FF:61
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/72B6A58EEEA411EF980AE31AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:22:06:82:fd:1d:e7:a2:e4:11:92:d9:93:64:fb:98:ba:d6:
         d8:e2:ef:dd:ad:34:6d:d1:30:16:f0:57:e9:4a:c6:12:a6:56:
         76:17:4f:90:d7:c3:fe:d1:87:76:83:83:d0:7e:d7:ab:69:08:
         00:52:49:42:2a:f6:fd:a7:88:91:df:a3:67:72:76:08:76:d5:
         c9:ad:73:e3:b2:f0:a3:3a:b2:d9:52:f5:8e:66:a6:fe:fa:7f:
         2e:cf:e5:56:9f:f4:f5:71:56:92:f6:38:bb:20:8e:18:2f:1e:
         64:1f:12:97:34:fd:f7:f6:cd:59:1b:4f:23:48:12:13:a1:db:
         ea:d5:76:b5:d2:3e:18:a7:dc:4b:15:7a:8b:3e:02:5f:a2:ce:
         6e:0d:2d:ed:fe:c2:2d:0a:fb:6f:32:42:8b:7e:99:68:30:37:
         29:a8:4b:50:78:19:71:4f:ca:64:d8:87:42:b2:e5:24:64:83:
         c2:f7:39:7c:c2:eb:a7:77:71:84:13:33:61:42:cd:ea:51:3f:
         9a:fb:7f:c7:75:d9:25:24:94:5e:9a:60:a2:38:f8:61:89:22:
         6c:80:e9:57:7c:97:e7:84:22:e7:2c:f8:94:54:87:e7:49:59:
         73:15:1c:ab:80:38:62:8f:3e:68:dc:40:d2:57:73:28:11:f3:
         ee:77:42:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:51 2026 by rpki-client