Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/756796CE8AB011EFBE6D8016C4F9AE02.roa
File:                     756796CE8AB011EFBE6D8016C4F9AE02.roa (raw, json)
Hash identifier:          Crd/7o+iIhk3Yvm332LeHvEUGbyN77k7N1BtNqOt2og=
Subject key identifier:   59:95:49:5A:46:82:08:49:D5:12:E0:FC:A1:85:E8:10:70:3D:E3:03
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F9A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/756796CE8AB011EFBE6D8016C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:24 +0000
ROA not before:           Sun 31 May 2026 16:27:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153258
IP address blocks:        160.187.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12186 (0x2f9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c616c-e309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:92:db:85:d9:4d:87:e6:4a:46:b9:0b:dc:f7:
                    34:46:ad:ba:0f:55:15:45:eb:5a:41:fc:77:af:9d:
                    2e:d6:b6:1f:c7:45:34:c8:69:6d:12:0b:ce:4d:c6:
                    4e:70:ce:32:06:b5:27:0e:3a:17:23:27:fa:95:4e:
                    77:87:11:90:94:9a:8b:47:d1:d3:31:14:60:7d:04:
                    15:6f:96:a4:28:e5:4c:18:12:41:18:2a:89:d3:03:
                    e3:30:8b:7a:4b:70:81:85:83:b1:14:c6:b2:57:c9:
                    d3:b1:0f:46:ae:05:c7:88:c0:ac:00:9a:e8:d9:d9:
                    53:b8:5f:7a:17:eb:f9:f4:11:e4:c3:d3:3e:e3:48:
                    f1:dd:44:11:fe:a4:a5:a3:07:90:29:bf:d8:b6:49:
                    df:42:50:cd:91:0e:42:58:dc:22:ec:8a:ad:e3:6b:
                    be:4f:f6:f5:2f:19:98:24:7c:61:ab:22:df:26:0f:
                    95:81:a9:04:9a:f2:14:cc:e4:f7:4c:33:3d:ad:73:
                    c9:70:f4:22:b2:45:13:70:3b:a9:ed:22:0b:03:d3:
                    e5:08:17:4e:1d:98:66:ad:f8:cb:77:99:11:0f:35:
                    86:1b:45:36:e2:25:fd:40:1e:34:d3:f0:fe:1c:f1:
                    b4:57:f4:07:89:d4:c6:42:f7:c9:a3:70:ad:11:88:
                    0e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:49:5A:46:82:08:49:D5:12:E0:FC:A1:85:E8:10:70:3D:E3:03
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/756796CE8AB011EFBE6D8016C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:d2:e9:51:d7:2d:98:0d:c8:cd:a1:f7:9e:c6:a1:f4:34:
         7a:ae:ec:cb:a9:9c:48:4f:55:7a:b4:44:f4:8a:56:c1:93:9f:
         41:44:e6:dc:49:ef:9e:62:46:b6:b6:5e:8a:d1:6e:3a:a2:a7:
         61:f2:61:c7:62:ae:56:77:9d:13:16:4b:6a:30:50:dc:6b:a4:
         62:d1:b5:a5:fd:80:6a:2e:f5:94:e4:e1:52:f1:ac:61:13:ee:
         27:39:30:5b:4b:12:d5:e9:c4:33:9a:ad:74:1f:d8:74:6d:f1:
         40:d9:c7:72:80:84:b7:ac:e8:aa:2e:9b:6f:08:9c:b5:5e:92:
         f1:37:3d:c9:3c:4f:85:d4:a7:44:7c:75:d5:ed:e9:a0:a6:c8:
         33:bd:da:40:e2:3b:9f:44:66:d2:0f:a1:ae:ff:2e:fe:62:7e:
         dd:7e:48:d0:46:82:63:45:14:41:73:a7:ed:f7:b4:a8:bc:0b:
         2c:33:f3:5b:67:69:a2:2b:e4:bf:05:9f:b6:78:d5:5d:d6:fe:
         83:e0:30:70:78:4e:68:3a:28:d5:94:9f:57:af:0e:60:c5:16:
         7a:37:95:b6:fc:40:c4:cc:7b:04:5a:d2:ed:df:df:31:9d:5f:
         23:63:d5:4b:7e:07:af:28:60:da:99:fe:b8:a5:a2:28:78:ab:
         99:c0:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:31 2026 by rpki-client