Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
File:                     93E4A4E82E1C11EFB674EB7FC4F9AE02.roa (raw, json)
Hash identifier:          rzXz9QWZ8CiwywUgz3/CLb4a+QQDdeSG6MVMuOpK8bA=
Subject key identifier:   87:16:E6:FF:D1:DD:BE:11:0D:BC:F1:8D:A0:D4:42:1B:46:B4:DB:63
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30E5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:17:57 +0000
ROA not before:           Mon 06 Jul 2026 16:17:57 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138718
IP address blocks:        160.22.132.0/23 maxlen: 24
                          160.187.182.0/23 maxlen: 24
                          162.4.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12517 (0x30e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:17:57 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd535-201a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:d7:e8:56:2c:8a:c9:44:99:1a:5f:ba:cc:
                    67:89:c0:43:ab:cf:ae:b2:09:6a:c4:fe:56:7e:11:
                    51:c1:b0:12:be:9e:d4:bf:a2:32:bd:bc:4b:be:a6:
                    82:c1:1d:f3:4f:fb:16:b9:bd:e4:58:6b:3d:04:9f:
                    dc:60:8f:14:61:19:02:48:a9:70:32:b5:68:69:14:
                    53:aa:04:38:6b:03:8c:2e:04:da:63:a3:19:04:e2:
                    ff:da:dd:96:b6:1a:9d:af:0d:7e:98:96:91:29:8d:
                    e0:ed:b9:b6:c7:35:93:4a:6c:db:83:e7:c1:47:5e:
                    26:ac:fe:61:88:ba:e4:f1:bb:d8:ce:c8:e3:4d:24:
                    33:d2:b3:28:c5:9a:3f:01:f9:65:b6:40:cb:5f:d7:
                    7b:7d:62:20:18:5f:8c:02:81:36:e1:7c:1b:d6:3d:
                    a6:22:91:c7:c2:54:45:83:7a:62:b7:4a:05:db:fd:
                    00:72:4d:e9:b1:aa:d4:91:14:15:10:39:60:20:aa:
                    07:71:14:0e:54:d5:27:7f:7a:02:34:bc:f5:b7:76:
                    4c:21:06:72:c0:0a:d0:23:fa:e0:18:cf:2d:31:68:
                    0e:4f:3a:8e:07:b4:74:18:0e:ca:ed:e5:22:18:ff:
                    17:29:1e:b0:aa:4a:ba:4a:3c:5b:02:61:f3:5e:c4:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:16:E6:FF:D1:DD:BE:11:0D:BC:F1:8D:A0:D4:42:1B:46:B4:DB:63
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.132.0/23
                  160.187.182.0/23
                  162.4.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:bd:57:2d:c4:85:27:55:85:ec:8f:ac:f8:e8:d2:83:88:b4:
         5e:3b:48:6e:1b:8f:ea:3b:e4:78:b2:1f:40:bb:29:02:dc:d4:
         70:63:59:0f:bf:20:31:f9:b3:3f:07:7f:18:31:86:51:2e:fc:
         6e:f9:f0:1f:c5:bb:9f:bc:1c:4e:6a:fa:72:ec:7a:d5:ec:b9:
         76:ae:85:43:51:a7:9f:5a:31:fe:06:7c:6e:a1:ef:9c:af:18:
         7b:fe:37:ab:18:fa:49:2d:59:af:d7:56:52:bc:b6:15:0f:d1:
         10:d6:2a:0e:fe:75:89:58:6c:1b:e8:eb:ea:60:c9:65:46:c3:
         a5:ce:96:30:81:33:ce:1b:04:2b:d6:4c:3b:69:84:69:93:05:
         60:2c:d8:ca:ba:3b:6f:83:f3:f6:f7:b6:3b:85:97:a5:f2:19:
         b9:f3:1d:68:f5:1c:30:1e:b7:95:e1:ae:84:8a:64:fd:f9:3a:
         87:94:be:e5:95:e6:6c:9e:d3:a5:d1:23:e2:93:dd:40:65:d0:
         92:7c:68:8b:5c:dc:02:54:f1:ab:c0:69:4a:ff:89:dd:11:73:
         8b:95:0d:55:82:24:10:4d:fa:ef:61:f6:81:29:40:35:0f:67:
         52:51:da:01:4e:6f:26:6b:f4:ab:58:29:a3:51:27:6d:e3:8e:
         e5:97:4c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:29 2026 by rpki-client