Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
File:                     BF492418847C11EFBD36080BC4F9AE02.roa (raw, json)
Hash identifier:          qAm3gZWVa1aiMBT/qf3c+qj9DkxCFOkqVt3IuxK5bk8=
Subject key identifier:   CA:FB:CE:F7:98:5B:B3:C9:2F:58:F9:49:AE:B1:71:CE:A4:51:A7:B2
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31AE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:24:35 +0000
ROA not before:           Mon 06 Jul 2026 16:24:35 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153227
IP address blocks:        160.187.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12718 (0x31ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:24:35 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6c3-1ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:23:a3:1c:cf:4a:3c:55:bf:3f:97:93:b2:
                    7d:ac:e7:91:b4:d7:c6:1b:ed:c4:71:8d:93:06:42:
                    e6:fe:c3:c3:5b:09:0e:4a:9f:01:06:90:b9:50:fb:
                    46:84:f1:b4:34:6f:15:cf:91:f9:6f:53:49:f1:b2:
                    5f:5a:77:ff:59:65:4d:05:e6:62:40:f5:cb:09:69:
                    87:f1:41:31:2c:c3:62:af:7f:f8:fb:1d:dd:cd:4c:
                    9e:87:f4:ee:c5:9b:7e:f3:05:52:45:3c:5e:9a:23:
                    b1:ca:02:97:94:cb:f8:ba:1a:20:0c:0f:67:6e:27:
                    e9:27:01:b1:55:26:7d:cb:c6:bf:13:b6:17:60:3a:
                    ef:51:78:2a:2b:91:ce:bf:ed:42:2a:d0:50:1c:0c:
                    0c:97:cb:21:f8:ce:6f:21:f7:13:f9:1c:05:4b:80:
                    01:0f:0c:2d:81:82:7a:3b:c7:44:5c:15:9e:8b:b5:
                    8c:6f:47:73:21:95:db:40:de:f0:b8:42:93:fb:6a:
                    9e:21:3f:56:ca:55:0d:55:c6:a2:e2:6a:9b:a7:d9:
                    10:72:08:29:5f:b2:7f:d0:c9:59:cc:d6:0a:5e:7c:
                    8a:c9:e6:80:5d:45:22:96:86:f0:66:e7:f8:49:25:
                    b5:7f:2a:b6:f4:42:52:61:cc:b0:7b:ef:1a:0e:fa:
                    63:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FB:CE:F7:98:5B:B3:C9:2F:58:F9:49:AE:B1:71:CE:A4:51:A7:B2
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/BF492418847C11EFBD36080BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:1c:37:e5:76:17:bf:24:51:c4:f7:9d:32:82:68:d5:ef:5a:
         57:2a:65:91:99:87:0f:a5:50:0a:f1:61:c7:00:8c:16:32:0e:
         f2:13:ed:9b:62:28:3a:a5:88:0c:4c:dd:d2:71:cb:52:ed:8d:
         fb:e9:21:c4:5e:13:96:c8:45:d0:b6:b7:cf:94:7d:d9:05:b8:
         c7:02:5b:4e:d4:53:59:82:e1:b5:35:5f:98:0e:91:a8:62:1f:
         3c:ce:55:df:49:90:95:c9:3d:e6:c7:a3:c2:89:86:8d:dc:77:
         eb:da:ee:38:f4:44:de:31:7c:a2:29:fd:6a:d1:7f:cb:40:80:
         ce:71:45:6c:c5:05:d8:9a:9a:1d:7f:a5:29:77:fd:a9:4d:91:
         ea:f6:85:33:56:73:c7:bc:c6:74:d2:52:00:a9:5f:2f:fa:85:
         20:9b:a2:c3:1d:34:39:82:98:cc:df:47:ab:f4:03:8c:d7:b5:
         3d:14:50:06:e8:43:c7:ef:e5:ab:f4:55:c2:5f:e7:6b:01:f1:
         e7:4a:2f:66:49:d2:9d:17:df:be:70:97:4b:05:ae:17:e2:3e:
         41:d9:b8:b1:af:91:60:90:90:57:e6:f9:50:15:ec:8a:f7:c7:
         af:60:5a:bc:93:b1:34:0c:d5:a7:46:f7:7a:4e:53:da:d0:16:
         f5:22:3c:51
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNDM1WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDZjMy0xZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwAQjoxzPSjxVvz+Xk7J9rOeRtNfGG+3EcY2TBkLm/sPDWwkOSp8BBpC5UPtG
hPG0NG8Vz5H5b1NJ8bJfWnf/WWVNBeZiQPXLCWmH8UExLMNir3/4+x3dzUyeh/Tu
xZt+8wVSRTxemiOxygKXlMv4uhogDA9nbifpJwGxVSZ9y8a/E7YXYDrvUXgqK5HO
v+1CKtBQHAwMl8sh+M5vIfcT+RwFS4ABDwwtgYJ6O8dEXBWei7WMb0dzIZXbQN7w
uEKT+2qeIT9WylUNVcai4mqbp9kQcggpX7J/0MlZzNYKXnyKyeaAXUUilobwZuf4
SSW1fyq29EJSYcywe+8aDvpjJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMr7zveY
W7PJL1j5Sa6xcc6kUaeyMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQkY0OTI0MTg4
NDdDMTFFRkJEMzYwODBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoLuoMA0GCSqGSIb3DQEBCwUAA4IBAQBXHDfldhe/JFHE950ygmjV
71pXKmWRmYcPpVAK8WHHAIwWMg7yE+2bYig6pYgMTN3ScctS7Y376SHEXhOWyEXQ
trfPlH3ZBbjHAltO1FNZguG1NV+YDpGoYh88zlXfSZCVyT3mx6PCiYaN3Hfr2u44
9ETeMXyiKf1q0X/LQIDOcUVsxQXYmpodf6Upd/2pTZHq9oUzVnPHvMZ00lIAqV8v
+oUgm6LDHTQ5gpjM30er9AOM17U9FFAG6EPH7+Wr9FXCX+drAfHnSi9mSdKdF9++
cJdLBa4X4j5B2bixr5FgkJBX5vlQFeyK98evYFq8k7E0DNWnRvd6TlPa0Bb1IjxR
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:51 2026 by rpki-client