Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
File:                     C450720E223911EF9B58F681C4F9AE02.roa (raw, json)
Hash identifier:          qwEo+N6Yzk8vvTDAT5XqhcMdhCumH+3+m1trxtAv2qk=
Subject key identifier:   97:B2:60:BA:5B:8A:4E:2C:71:E2:4E:94:F2:A4:BB:C5:B4:64:9A:D5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30C0
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:43 +0000
ROA not before:           Mon 06 Jul 2026 16:16:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135745
IP address blocks:        160.20.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12480 (0x30c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4eb-397e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e6:90:55:1f:f4:5a:b5:07:6b:18:75:48:fb:
                    5b:3e:31:c2:35:3e:3f:33:fd:fd:bc:46:25:ad:fb:
                    4b:4f:78:85:46:5e:3d:1b:24:75:3e:9a:04:f2:a9:
                    7c:9f:85:22:1a:42:63:48:86:bf:b0:ee:06:a1:de:
                    31:19:41:70:3e:e8:9d:91:75:79:d7:0b:91:7f:55:
                    6f:ce:71:90:9e:34:2d:39:94:c1:bb:b6:f0:c8:a8:
                    b8:84:f2:48:4c:06:11:d4:8c:b3:ba:d0:81:2e:8a:
                    c8:b7:3c:36:02:f4:b5:5b:a7:b3:29:c9:96:da:28:
                    48:d9:aa:ea:08:1b:7c:1f:b5:3c:26:17:98:a1:5d:
                    49:c3:b5:8c:cc:e3:b1:e1:9c:5d:8a:44:90:f0:90:
                    31:f8:09:99:76:aa:d5:ba:69:e4:29:a1:12:c7:62:
                    8f:49:81:78:3c:4a:44:b7:27:85:e9:49:a2:24:37:
                    3a:7c:6b:01:82:33:4f:84:2b:18:f6:11:e8:d3:49:
                    e4:59:7c:5c:db:d3:04:7a:26:1f:79:c0:e6:84:14:
                    5f:9c:39:37:60:80:5f:40:0e:3f:70:37:39:cb:b4:
                    15:f3:26:51:94:20:b3:bf:96:e5:ee:ad:ad:c0:ed:
                    4a:42:2b:f9:f0:ea:5d:a7:f1:aa:bb:4a:55:27:56:
                    98:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B2:60:BA:5B:8A:4E:2C:71:E2:4E:94:F2:A4:BB:C5:B4:64:9A:D5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:c3:01:1f:39:51:92:a1:11:a0:b6:60:37:eb:1e:07:22:
         35:05:3d:0a:47:82:0a:0d:50:8c:bc:74:5f:12:90:98:3e:df:
         80:29:26:4c:0b:41:71:0c:c2:a6:9f:b0:07:5e:f6:69:67:a9:
         8f:4a:a8:8b:5a:4d:98:92:da:e7:df:38:b2:e5:31:98:7d:5b:
         25:a4:20:93:c4:a9:ca:63:c5:a8:c6:ac:bc:49:2f:5b:10:b7:
         a4:8c:d0:68:13:6d:6f:f0:5c:fb:01:ed:38:63:e7:59:59:9b:
         ba:27:37:6f:2d:55:db:b3:75:a3:6c:15:1e:87:eb:61:4a:a0:
         b9:04:87:82:80:5b:51:22:93:7c:8b:7e:96:75:c7:1a:42:6b:
         c7:1d:3d:27:64:a2:59:63:3b:65:9e:95:6f:f0:61:3c:a6:8e:
         e7:9b:ac:1f:2a:9b:63:07:46:0c:28:d5:3a:50:75:5c:54:b6:
         fc:98:7a:ef:db:3c:19:2b:62:b0:50:2a:86:d0:5f:66:44:03:
         86:45:a8:64:1c:c0:82:ac:d7:ab:03:50:96:1d:f7:5e:f8:29:
         de:b2:ae:8a:85:38:f9:00:61:de:c2:84:e8:e5:eb:b0:90:03:
         0e:ae:06:8e:df:cd:df:1e:22:37:d4:7d:09:77:44:3a:0a:49:
         9d:c5:3e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:03 2026 by rpki-client