Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
File:                     C450720E223911EF9B58F681C4F9AE02.roa (raw, json)
Hash identifier:          aF6alA/ivNp38MCltvjcKPuAx69aHQtKsGoj0vCO11c=
Subject key identifier:   A5:81:1D:3B:B7:F9:A5:4B:A6:00:32:B3:62:22:72:D3:62:E2:64:96
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2E9B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:19:17 +0000
ROA not before:           Sun 31 May 2026 16:19:17 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     135745
IP address blocks:        160.20.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11931 (0x2e9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:19:17 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c5f85-2921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:71:76:fd:26:41:17:1c:f0:be:70:fd:d3:17:
                    3c:18:d0:61:e0:cd:f8:3a:76:c0:23:80:86:86:75:
                    3e:4b:88:1d:86:07:4b:62:c7:2b:85:6a:fb:4a:e2:
                    e9:a6:70:35:13:00:25:36:cf:9e:29:49:a6:b8:e8:
                    b4:db:65:a8:a6:49:ae:d3:34:7a:75:79:d3:03:9c:
                    96:08:de:b5:34:25:60:be:ec:6f:cd:9e:65:c9:86:
                    76:0e:5a:bc:43:05:2e:17:b8:29:83:a7:3b:ae:3a:
                    2b:71:fa:64:36:30:f8:13:3b:15:23:2c:2f:90:7e:
                    13:fe:6c:fc:2a:de:ce:89:d4:55:d9:91:1a:00:64:
                    78:8f:d1:23:c5:1b:86:2c:29:f0:5b:a6:60:bb:ce:
                    1c:d5:52:1b:c6:98:2b:f2:d4:9b:a4:99:f7:64:53:
                    ea:3f:63:8f:d1:56:a6:3b:39:b3:de:eb:88:fb:4c:
                    f6:da:b3:8c:84:a1:dd:e1:68:d0:b3:cd:eb:53:12:
                    bf:5a:4c:9c:23:90:ca:c7:c0:78:f5:7d:11:b3:72:
                    c4:bd:38:8f:2a:84:ee:e9:a7:18:e5:36:e0:59:81:
                    0b:c2:5b:b0:1e:2c:c8:89:13:90:ab:15:f2:09:27:
                    4b:11:83:74:cc:e8:a0:79:76:9e:91:66:15:1e:ae:
                    00:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:81:1D:3B:B7:F9:A5:4B:A6:00:32:B3:62:22:72:D3:62:E2:64:96
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C450720E223911EF9B58F681C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a1:b7:72:c1:1a:de:83:6a:b7:48:3f:a2:74:8d:e2:16:88:
         16:a9:81:6a:19:73:55:6d:12:fa:d1:f1:91:d4:08:f2:ce:15:
         86:6b:e9:0e:d4:93:81:77:5a:32:03:86:19:04:7f:45:a5:f4:
         15:ba:35:11:92:6b:99:e4:fb:cb:7d:cf:27:35:4b:3a:df:89:
         88:32:c0:8d:b4:75:25:f9:24:39:a9:7e:8c:a7:b6:86:87:03:
         88:37:a6:57:9e:04:7a:2e:e0:9b:5f:c8:e8:f9:f3:cd:52:c3:
         ec:da:3e:0f:76:52:b4:fd:ce:5a:69:9a:e2:9f:92:68:4d:ad:
         39:16:08:e7:b7:01:d1:94:4c:2d:29:86:1c:e7:cf:88:0e:c0:
         78:f8:02:7e:10:f5:88:43:e4:da:83:d7:7d:3d:bd:14:0e:5e:
         d1:a1:d1:db:01:67:1b:e9:9f:ef:d6:1a:71:8d:e5:99:fc:4a:
         52:56:42:cf:f2:73:ef:48:12:89:fe:4d:02:36:33:ed:ca:b5:
         d6:df:06:22:17:1e:43:52:53:5c:2e:fc:b0:25:1c:61:05:97:
         3d:be:25:d3:61:d3:6d:13:25:bb:db:0a:33:4b:e0:5f:ec:c1:
         1f:bc:18:33:dc:e5:7b:4a:5c:ef:45:bb:a9:df:cb:f5:2e:d5:
         44:b6:6b:56
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNTMxMTYxOTE3WhcNMjYxMDAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFjNWY4NS0yOTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtXF2/SZBFxzwvnD90xc8GNBh4M34OnbAI4CGhnU+S4gdhgdLYscrhWr7SuLp
pnA1EwAlNs+eKUmmuOi022Wopkmu0zR6dXnTA5yWCN61NCVgvuxvzZ5lyYZ2Dlq8
QwUuF7gpg6c7rjorcfpkNjD4EzsVIywvkH4T/mz8Kt7OidRV2ZEaAGR4j9EjxRuG
LCnwW6Zgu84c1VIbxpgr8tSbpJn3ZFPqP2OP0VamOzmz3uuI+0z22rOMhKHd4WjQ
s83rUxK/WkycI5DKx8B49X0Rs3LEvTiPKoTu6acY5TbgWYELwluwHizIiROQqxXy
CSdLEYN0zOigeXaekWYVHq4AGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKWBHTu3
+aVLpgAys2IictNi4mSWMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzQ1MDcyMEUy
MjM5MTFFRjlCNThGNjgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAoBTkMA0GCSqGSIb3DQEBCwUAA4IBAQAjobdywRreg2q3SD+idI3i
FogWqYFqGXNVbRL60fGR1AjyzhWGa+kO1JOBd1oyA4YZBH9FpfQVujURkmuZ5PvL
fc8nNUs634mIMsCNtHUl+SQ5qX6Mp7aGhwOIN6ZXngR6LuCbX8jo+fPNUsPs2j4P
dlK0/c5aaZrin5JoTa05FgjntwHRlEwtKYYc58+IDsB4+AJ+EPWIQ+Tag9d9Pb0U
Dl7RodHbAWcb6Z/v1hpxjeWZ/EpSVkLP8nPvSBKJ/k0CNjPtyrXW3wYiFx5DUlNc
LvywJRxhBZc9viXTYdNtEyW72wozS+Bf7MEfvBgz3OV7SlzvRbup38v1LtVEtmtW
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:40 2026 by rpki-client