Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C81855929C3B11EFA8E7A115C4F9AE02.roa
File:                     C81855929C3B11EFA8E7A115C4F9AE02.roa (raw, json)
Hash identifier:          dnB7UZ7f1tXDWylozGtWC5S29ui6RbT9WOF8mSnoy4Y=
Subject key identifier:   F0:E8:1D:E4:A0:07:FB:73:48:C3:D2:71:15:58:30:62:BA:91:91:C5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2EDF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C81855929C3B11EFA8E7A115C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:21:28 +0000
ROA not before:           Sun 31 May 2026 16:21:28 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141846
IP address blocks:        160.191.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11999 (0x2edf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:21:28 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6007-4a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:42:d8:dd:69:ae:e2:fe:24:b7:ac:69:6b:c4:
                    7f:a4:4e:88:6d:41:0f:19:36:a7:35:6b:d2:f7:98:
                    03:c8:c6:85:27:41:f0:4e:15:fa:18:21:ea:4e:82:
                    b4:97:03:47:0d:82:b2:4e:f7:95:96:c9:ff:79:27:
                    7c:4f:d3:da:ea:eb:8a:30:4b:8f:7d:20:af:93:e4:
                    c0:4f:75:17:5c:74:1b:65:5f:b1:9d:26:0d:a5:d8:
                    e1:a5:a4:bc:b8:2a:1c:a5:74:72:cc:ea:52:cf:35:
                    60:bf:e9:cc:e7:27:98:69:d1:b4:bd:7a:7b:54:8c:
                    e0:e0:c4:6c:75:ba:48:c5:37:93:ad:7d:1c:f2:8f:
                    77:4f:eb:c3:ba:c8:c4:c6:03:b9:11:34:9a:99:96:
                    ab:71:73:da:00:bc:26:95:3e:5a:d7:52:0c:51:6e:
                    52:d0:32:07:59:14:71:4e:65:b5:69:f8:a8:56:96:
                    ff:fd:78:5e:c9:14:24:5c:f0:ec:e1:89:85:59:be:
                    f4:d4:15:d6:4f:b7:4e:11:37:3f:2a:d3:f2:53:69:
                    72:38:f9:97:13:98:1c:0f:5b:ea:f7:1b:19:7c:1c:
                    b7:38:72:30:fd:58:4a:95:66:bf:2d:9c:73:42:72:
                    f5:3b:f0:d6:98:35:50:2f:3e:3d:48:7a:f0:bf:90:
                    3b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E8:1D:E4:A0:07:FB:73:48:C3:D2:71:15:58:30:62:BA:91:91:C5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C81855929C3B11EFA8E7A115C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:01:7a:26:57:7a:c8:b9:5e:c6:f5:bd:85:94:a8:25:37:1f:
         4d:6d:1e:c7:71:15:f6:0a:91:39:80:0a:fd:50:ea:f3:ce:23:
         ec:0c:a5:1b:02:81:66:75:89:68:5a:35:4e:9f:d3:0f:cc:bc:
         a2:78:db:3c:d0:3f:d9:79:0b:b9:98:d2:a5:1e:c8:54:09:26:
         57:0c:7f:23:59:89:8c:62:02:b8:9b:14:7e:9f:d6:5c:f9:30:
         be:09:e8:06:55:e6:a0:da:71:5c:13:15:6b:b6:95:8a:53:10:
         8f:a5:01:75:a9:5e:2a:27:79:f0:39:d6:55:e2:e0:7d:fa:11:
         83:65:cb:18:e2:a5:06:53:e6:a9:0c:0a:62:b7:05:f0:42:2c:
         9b:a7:e2:32:96:c7:52:19:b7:08:e3:c7:a7:28:96:fc:2b:5d:
         13:f0:a4:8f:35:e9:f8:e6:bd:f3:6e:cf:3b:e3:b5:56:f5:c0:
         f5:3e:ec:19:63:46:e3:4c:10:99:1f:6b:b1:67:ed:8b:fb:96:
         1c:36:c5:1b:57:e5:52:96:fe:59:58:e2:a3:3a:a7:bc:36:59:
         08:e6:1f:35:ec:56:33:f9:6e:18:18:40:9e:99:9b:92:8a:51:
         b3:9d:57:6d:e0:6a:53:bf:1d:45:1b:40:15:af:0a:92:88:a6:
         ff:29:8f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:43:16 2026 by rpki-client