Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D315CCDCB08511EFB426613FC4F9AE02.roa
File:                     D315CCDCB08511EFB426613FC4F9AE02.roa (raw, json)
Hash identifier:          zJZAATTFqsFkoXxDlco0FEgAyMqh1dlfKLFDxrulWtg=
Subject key identifier:   DE:27:B9:B6:8F:AD:EB:61:C6:96:18:D2:56:B2:14:21:02:91:E6:BE
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2FA1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D315CCDCB08511EFB426613FC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:36 +0000
ROA not before:           Sun 31 May 2026 16:27:36 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153272
IP address blocks:        160.20.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12193 (0x2fa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:36 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6178-6997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:3b:88:7c:0c:eb:88:0e:9a:e9:2f:57:86:
                    ba:bb:68:42:07:ae:6b:9c:42:c8:18:cc:b4:47:d5:
                    af:c2:07:84:a3:a9:40:f6:0c:24:8c:11:28:60:47:
                    2d:ce:9e:f2:61:7d:54:98:5a:10:53:87:fd:9e:8a:
                    fc:e9:22:68:f7:9e:ca:4a:55:25:49:2c:1f:1d:34:
                    9f:db:0e:ed:3a:f5:75:23:a4:3d:f1:98:87:d7:19:
                    6b:bc:a0:41:60:35:92:c2:01:fc:57:66:e1:23:32:
                    d1:14:2b:6e:68:62:b7:2c:96:98:ae:1d:87:15:71:
                    b5:25:94:9e:c6:9e:23:94:a1:d3:01:2d:f4:e0:c7:
                    d2:4e:20:0b:6f:18:ec:57:4d:b1:c6:9b:e2:09:ee:
                    49:0a:f4:08:90:85:67:e3:9c:0d:3c:2d:37:cc:09:
                    8a:4f:46:66:c8:ef:76:ad:ef:90:ec:d3:97:c8:03:
                    de:9a:f6:8c:d1:f3:66:52:8b:1a:a8:42:cf:01:ab:
                    18:4b:da:06:a9:b9:6a:64:6a:24:93:d4:26:0d:12:
                    24:ec:b3:75:e3:ef:b1:31:ef:23:4e:0b:5c:17:aa:
                    92:76:f4:de:27:a0:0e:eb:29:eb:69:aa:6e:48:d5:
                    5a:a2:ae:c8:c7:83:56:b8:4a:55:11:b9:a3:e4:71:
                    e5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:27:B9:B6:8F:AD:EB:61:C6:96:18:D2:56:B2:14:21:02:91:E6:BE
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D315CCDCB08511EFB426613FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:db:94:a1:c4:aa:cc:ce:e0:fd:7a:5d:5a:3b:6a:62:f5:f4:
         ea:e0:70:28:99:96:7a:7e:f8:ef:ac:45:6e:e0:ad:09:d0:dd:
         a9:80:d9:58:76:71:c9:80:20:af:94:6b:e0:e8:ee:43:7f:2e:
         0f:e6:bb:10:92:8d:9d:fa:28:53:7e:1e:a4:ad:11:ff:51:36:
         8c:7f:31:e8:54:d1:4d:66:0c:80:9f:d7:b5:e9:79:88:23:a0:
         34:0b:1b:b1:96:44:6c:67:dd:5e:74:0a:9d:23:1c:06:5e:52:
         17:5d:2c:c8:f8:bc:db:bf:2f:19:4f:1c:51:41:85:94:f2:ad:
         f0:21:aa:5f:9c:c2:cc:85:dc:16:7c:47:0c:bc:e7:7a:73:8d:
         b7:0e:b6:48:07:a6:11:6c:31:05:71:a0:4b:85:9a:72:6d:de:
         32:77:98:d4:15:5d:9f:51:51:84:58:d1:38:f8:d9:03:4d:33:
         53:c9:b0:75:7d:c3:4d:2c:66:bd:89:2f:35:a3:b1:09:96:e3:
         75:1a:22:30:85:21:20:69:72:d4:21:4c:7b:b1:e5:ad:7e:63:
         ce:23:80:ed:03:6b:c0:21:7a:22:24:2d:ab:3d:59:b7:1f:0c:
         14:ad:d4:d2:e6:db:c7:27:63:9d:7d:58:92:83:14:49:fb:36:
         f4:65:40:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:08 2026 by rpki-client