Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D37BCAFCABBF11EF991C833DC4F9AE02.roa
File:                     D37BCAFCABBF11EF991C833DC4F9AE02.roa (raw, json)
Hash identifier:          IusfiaRimOBFhOKZ/XO7GEbyL1GlteuuYysbKFege68=
Subject key identifier:   7C:21:7D:D3:48:CE:FE:89:AB:F6:72:8D:68:48:D6:B0:F2:5B:7D:8E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       30B9
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D37BCAFCABBF11EF991C833DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:16:28 +0000
ROA not before:           Mon 06 Jul 2026 16:16:28 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135269
IP address blocks:        160.250.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12473 (0x30b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:16:28 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd4dc-d66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:7f:4e:75:6c:b0:05:06:f6:ad:b1:74:7f:
                    91:a9:d6:82:70:31:bf:ac:7c:86:91:ef:3a:0a:fa:
                    f5:43:03:98:fc:f9:64:75:83:8f:27:cd:71:76:d2:
                    f4:7e:f7:4b:29:76:98:65:ff:1d:5c:06:5e:08:0a:
                    71:c7:f7:89:9d:d0:be:98:de:d9:2e:3b:fa:7c:7a:
                    58:88:6c:36:42:35:eb:da:1d:b4:c0:fb:5e:2f:ce:
                    b4:f2:1c:56:6f:20:8e:bf:a2:a7:c0:77:dd:d8:9d:
                    94:4a:4b:92:7b:c9:7b:bb:f6:6a:40:9f:1c:2a:e9:
                    44:38:fd:16:95:ea:f5:8a:ff:91:2b:b1:94:c6:3f:
                    68:9d:fb:14:00:46:bb:e0:25:6f:9f:dc:5a:32:30:
                    2a:4c:b6:1b:ae:db:8c:44:de:cf:f6:27:b2:97:b0:
                    c0:6c:26:05:7b:c4:0c:ba:c7:44:3e:5c:09:06:1c:
                    2c:b6:a1:39:d5:a8:62:81:22:1e:0c:e1:77:18:33:
                    67:52:90:0c:03:59:76:08:b3:aa:55:83:01:c1:a5:
                    42:f0:c9:8a:9c:64:fe:49:fb:26:96:2c:0d:58:07:
                    35:90:87:4b:51:3f:9a:07:cb:a4:e0:a3:07:1e:92:
                    07:0e:9f:aa:d6:f6:98:1b:c9:3f:2c:00:9a:fb:49:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:21:7D:D3:48:CE:FE:89:AB:F6:72:8D:68:48:D6:B0:F2:5B:7D:8E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D37BCAFCABBF11EF991C833DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:d1:11:4d:57:25:21:78:af:a4:d2:b3:22:4d:30:dc:d6:a0:
         06:da:e4:bc:e0:af:bc:3d:17:0e:42:c6:33:36:6e:a8:c8:0f:
         08:86:26:2e:f9:29:8b:60:42:e7:6f:c5:1f:85:8d:fd:41:fd:
         b2:6f:f8:65:52:f5:bf:11:14:25:35:cb:d7:00:36:20:33:48:
         d9:34:df:77:be:fe:29:f9:60:47:69:69:f9:34:8e:52:dc:6d:
         67:1e:07:99:b0:43:2e:50:3a:e6:ec:53:a4:88:e2:4c:e6:38:
         0c:e3:1c:cd:ee:77:59:18:b1:10:44:a2:d0:51:7b:84:2a:98:
         15:6f:62:d0:10:60:6a:ea:0b:27:8c:46:0a:95:e6:88:55:eb:
         aa:69:17:61:f3:b9:d0:ae:29:a8:08:24:e5:9e:22:3f:be:7b:
         16:16:b0:9d:db:6f:99:a4:41:c9:1e:f5:4d:38:2f:37:3a:e6:
         c1:a3:c1:85:8a:01:6d:c2:c2:ff:16:f9:d4:14:ea:00:eb:50:
         71:11:95:87:0c:92:06:55:51:ef:90:ec:dc:c9:c6:76:94:17:
         43:90:0a:0c:14:02:97:2c:74:82:dc:f8:a4:1d:bd:5f:fe:af:
         c2:e7:c6:2a:27:1a:82:ce:88:09:09:b1:df:c7:93:09:c9:79:
         fe:85:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:50:43 2026 by rpki-client