Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E431748E587A11EF8ED1126AC4F9AE02.roa
File:                     E431748E587A11EF8ED1126AC4F9AE02.roa (raw, json)
Hash identifier:          7Buo3itV4rLmhAILqDTFx/HbjG10hW/gV5rGXcSnvN4=
Subject key identifier:   55:BA:F7:C7:E3:7C:1E:24:E6:15:35:5F:11:B8:51:E4:AE:C7:0C:3E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3158
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E431748E587A11EF8ED1126AC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:21:44 +0000
ROA not before:           Mon 06 Jul 2026 16:21:44 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151749
IP address blocks:        160.30.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12632 (0x3158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:21:44 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd618-bf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e8:1a:47:85:c5:04:a9:79:62:7c:74:bd:8c:
                    cd:76:06:f5:11:bd:4a:3d:21:fe:76:4e:4d:ba:54:
                    22:f2:ce:45:0a:5c:92:a9:1c:58:e1:d9:f2:aa:df:
                    a4:5e:9c:de:e4:31:87:67:0b:99:64:6a:f0:ad:bd:
                    11:66:76:68:02:88:ee:77:dd:44:9a:6d:a2:e9:56:
                    02:86:fe:74:90:05:fc:8d:26:30:21:07:f9:3b:fb:
                    30:20:05:60:e4:de:9b:e5:46:16:90:99:fa:6a:af:
                    51:6a:32:2b:70:f6:a0:f3:74:b9:22:b4:4b:3a:1b:
                    a1:46:fa:1f:b5:34:4f:e5:ed:60:e0:fc:be:a1:af:
                    a7:ba:ee:7c:17:31:ff:a1:77:0e:2b:0c:64:97:09:
                    17:ce:47:3a:d5:56:83:2e:85:77:6b:8c:ae:24:be:
                    9e:a7:60:31:ac:13:06:03:0e:8c:4e:4e:f4:f2:26:
                    df:33:84:8e:dd:d9:20:0d:52:8d:7c:34:83:ef:21:
                    d6:6a:c2:bd:9d:d3:98:96:de:42:cb:79:58:ce:88:
                    77:c0:d5:09:e2:4a:f2:2b:01:53:05:db:07:8c:6e:
                    77:e7:11:fc:8b:9f:7c:33:7b:10:ef:e7:ab:c4:66:
                    ea:dd:9a:a9:bc:53:5c:42:f6:5c:7e:ed:a5:f3:1c:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:BA:F7:C7:E3:7C:1E:24:E6:15:35:5F:11:B8:51:E4:AE:C7:0C:3E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/E431748E587A11EF8ED1126AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:f2:a3:50:c4:d2:d0:69:d7:c1:82:9f:eb:17:a9:48:41:6f:
         a9:62:64:3b:f7:0b:80:57:a3:90:3d:3f:19:0d:d5:26:0a:c3:
         50:38:6b:92:10:8c:23:ed:52:04:30:8b:77:bd:ca:03:eb:35:
         ec:1e:31:23:ae:a9:78:47:52:9e:61:9a:07:58:42:d3:02:42:
         4a:60:9a:f8:c6:e9:61:fb:cc:d2:d9:36:bd:15:22:78:5d:e0:
         6c:25:0a:5a:5f:59:38:3b:2c:fd:b7:27:18:e1:5b:97:93:03:
         81:c0:0d:4a:27:d2:1c:c2:08:d0:d1:44:0c:7b:f1:13:b1:90:
         db:6a:c7:f8:f9:01:0f:d7:9f:55:9a:d3:8e:5b:c8:55:08:41:
         e2:b8:66:b2:7f:4a:e1:9b:58:ff:e8:79:3d:c7:66:37:d9:cf:
         d3:50:b4:69:f8:8f:76:80:2a:09:be:ca:2b:65:29:76:c3:e9:
         1c:da:13:b1:27:4d:2e:ff:cd:29:c4:9d:70:68:1f:41:28:89:
         bc:ae:e8:c4:e4:d2:b9:e4:02:6d:48:89:87:db:d4:4f:65:d2:
         0f:26:31:20:f5:f8:f7:ed:11:76:9f:b3:a8:d8:dc:90:3c:ea:
         c4:bc:ed:8a:82:4a:8d:cd:ab:70:ce:d9:b4:1a:0b:31:ab:55:
         c1:4b:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:52:12 2026 by rpki-client