Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
File:                     F05801E2872711F0913B9D7CC4F9AE02.roa (raw, json)
Hash identifier:          ZgBoG8t2ZDU2Oo8gZt+wqtL8vdRNSVgfAXnMEWKoxo0=
Subject key identifier:   1B:AF:21:1C:EE:2C:2F:60:84:D8:40:37:19:0A:80:D5:2D:0E:63:2C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       309A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:15:25 +0000
ROA not before:           Mon 06 Jul 2026 16:15:25 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     133311
IP address blocks:        160.22.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12442 (0x309a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:15:25 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd49d-1a87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:9f:4c:a7:69:73:6e:85:c5:79:ca:b5:11:11:
                    76:7e:1e:76:11:42:1d:2d:9a:38:83:c1:c8:e4:c4:
                    0d:b9:2b:3d:4d:47:4a:d9:d9:ff:f1:8d:ac:59:15:
                    b3:e6:43:e9:fa:14:87:db:eb:18:d4:0a:38:2e:99:
                    c7:b5:e9:52:f0:db:d7:42:54:ae:e3:56:f8:7a:63:
                    33:e3:69:d6:10:e7:7a:b7:74:61:3a:fd:f5:99:af:
                    5e:d4:05:c0:b9:26:8b:a2:4c:cc:19:2c:37:af:75:
                    18:65:f7:be:6a:59:94:95:88:fc:7c:56:10:a3:d4:
                    22:0f:61:d9:b1:26:f7:2e:b6:c4:48:41:28:79:b3:
                    af:70:38:37:e9:8d:1c:8e:cd:da:52:a2:81:d0:9d:
                    4f:7d:1d:ee:a6:5a:25:40:d1:bc:93:ec:6c:cb:88:
                    3d:ca:07:d6:e7:bb:36:2c:77:33:30:1c:a4:10:49:
                    3a:23:84:a0:ab:cd:fe:22:4c:e5:cf:f0:d2:3b:9b:
                    1b:ad:c0:6e:f1:9c:83:c3:62:29:a9:ae:7a:3c:a3:
                    bf:c1:9e:e6:fa:b0:be:23:66:a8:e7:10:22:67:b2:
                    12:84:4e:ee:ff:93:3f:47:0a:de:07:97:27:a3:96:
                    fb:99:31:31:9c:48:f3:cf:e0:30:c2:6e:65:60:c2:
                    e3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AF:21:1C:EE:2C:2F:60:84:D8:40:37:19:0A:80:D5:2D:0E:63:2C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F05801E2872711F0913B9D7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:73:ce:0c:56:a3:e6:9d:81:4d:ef:0e:84:fe:ee:82:98:
         9f:d4:f6:68:b3:5e:ee:b8:87:ad:57:ae:4b:42:86:c6:b5:18:
         a3:68:11:29:71:0c:79:79:f2:fd:ba:ba:70:a0:a5:6a:3c:cb:
         a1:ce:dd:eb:8c:c3:3d:64:42:48:af:72:50:31:03:0a:0a:9b:
         01:f5:14:65:d4:1a:a3:b6:a9:17:84:4f:aa:3d:f2:63:cc:0d:
         a5:f2:3a:22:ee:da:2d:21:b3:3c:04:8c:46:ac:01:f3:1b:59:
         ca:24:85:5a:80:05:28:29:25:45:97:1f:3f:d8:ec:74:74:61:
         3c:a8:f8:7a:ed:a7:f4:fe:26:3b:ae:51:0a:06:f4:f1:8e:5a:
         4c:7e:09:6a:a0:eb:c8:11:7a:bc:a8:4b:72:68:d9:b5:94:87:
         34:11:ca:11:b4:fc:e5:20:29:0b:57:1b:ff:43:50:cc:ed:c9:
         bf:1b:e8:ef:84:16:f0:1c:0b:b3:fa:ea:f8:5b:55:df:ae:63:
         64:4b:be:35:f7:15:50:d8:aa:b6:47:0a:59:fa:a2:ae:8a:95:
         15:e2:ab:63:1e:ff:14:c4:80:fc:4d:65:c0:83:5a:1f:21:98:
         f7:e4:7c:9b:ab:d2:5b:c4:7a:1b:d9:82:a8:05:d2:9f:bf:56:
         5b:b8:d5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:29 2026 by rpki-client