Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F1476744719511EF9C2AB81AC4F9AE02.roa
File:                     F1476744719511EF9C2AB81AC4F9AE02.roa (raw, json)
Hash identifier:          NGTxiiYW1rH4rHuu4JR5i9VVflIO2NiOHnXMuIiA2xY=
Subject key identifier:   25:5B:FE:BA:38:96:06:8D:D2:A2:10:67:01:6D:A5:35:65:EE:4C:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F7A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F1476744719511EF9C2AB81AC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:26:23 +0000
ROA not before:           Sun 31 May 2026 16:26:23 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153208
IP address blocks:        160.187.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12154 (0x2f7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:26:23 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c612f-07b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:90:1c:59:be:6e:8a:2e:2a:14:9c:38:02:
                    4d:c2:05:0a:e8:82:bf:86:17:94:97:0a:6a:3d:e3:
                    b3:74:40:29:25:0c:39:02:5e:3a:e3:3d:d6:bf:51:
                    7a:c7:30:01:fa:53:36:95:85:71:ef:7c:40:ea:5b:
                    b7:8e:b4:f6:e4:69:69:56:e4:cf:20:c6:18:f5:9b:
                    fc:62:63:61:37:59:78:8a:85:54:90:81:76:c7:f0:
                    e0:c9:51:cf:f9:2a:c0:79:77:78:36:23:37:f9:4f:
                    e5:c9:27:2a:57:7a:09:33:81:82:37:61:9a:81:1b:
                    b9:97:7f:57:ba:78:30:68:9d:4f:29:2c:d6:f3:91:
                    8d:05:32:f5:83:ef:16:0d:17:f8:86:6a:82:a3:6c:
                    15:11:4a:66:1b:9e:21:7c:1c:7f:7d:61:e9:b3:8f:
                    cc:12:6a:bd:0f:72:c3:9e:0a:70:ce:c5:13:37:df:
                    25:11:23:32:a3:45:8e:fc:0d:ab:3e:04:f5:f6:ca:
                    fb:ad:f1:0e:68:f4:67:d2:51:39:e9:48:ee:6c:ca:
                    8e:23:ac:b6:7f:17:fb:d5:73:9e:e2:05:5b:80:ef:
                    5e:fa:8e:3c:04:ec:24:5c:36:26:de:3d:90:ae:d0:
                    a1:d9:27:89:f0:54:9a:0b:b4:d9:71:17:98:cd:3e:
                    af:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5B:FE:BA:38:96:06:8D:D2:A2:10:67:01:6D:A5:35:65:EE:4C:8A
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F1476744719511EF9C2AB81AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:33:41:1d:54:12:52:74:55:49:bf:53:fd:7d:37:5a:05:
         86:80:4f:ce:39:f1:42:7a:3b:70:39:6b:5a:6b:89:89:ec:98:
         f4:0c:6d:cc:57:8d:ff:d9:3d:79:25:45:55:f3:96:6d:4e:c2:
         f3:64:0d:25:17:69:ce:5e:f7:da:8d:39:40:73:a5:68:62:46:
         8a:db:b3:ac:90:64:d4:d9:19:84:16:c6:d3:b2:27:93:61:ca:
         e5:25:74:b4:de:06:fe:bd:cd:fa:77:f7:04:81:7d:e0:96:62:
         c0:db:c8:ff:d9:f3:a0:e7:52:70:ae:34:0a:c6:26:e3:30:c1:
         78:58:a4:63:49:f5:04:cb:77:5e:f6:a6:28:fd:97:af:60:d6:
         b6:2c:90:dc:f1:69:d1:2e:6b:53:93:df:76:f0:01:a1:b4:0e:
         3a:6a:44:ee:84:83:7d:25:6c:8b:c5:8c:6f:b4:55:5c:d9:20:
         6b:b7:0a:b2:9d:54:9f:58:e0:70:08:d2:6b:96:00:e6:e3:fb:
         22:c8:6f:c5:45:53:53:83:b5:59:49:08:58:52:13:7f:d8:f5:
         aa:44:4a:97:a9:07:a4:e3:ba:aa:be:97:6b:bd:60:33:7d:4f:
         5f:41:3c:96:11:dc:39:51:4b:5c:73:47:01:45:45:26:c1:62:
         de:67:7e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:16 2026 by rpki-client