Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa
File:                     F5C23494BD0711EFB92D9250C4F9AE02.roa (raw, json)
Hash identifier:          DEGLi2oPRWeu5DKkfNpVaT+ickuevBUFKnmfJ2eq1e0=
Subject key identifier:   8D:15:5E:A6:07:74:53:4C:F2:41:AB:06:3C:10:FE:30:CD:82:CC:9D
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2F99
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:27:22 +0000
ROA not before:           Sun 31 May 2026 16:27:22 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153257
IP address blocks:        160.191.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 15:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12185 (0x2f99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 31 16:27:22 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c616a-4224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:e5:b2:43:be:0d:67:65:db:86:88:94:df:
                    bc:ae:51:7c:d4:ea:7c:46:22:3d:45:69:94:81:42:
                    03:8c:d7:41:e7:7a:af:d3:8e:3e:05:38:f6:51:93:
                    00:03:d3:fe:57:b9:af:09:0c:9f:7b:ac:c4:6d:d8:
                    ce:ad:bc:e4:98:0c:d4:97:6c:25:65:2e:84:1e:c0:
                    f0:bb:0a:57:fd:b0:f6:f7:61:80:dc:5a:6f:9f:85:
                    da:f3:7a:67:6b:7c:36:af:10:7d:72:d4:93:e8:66:
                    15:90:0a:20:fe:20:87:12:d3:fb:13:b7:5c:7b:fc:
                    a1:ad:f2:78:73:65:16:bd:02:67:75:89:78:2f:d8:
                    69:e3:d4:53:81:27:e6:b8:79:65:7b:66:f9:75:da:
                    37:b3:7b:72:d9:91:bb:d8:7d:4f:68:54:5a:40:56:
                    40:2a:0d:e0:32:9a:b9:d7:40:2e:47:fe:b0:9f:31:
                    c4:fd:20:91:37:c8:ac:c1:b4:72:1e:08:9b:bc:ce:
                    66:9c:8b:a4:c5:24:0f:35:c1:51:99:2b:77:4f:33:
                    af:71:56:a8:b3:f8:4e:dc:cc:02:5b:2e:87:e8:d1:
                    9d:d0:55:2b:a3:8f:24:8a:e1:30:6c:68:5b:f4:aa:
                    20:57:3f:69:b1:59:3f:41:4b:e7:9e:a6:88:7d:29:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:15:5E:A6:07:74:53:4C:F2:41:AB:06:3C:10:FE:30:CD:82:CC:9D
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F5C23494BD0711EFB92D9250C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:a9:52:f4:ee:20:3e:ae:16:f7:fb:16:a5:fa:09:13:fa:
         f5:d4:bc:49:c4:7a:ab:a1:06:76:c0:51:80:1f:68:78:f0:7c:
         f0:ce:54:d7:08:ef:6e:2d:04:66:20:1a:f6:c9:b2:7d:67:1d:
         6c:80:04:53:74:00:22:6b:67:54:23:28:22:6b:cd:f0:14:e9:
         93:4f:f1:07:63:0b:c2:6b:8d:05:1f:3b:30:3b:bd:69:83:f4:
         6b:b7:ae:b9:e1:ac:c0:25:91:f3:24:af:c5:80:00:67:42:52:
         fc:4c:76:32:cc:9b:5b:2a:ec:29:41:2b:3a:37:c2:5b:4b:ad:
         10:cd:a3:05:11:57:5d:55:e9:95:01:01:7f:d1:c7:9c:16:80:
         5f:51:8c:d0:59:06:76:8b:a7:40:3d:7f:34:da:cc:d8:c0:c7:
         d2:79:4e:41:2f:ef:e5:74:8f:04:3d:14:c9:e8:af:df:54:ac:
         1e:10:b7:71:cf:b4:a1:4b:14:13:5a:61:39:af:9f:c9:72:75:
         f1:28:60:96:7f:ca:ec:d5:67:da:69:3d:32:d1:19:e5:50:bf:
         ef:55:9b:f6:13:f7:c2:0d:47:09:2a:08:c8:c3:e1:c7:7c:2c:
         20:e1:56:94:87:10:52:57:5c:b5:c1:75:23:f5:b8:b9:de:a3:
         d9:70:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:47 2026 by rpki-client