Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
File:                     F62807A4A89111EFB9118F2BC4F9AE02.roa (raw, json)
Hash identifier:          SSSTau0ueNNmSn5H3+Ky+pyKCzqTt1Ek8C7lDsQ8rpw=
Subject key identifier:   9D:01:05:EA:3C:3E:68:2B:F7:CC:13:F2:7C:20:5C:4D:F1:B7:48:D5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       31B2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:24:43 +0000
ROA not before:           Mon 06 Jul 2026 16:24:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153234
IP address blocks:        160.250.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12722 (0x31b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul  6 16:24:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bd6cb-9c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:28:ee:c3:31:ae:3a:0c:d5:b3:35:68:46:55:
                    ae:2b:75:5f:93:46:df:04:7d:38:be:38:d8:a2:d7:
                    d8:e4:04:78:b9:6b:d0:f1:8f:c7:07:0c:76:9a:3d:
                    24:cb:1d:0c:a3:be:8e:e3:88:9c:1a:48:f8:74:2f:
                    02:00:ba:48:c8:f5:2c:4d:c9:2d:75:af:ee:4b:62:
                    12:3c:96:8e:23:aa:68:ca:6d:c3:ee:5f:0f:fd:ca:
                    00:a6:c3:84:d1:2a:fb:2e:7a:37:4e:c3:c8:4c:20:
                    5f:c2:ef:3e:79:f1:0f:0b:32:3c:70:51:73:3e:37:
                    12:fb:b0:ad:ea:93:8c:94:2d:e6:7d:4c:03:ca:0d:
                    f0:ab:db:00:bf:a1:6a:f0:4d:53:78:36:88:1d:0a:
                    d7:e8:be:05:b5:e2:1c:23:13:9d:f5:a5:7b:02:70:
                    98:f0:a5:66:85:4c:38:ae:06:82:d6:31:16:02:61:
                    0f:d5:1e:dc:dd:9e:37:2e:f6:f2:f9:85:68:ef:4a:
                    80:14:e8:e1:24:65:c7:7a:e0:34:5e:c0:6b:6f:c3:
                    3b:11:92:b7:c4:93:e1:7a:b3:63:12:58:d0:14:f8:
                    63:7e:af:6b:b7:48:0a:9a:28:42:9a:9b:ad:c2:47:
                    b2:89:fe:1f:6c:bd:f1:67:c7:8e:a2:d1:15:92:38:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:01:05:EA:3C:3E:68:2B:F7:CC:13:F2:7C:20:5C:4D:F1:B7:48:D5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:06:23:12:87:34:8d:ad:c9:bc:92:96:f4:f7:45:76:c5:ed:
         4a:12:31:44:3d:39:9f:85:90:16:46:12:e0:e6:2c:00:dc:1f:
         e1:1f:98:b8:08:81:26:11:75:e7:c0:3d:51:ed:1e:10:f5:51:
         dd:a9:bf:a8:5f:72:d8:20:a4:06:48:fd:c2:3a:f5:1c:87:16:
         1a:27:44:0a:45:96:36:e8:51:1d:82:03:b8:68:76:19:35:8e:
         25:72:aa:b6:95:fd:d0:60:51:e9:dd:3f:9d:87:36:f7:e7:33:
         37:06:13:26:5d:e8:3b:3a:64:2d:2f:ae:86:ac:4b:a0:e3:fb:
         b8:9c:c6:75:9b:1f:cc:ad:68:39:ee:8c:3e:2a:c0:bb:b5:c6:
         f0:e9:b7:7d:23:03:49:b1:0b:f5:8c:16:f0:be:77:4d:85:84:
         b8:50:46:04:58:5d:2b:6f:bb:65:9c:a1:56:a2:3e:30:01:ba:
         9a:60:53:f7:3b:13:9d:1b:01:93:9f:55:4c:51:91:84:66:5f:
         37:55:ae:52:4c:93:3e:3c:cd:89:43:64:ad:b2:b8:62:07:0c:
         39:61:cb:82:36:05:86:9f:44:16:51:28:16:ac:ef:bc:03:8e:
         84:07:5f:c5:6d:46:dd:64:56:ec:b5:c0:03:4f:99:c1:00:27:
         78:82:0b:a2
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICMbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjYwNzA2MTYyNDQzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiZDZjYi05Yzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArijuwzGuOgzVszVoRlWuK3Vfk0bfBH04vjjYotfY5AR4uWvQ8Y/HBwx2mj0k
yx0Mo76O44icGkj4dC8CALpIyPUsTcktda/uS2ISPJaOI6poym3D7l8P/coApsOE
0Sr7Lno3TsPITCBfwu8+efEPCzI8cFFzPjcS+7Ct6pOMlC3mfUwDyg3wq9sAv6Fq
8E1TeDaIHQrX6L4FteIcIxOd9aV7AnCY8KVmhUw4rgaC1jEWAmEP1R7c3Z43Lvby
+YVo70qAFOjhJGXHeuA0XsBrb8M7EZK3xJPherNjEljQFPhjfq9rt0gKmihCmput
wkeyif4fbL3xZ8eOotEVkjhOCQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJ0BBeo8
Pmgr98wT8nwgXE3xt0jVMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvRjYyODA3QTRB
ODkxMTFFRkI5MTE4RjJCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPomMA0GCSqGSIb3DQEBCwUAA4IBAQB5BiMShzSNrcm8kpb090V2
xe1KEjFEPTmfhZAWRhLg5iwA3B/hH5i4CIEmEXXnwD1R7R4Q9VHdqb+oX3LYIKQG
SP3COvUchxYaJ0QKRZY26FEdggO4aHYZNY4lcqq2lf3QYFHp3T+dhzb35zM3BhMm
Xeg7OmQtL66GrEug4/u4nMZ1mx/MrWg57ow+KsC7tcbw6bd9IwNJsQv1jBbwvndN
hYS4UEYEWF0rb7tlnKFWoj4wAbqaYFP3OxOdGwGTn1VMUZGEZl83Va5STJM+PM2J
Q2StsrhiBww5YcuCNgWGn0QWUSgWrO+8A46EB1/FbUbdZFbstcADT5nBACd4ggui
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:51:28 2026 by rpki-client