Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0BEEB726B01111F1B7C56ABD6C11F970.roa
File:                     0BEEB726B01111F1B7C56ABD6C11F970.roa (raw, json)
Hash identifier:          iBDnSle/5Q1HbTV3IG9eLf/khmw+NyHV2dzcVxNRuQ4=
Subject key identifier:   B3:E4:29:83:C4:B0:CA:4D:D5:2D:59:A9:2E:5D:DD:B8:43:2C:DA:C7
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       32E2
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0BEEB726B01111F1B7C56ABD6C11F970.roa
Signing time:             Mon 14 Sep 2026 07:51:09 +0000
ROA not before:           Mon 14 Sep 2026 07:51:09 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     137109
IP address blocks:        157.10.216.0/23 maxlen: 24
                          160.30.14.0/24 maxlen: 24
                          160.30.74.0/23 maxlen: 24
                          160.236.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13026 (0x32e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Sep 14 07:51:09 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aa7a76d-cbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:d3:4b:db:10:b1:71:e6:c4:76:4e:77:0f:
                    0c:4c:ff:11:83:f1:a1:e5:0e:48:34:91:ad:67:31:
                    2e:f1:24:73:f0:52:93:7e:93:11:5f:ce:c5:30:71:
                    84:c6:79:ae:c5:39:5f:56:4d:2b:48:cd:8c:9b:f5:
                    cb:3d:39:18:5e:51:a3:bd:5b:80:3f:84:ba:56:55:
                    49:2e:f3:c4:96:20:e1:ab:53:52:a8:b5:31:68:a9:
                    9d:1b:e7:25:34:6f:cf:4b:68:bd:b5:c2:26:5f:60:
                    c7:6f:f7:39:e7:1f:0c:68:12:f9:7f:de:b1:f7:1a:
                    84:ea:de:25:2c:93:19:e3:62:97:21:01:5c:9f:34:
                    69:0d:f9:e2:08:1e:dc:d2:63:60:07:f3:da:f0:5d:
                    4f:2c:25:8c:8c:b4:61:0b:1a:69:d2:8d:ae:af:bb:
                    79:c1:ba:fc:bc:83:ad:72:72:3e:4d:f2:be:a1:86:
                    f4:f9:31:c7:1f:76:0e:66:1a:97:0f:0a:8b:13:05:
                    03:8e:3e:1a:d2:59:dc:9b:a5:1a:41:58:da:0a:bc:
                    d2:4d:b8:42:44:57:7f:cf:c0:9f:08:0e:60:8b:bd:
                    d2:2d:2e:a4:7e:7e:bd:2e:c7:91:51:b7:9c:15:d8:
                    ed:da:0d:48:2b:cd:a3:7d:41:85:8f:f8:ad:04:92:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E4:29:83:C4:B0:CA:4D:D5:2D:59:A9:2E:5D:DD:B8:43:2C:DA:C7
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0BEEB726B01111F1B7C56ABD6C11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.216.0/23
                  160.30.14.0/24
                  160.30.74.0/23
                  160.236.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:ba:9c:eb:2d:d3:30:6c:42:57:51:b7:14:43:f0:cc:40:45:
         18:a1:2e:a5:5e:cb:af:0a:9b:90:52:27:6b:fb:0f:b5:2e:63:
         93:34:90:c0:5a:fa:7d:3c:4a:45:da:0c:db:e1:64:7f:d9:71:
         31:bf:d7:02:ad:26:a9:66:e2:9e:73:d1:83:7f:e1:0a:78:c5:
         a5:e6:78:66:c3:02:dd:98:b6:8c:7b:fc:1e:27:b5:6e:8c:e9:
         13:a3:21:e8:7a:61:76:17:62:d6:8f:0d:f6:9c:63:60:cb:58:
         ad:cf:23:4a:c9:97:52:6e:ad:53:6f:d0:48:47:bd:96:30:c9:
         29:f5:8a:2e:89:6b:b0:17:6a:30:bd:49:7f:8e:c2:cd:c1:65:
         a0:30:a7:a7:42:33:9b:21:fa:05:56:78:6f:69:9a:6b:87:2d:
         93:a5:69:2c:61:f7:e4:00:03:bd:1a:43:73:46:23:fa:80:91:
         2f:ab:e4:e8:b8:91:77:78:b9:e9:90:e0:96:40:e1:c7:60:f8:
         a2:4e:da:98:1a:0e:ee:7d:c2:9e:50:72:98:8d:1f:2a:7f:80:
         f5:18:bb:45:c2:f6:89:b3:f0:d0:9f:f2:14:1c:0b:62:0c:01:
         19:2a:be:c7:23:bd:24:52:da:56:55:0c:e1:9f:18:b8:d8:41:
         43:cc:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:25:42 2026 by rpki-client