Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/467FE46E10FE11EFA29A9758C4F9AE02.roa
File:                     467FE46E10FE11EFA29A9758C4F9AE02.roa (raw, json)
Hash identifier:          MP/baJpp1RhVqN9Q+pD1qvzQx+6r/ioCA1TU/iJHfRY=
Subject key identifier:   0F:9C:AF:41:76:48:57:AD:77:B3:77:A3:39:B9:D3:5E:D9:6F:B7:5E
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BCB
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/467FE46E10FE11EFA29A9758C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:44 +0000
ROA not before:           Thu 08 May 2025 15:53:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141252
IP address blocks:        160.19.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11211 (0x2bcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c120-78cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d4:9e:70:11:6b:95:f3:3c:ea:72:6d:e1:fb:
                    52:8e:18:4e:56:82:8c:b5:1e:4d:d9:ca:b1:a6:fa:
                    37:f8:d4:3a:2b:39:a9:7b:43:2f:13:26:1b:d0:d8:
                    71:c9:ba:99:c6:52:24:fb:a9:d3:ea:85:59:36:a6:
                    ed:b4:4a:b8:7b:72:03:ae:d7:2f:43:ea:83:a6:32:
                    e2:39:07:1f:a7:3c:33:cb:01:42:a8:83:93:a1:1c:
                    94:2e:1f:55:ec:b1:29:26:f7:52:79:be:96:7e:44:
                    82:e4:cd:2f:c7:eb:b5:e5:37:c1:e7:8a:ce:86:1f:
                    1e:f1:b9:90:6e:69:71:a5:09:41:1d:98:43:0c:83:
                    2f:76:06:ab:96:3d:88:78:b7:7c:c2:3f:cd:f8:a7:
                    53:6d:7a:bb:3a:53:6c:a4:21:ff:87:31:b6:12:a3:
                    17:db:a9:1f:f0:e0:ee:f2:85:6f:43:ce:19:52:c2:
                    28:23:cf:56:99:f2:84:5a:17:17:e7:b5:5b:07:f2:
                    a5:06:fb:62:b8:dd:f6:3c:fc:85:99:c2:35:88:fa:
                    81:99:e6:73:38:27:7a:6e:f3:58:8b:03:3d:6f:4f:
                    0c:36:e6:45:c4:bb:f9:26:6a:15:13:8d:ac:29:2e:
                    3b:68:88:a3:26:88:d8:1f:9e:3d:fd:5e:73:66:d8:
                    69:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9C:AF:41:76:48:57:AD:77:B3:77:A3:39:B9:D3:5E:D9:6F:B7:5E
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/467FE46E10FE11EFA29A9758C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.19.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:5e:32:cd:5a:6d:98:7a:ce:0a:a3:9c:5d:77:d8:cd:22:a5:
         0b:44:5b:ca:b6:23:7a:a3:98:1f:28:b8:d3:ac:b3:b0:5b:6b:
         b8:43:47:fe:21:17:c3:d8:31:68:5a:5a:e7:ee:8c:71:f0:f4:
         84:8a:9e:25:1f:8d:5b:a0:c7:dd:9f:d9:aa:b5:ee:e8:23:ed:
         ee:84:5c:ce:cb:d3:75:03:4d:1b:57:6a:59:32:76:dd:f5:ce:
         01:97:e2:e0:80:14:86:82:c9:06:bf:a8:64:18:41:c8:c8:4a:
         8e:b2:4a:0b:4c:69:42:1b:cf:b6:ad:70:69:a4:48:ce:86:e8:
         91:10:d0:43:22:6d:3c:58:37:da:58:95:b9:0c:d5:20:33:8a:
         2c:ce:2b:07:0c:35:a6:f6:33:7e:23:e2:bc:6e:f2:b2:b3:9b:
         04:b0:82:7b:3e:2a:c3:d8:46:4c:12:74:72:9b:dc:09:4c:a8:
         35:dd:a0:41:fc:88:c1:15:e7:73:83:1c:71:21:ab:d6:e7:f7:
         2a:04:24:1c:3c:db:36:42:48:a2:a2:df:30:08:20:8b:64:c6:
         68:a1:02:95:9a:11:60:b8:38:5f:78:cc:d7:61:7d:6e:e4:5e:
         67:7d:33:f0:d9:2e:48:38:ef:29:1e:9c:cf:e2:90:ad:a9:8f:
         eb:49:59:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:36 2026 by rpki-client