Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/65FD4A5E81B211F09F5AD338C4F9AE02.roa
File:                     65FD4A5E81B211F09F5AD338C4F9AE02.roa (raw, json)
Hash identifier:          0SbV90P6ZyGFaQIa4OODhPKuugMCZHWdC4bVSSbJ18Y=
Subject key identifier:   CB:78:74:EE:52:0E:7A:B3:15:DC:78:41:D1:E1:C5:EE:F5:19:66:16
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2CB5
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/65FD4A5E81B211F09F5AD338C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:49:24 +0000
ROA not before:           Mon 25 Aug 2025 12:52:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134294
IP address blocks:        160.250.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11445 (0x2cb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Aug 25 12:52:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c274-1a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7b:7f:e2:97:be:01:49:07:1c:78:52:62:78:
                    ad:04:65:61:c2:ee:35:94:1a:c4:80:d0:5a:ab:50:
                    cf:43:ce:2e:2c:ed:49:34:54:bf:df:85:3f:cd:39:
                    12:ee:e2:d8:a9:9f:22:b7:c0:56:17:88:13:ef:d2:
                    28:47:f9:fd:ab:07:7a:16:92:ce:65:62:6b:a7:6d:
                    22:42:46:3f:bf:ae:c2:01:cc:da:4b:53:f0:21:bb:
                    28:75:87:a0:a4:99:07:67:66:7c:60:af:01:f8:95:
                    5f:ba:12:79:58:b4:66:47:0f:c9:e7:c0:1d:77:d4:
                    f8:d3:74:21:55:45:90:25:62:3b:25:9c:b1:c2:cc:
                    4c:54:79:af:2e:64:62:44:4a:65:1d:be:63:92:87:
                    2e:ca:30:78:ad:90:bf:e6:22:a3:ba:86:55:76:ee:
                    e3:b6:b8:5b:97:d5:3a:e1:28:81:b5:6c:c2:2f:a0:
                    be:5d:6b:9b:60:6c:06:63:2b:46:c6:78:09:bd:93:
                    39:52:aa:2b:0f:1e:ad:c1:96:02:fc:90:1b:92:41:
                    b0:f3:e4:a7:01:78:77:7b:c8:5b:d0:0d:3a:2a:be:
                    7e:34:6c:f9:43:4a:48:52:61:a1:77:e4:4b:69:65:
                    87:34:95:1c:0b:7d:ea:ef:d2:49:53:55:40:d7:df:
                    c1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:74:EE:52:0E:7A:B3:15:DC:78:41:D1:E1:C5:EE:F5:19:66:16
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/65FD4A5E81B211F09F5AD338C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:c3:1f:95:cd:af:27:a6:f4:7e:d4:ed:ff:d7:85:a2:a8:16:
         79:d9:30:f7:24:89:83:00:0b:23:8c:ec:f7:48:ac:a4:2b:1f:
         60:c1:ce:30:98:37:b0:8a:68:5c:87:8c:69:b4:78:10:e2:99:
         c6:ec:06:81:19:fa:e7:c9:71:53:31:b8:e0:db:79:e2:df:32:
         11:d1:38:32:9f:7a:69:f7:2c:8d:4c:ab:5c:e9:e9:64:f6:d3:
         5e:68:f4:3c:f6:9d:9e:0d:37:29:55:e4:91:33:bc:6b:40:39:
         38:9b:77:0b:b1:74:03:9b:65:3b:bf:51:16:35:32:23:a0:57:
         fb:a8:41:24:2b:a0:59:cb:1a:9a:14:c7:b4:97:2f:d4:a5:5a:
         d6:83:fd:57:c5:ee:01:0a:d6:62:5c:81:5e:f5:2a:08:25:a6:
         8f:cc:2b:98:40:69:0e:c5:91:8e:0b:a6:42:c9:b8:48:36:c1:
         9b:8e:ca:fd:31:a8:d3:e4:55:c3:db:fa:fb:47:63:bf:8b:cb:
         18:ee:a5:2a:9b:15:a7:8e:92:ae:60:14:2e:88:f0:66:bb:7f:
         06:e0:0d:05:ba:28:0f:64:e3:ac:f6:b2:ea:f8:54:ec:a1:f2:
         94:f4:87:ec:4b:85:b2:a3:e2:8a:61:d4:45:5a:de:a4:22:b7:
         61:51:a2:d1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwODI1MTI1MjQ2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzI3NC0xYTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAg3t/4pe+AUkHHHhSYnitBGVhwu41lBrEgNBaq1DPQ84uLO1JNFS/34U/zTkS
7uLYqZ8it8BWF4gT79IoR/n9qwd6FpLOZWJrp20iQkY/v67CAczaS1PwIbsodYeg
pJkHZ2Z8YK8B+JVfuhJ5WLRmRw/J58Add9T403QhVUWQJWI7JZyxwsxMVHmvLmRi
REplHb5jkocuyjB4rZC/5iKjuoZVdu7jtrhbl9U64SiBtWzCL6C+XWubYGwGYytG
xngJvZM5UqorDx6twZYC/JAbkkGw8+SnAXh3e8hb0A06Kr5+NGz5Q0pIUmGhd+RL
aWWHNJUcC33q79JJU1VA19/BlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMt4dO5S
DnqzFdx4QdHhxe71GWYWMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjVGRDRBNUU4
MUIyMTFGMDlGNUFEMzM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoPrqMA0GCSqGSIb3DQEBCwUAA4IBAQA3wx+Vza8npvR+1O3/14Wi
qBZ52TD3JImDAAsjjOz3SKykKx9gwc4wmDewimhch4xptHgQ4pnG7AaBGfrnyXFT
Mbjg23ni3zIR0Tgyn3pp9yyNTKtc6elk9tNeaPQ89p2eDTcpVeSRM7xrQDk4m3cL
sXQDm2U7v1EWNTIjoFf7qEEkK6BZyxqaFMe0ly/UpVrWg/1Xxe4BCtZiXIFe9SoI
JaaPzCuYQGkOxZGOC6ZCybhINsGbjsr9MajT5FXD2/r7R2O/i8sY7qUqmxWnjpKu
YBQuiPBmu38G4A0FuigPZOOs9rLq+FTsofKU9IfsS4Wyo+KKYdRFWt6kIrdhUaLR
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:46:46 2026 by rpki-client