Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6B910002F7F411EFA0F3E52DC4F9AE02.roa
File:                     6B910002F7F411EFA0F3E52DC4F9AE02.roa (raw, json)
Hash identifier:          cAT4tGjmhrth/TnrjJAZIDSa0uArnn2I4fWFjAtCKWw=
Subject key identifier:   11:F8:80:42:97:4B:23:BB:0E:88:BA:4E:3C:4C:96:C2:99:FD:8A:61
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BCF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6B910002F7F411EFA0F3E52DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:49 +0000
ROA not before:           Thu 08 May 2025 15:53:05 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141317
IP address blocks:        160.191.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11215 (0x2bcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:05 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c125-3c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:a4:83:02:62:7d:de:30:0a:f2:e2:ef:7f:
                    ef:38:68:02:fd:5f:57:96:bc:96:a4:ac:14:3d:11:
                    d9:50:26:4d:79:19:d3:65:d3:27:d7:c8:88:d1:2c:
                    04:88:01:9d:6d:96:aa:c4:90:60:ed:f7:8a:09:54:
                    b6:b1:fc:a3:bb:b3:9c:4d:61:c4:24:3b:37:12:f1:
                    2a:a1:f5:3f:eb:57:47:cd:57:17:59:56:31:e9:a1:
                    5f:74:db:38:01:17:39:4c:64:71:e5:2a:96:d3:4d:
                    f8:ff:ed:7d:4d:b0:11:c1:50:a5:75:15:ca:51:1c:
                    8e:00:29:1c:4b:75:d8:4d:2c:f6:2d:56:e7:b2:2f:
                    2f:8d:89:fb:84:bb:9a:b5:9e:cd:f5:f1:e7:36:e0:
                    58:32:05:a1:b9:64:ed:ac:42:6a:83:9b:fc:22:1e:
                    d0:16:b4:aa:56:03:5a:3c:7c:aa:33:88:ec:ef:79:
                    8b:4a:07:10:5f:ee:8e:ce:52:46:9f:6a:f5:30:9d:
                    f1:01:4a:3d:bb:f5:3f:e8:04:8c:8b:c1:b8:67:6a:
                    8f:73:d9:9e:6d:50:d2:05:5d:87:8f:36:f2:54:b8:
                    b7:04:1d:97:cb:00:54:76:f1:25:be:c8:37:fc:5a:
                    f6:2f:d1:2f:90:ac:b6:a4:df:8f:6d:46:91:1f:59:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F8:80:42:97:4B:23:BB:0E:88:BA:4E:3C:4C:96:C2:99:FD:8A:61
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6B910002F7F411EFA0F3E52DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:48:0e:0b:fb:fe:45:be:bf:b2:2e:74:c4:0b:12:ff:87:00:
         f2:e9:1c:cd:de:08:2f:aa:d1:bb:a6:04:00:71:08:da:b4:36:
         a1:c3:b0:c3:04:9e:8f:75:21:52:22:af:46:68:a0:df:bb:6a:
         aa:bf:6b:9d:b2:bf:c2:a1:ea:50:7d:06:a4:80:e8:95:19:06:
         94:ae:5f:d3:57:5b:b1:a1:3e:8f:5c:25:dd:f4:fd:fc:55:a2:
         79:17:3b:7d:d3:cb:bc:61:84:59:1f:2b:db:5a:47:e5:68:0b:
         14:72:9c:52:67:25:f6:20:3b:0d:4f:0b:a2:b4:ab:55:b1:5c:
         4d:38:75:1b:f1:f4:ee:46:9f:84:0d:76:42:a9:55:b1:34:80:
         4b:43:86:55:6f:ef:98:04:67:f9:48:28:f6:5a:0f:f7:47:83:
         b9:86:e0:89:21:5f:78:95:00:8c:fe:be:a2:8d:54:4a:2b:25:
         cb:92:b7:3b:d4:d7:3c:eb:b2:69:ae:7e:2e:0d:7c:a7:9f:b2:
         2d:62:2f:c0:4e:70:38:ca:43:e1:ef:6e:dd:93:24:c1:de:89:
         5c:f9:e6:b6:b1:66:d4:b9:44:3d:43:6f:bb:9d:96:db:a9:09:
         8e:1a:b5:fc:c0:15:16:c2:d3:fd:11:7c:90:8d:8c:27:48:42:
         cd:b8:f7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:30 2026 by rpki-client