Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
File:                     93E4A4E82E1C11EFB674EB7FC4F9AE02.roa (raw, json)
Hash identifier:          RHlFiQmo9o7viJ/fkcVkZifBw8ZujzFD2XMLBbffiXY=
Subject key identifier:   EA:EE:B3:6A:5D:CA:53:22:FD:52:DF:E1:FD:06:BF:1D:FA:CA:A7:93
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BBF
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:27 +0000
ROA not before:           Thu 08 May 2025 15:52:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138718
IP address blocks:        160.22.132.0/23 maxlen: 24
                          160.187.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11199 (0x2bbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c10f-4ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:84:8e:f4:b3:c7:aa:74:9f:de:4e:87:88:
                    87:e8:d2:dd:15:b0:72:f5:0d:d5:31:5f:1c:70:a9:
                    0d:52:ac:45:11:a5:b0:79:72:fd:1c:7b:9b:53:7e:
                    6e:eb:9f:5e:ab:a3:fd:e8:71:12:e0:06:50:46:c5:
                    1a:3a:a5:60:a7:53:c4:3e:67:9f:e5:ef:3f:7c:fd:
                    0c:6c:a4:e8:5e:62:e7:59:94:d1:4f:7e:43:70:aa:
                    f6:59:88:4a:6d:56:f8:ab:2d:92:a3:c4:76:73:70:
                    d3:09:f9:6f:eb:75:7b:71:f5:0d:7a:0a:22:cd:a1:
                    4e:6d:9f:f8:24:18:f7:a6:e2:f0:d9:5d:bb:5d:34:
                    6e:5c:d8:d3:a6:6e:d7:b5:5b:65:73:14:c8:39:87:
                    8a:92:02:c3:0d:40:c4:52:d1:73:49:86:20:4e:06:
                    df:a0:2d:a1:70:50:55:c7:d4:4d:40:70:a2:50:a1:
                    76:9a:7e:10:57:f0:9f:4b:72:16:89:39:a6:69:f0:
                    76:13:68:d5:ae:79:0c:54:a2:63:ca:cd:14:0a:95:
                    e9:4e:ee:ef:d8:ff:27:93:49:97:6d:17:17:80:0e:
                    7b:7c:76:5a:2d:ae:08:07:49:e2:71:52:1f:8b:8c:
                    95:b6:7f:d3:8a:60:84:79:de:a3:b7:51:1a:78:2c:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EE:B3:6A:5D:CA:53:22:FD:52:DF:E1:FD:06:BF:1D:FA:CA:A7:93
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.132.0/23
                  160.187.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:76:44:4d:d8:11:f2:7d:a9:21:36:77:bf:91:01:8c:39:
         ae:2d:67:ce:a6:0e:b0:f2:50:cb:b0:b8:bd:51:91:de:06:60:
         46:30:ae:88:35:5c:22:a2:5e:f8:99:1f:30:e2:45:72:3e:4d:
         ff:49:26:fe:b0:fe:31:52:6f:6b:68:97:90:da:fa:61:9b:9e:
         3d:c5:2b:7e:90:ab:ee:48:2f:ae:2a:57:79:1c:50:3c:c9:43:
         b6:53:49:c8:63:19:a4:d0:4f:b8:53:b4:2c:a4:88:73:25:e6:
         80:c9:7e:f8:f1:ff:03:16:ee:ac:05:58:c3:97:76:79:59:74:
         6d:06:e0:15:ba:da:ac:f5:9d:38:27:b3:e2:e5:db:2f:f1:e9:
         09:46:2f:15:5f:7e:3a:70:b1:e0:95:15:b2:ec:1d:6b:a8:5b:
         50:79:03:cf:2d:83:bd:7c:ed:8b:dc:aa:27:76:85:b4:20:70:
         60:5d:94:3f:92:75:70:25:a8:38:75:16:5a:62:df:39:a2:51:
         31:e5:d0:6b:b8:3a:ab:8b:53:a7:86:83:7f:4e:01:5b:8d:12:
         df:bf:be:e4:e3:83:52:4c:44:7f:1f:ef:32:34:72:44:23:6e:
         b8:0a:c8:45:bd:cf:85:f3:79:69:76:ad:e8:f1:6f:ee:ce:d9:
         2d:20:fa:8c
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICK78wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1MjQ4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzEwZi00YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6MeEjvSzx6p0n95Oh4iH6NLdFbBy9Q3VMV8ccKkNUqxFEaWweXL9HHubU35u
659eq6P96HES4AZQRsUaOqVgp1PEPmef5e8/fP0MbKToXmLnWZTRT35DcKr2WYhK
bVb4qy2So8R2c3DTCflv63V7cfUNegoizaFObZ/4JBj3puLw2V27XTRuXNjTpm7X
tVtlcxTIOYeKkgLDDUDEUtFzSYYgTgbfoC2hcFBVx9RNQHCiUKF2mn4QV/CfS3IW
iTmmafB2E2jVrnkMVKJjys0UCpXpTu7v2P8nk0mXbRcXgA57fHZaLa4IB0nicVIf
i4yVtn/TimCEed6jt1EaeCymMwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFOrus2pd
ylMi/VLf4f0Gvx36yqeTMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOTNFNEE0RTgy
RTFDMTFFRkI2NzRFQjdGQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQBoBaEAwQBoLu2MA0GCSqGSIb3DQEBCwUAA4IBAQAqhHZETdgR8n2p
ITZ3v5EBjDmuLWfOpg6w8lDLsLi9UZHeBmBGMK6INVwiol74mR8w4kVyPk3/SSb+
sP4xUm9raJeQ2vphm549xSt+kKvuSC+uKld5HFA8yUO2U0nIYxmk0E+4U7QspIhz
JeaAyX748f8DFu6sBVjDl3Z5WXRtBuAVutqs9Z04J7Pi5dsv8ekJRi8VX346cLHg
lRWy7B1rqFtQeQPPLYO9fO2L3KondoW0IHBgXZQ/knVwJag4dRZaYt85olEx5dBr
uDqri1OnhoN/TgFbjRLfv77k44NSTER/H+8yNHJEI264CshFvc+F83lpdq3o8W/u
ztktIPqM
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:48 2026 by rpki-client