Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
File:                     9CB72A9E386911EF960B3343C4F9AE02.roa (raw, json)
Hash identifier:          Xab3PKIdlbJWKUCRsbYXSNGjzkiL2K58I2i+8KyXdpg=
Subject key identifier:   FA:37:BC:AF:29:38:7E:68:62:1A:70:A9:E3:B0:69:9B:A2:F6:C7:4F
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C2A
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:08 +0000
ROA not before:           Thu 08 May 2025 15:54:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152551
IP address blocks:        160.22.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11306 (0x2c2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1af-aaf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:9f:6e:75:52:49:54:1f:30:78:f3:ef:c1:17:
                    11:76:87:68:97:1d:95:32:0c:db:ba:97:13:cb:f7:
                    00:c7:52:e1:e0:ef:4e:ed:32:af:af:36:fe:ec:95:
                    da:19:87:cc:f3:5b:59:39:26:00:35:7e:2c:2a:c0:
                    48:6d:f2:a4:36:10:cc:40:a9:c9:38:6e:c4:68:2d:
                    a0:dc:52:de:49:81:61:c7:86:7f:28:b7:8d:82:15:
                    79:45:0d:b8:16:6f:76:6f:72:27:a9:f7:1f:6f:9c:
                    8e:b8:ba:c9:92:45:1a:61:d8:88:c3:ae:d4:6e:ff:
                    47:a1:f5:fb:ca:3b:6b:80:62:7c:9f:48:f2:ef:f3:
                    32:a6:ab:24:4e:ea:9f:05:7e:87:11:a0:9a:86:ae:
                    da:c1:a5:2f:ce:a7:a6:09:f6:2d:af:5e:d6:c6:3b:
                    29:8d:f4:f1:9c:ac:35:cc:95:ed:00:b2:33:89:17:
                    8a:e3:0c:c1:8b:a4:f4:8a:d5:b7:0a:01:aa:d2:4b:
                    53:94:1e:e8:8e:4b:88:a5:f9:ee:c1:15:82:a0:19:
                    86:b5:94:1d:3b:ce:8c:02:31:36:a3:65:70:56:d9:
                    32:69:8b:56:33:5f:29:f7:da:b2:fa:a9:f3:6b:f7:
                    d7:4d:0a:f1:29:61:3c:38:b8:1a:69:57:9d:a9:ba:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:37:BC:AF:29:38:7E:68:62:1A:70:A9:E3:B0:69:9B:A2:F6:C7:4F
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/9CB72A9E386911EF960B3343C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:b8:85:69:b6:78:17:fc:c3:fd:5b:1c:18:80:31:68:a8:
         40:a8:36:a5:e8:80:58:95:04:89:08:28:1c:5e:75:56:d6:1c:
         97:88:59:89:4b:ef:d1:e9:66:0c:fa:f9:c6:4e:17:95:b9:72:
         fc:30:6a:69:f0:4b:62:20:0b:2f:08:bd:4d:4d:cc:3e:fe:0c:
         22:dd:b4:b6:85:4f:ff:60:d3:06:2d:f5:e4:b2:dc:f8:44:8a:
         18:a7:24:02:14:2e:ff:00:ba:f1:db:64:ba:0d:1e:6d:e5:a5:
         37:ab:cc:ad:af:15:b8:4d:19:e2:ed:78:6b:6d:17:f7:05:0b:
         0b:da:f9:d6:19:cf:13:d2:39:00:fd:14:54:99:ff:d3:da:09:
         d9:82:55:9a:da:52:f9:38:e0:d2:62:c0:78:58:28:d6:77:e6:
         e9:10:64:f2:f9:ae:17:0d:a3:5b:eb:5a:1a:fe:28:67:f5:99:
         21:da:9d:d4:22:c7:f6:a1:cd:31:fb:53:cb:98:a1:76:9c:3e:
         b6:dc:91:f4:51:41:ca:72:98:7d:ba:2e:c4:b7:8f:af:b8:5b:
         92:4f:3d:17:d9:eb:39:5c:1b:21:c5:76:5a:b8:1e:3c:e7:01:
         d4:0d:08:34:69:90:b5:af:79:f0:13:12:6d:6e:32:6d:35:a0:
         3c:c5:a4:8e
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLCowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzFhZi1hYWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8p9udVJJVB8wePPvwRcRdodolx2VMgzbupcTy/cAx1Lh4O9O7TKvrzb+7JXa
GYfM81tZOSYANX4sKsBIbfKkNhDMQKnJOG7EaC2g3FLeSYFhx4Z/KLeNghV5RQ24
Fm92b3Inqfcfb5yOuLrJkkUaYdiIw67Ubv9HofX7yjtrgGJ8n0jy7/MypqskTuqf
BX6HEaCahq7awaUvzqemCfYtr17WxjspjfTxnKw1zJXtALIziReK4wzBi6T0itW3
CgGq0ktTlB7ojkuIpfnuwRWCoBmGtZQdO86MAjE2o2VwVtkyaYtWM18p99qy+qnz
a/fXTQrxKWE8OLgaaVedqbpVqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPo3vK8p
OH5oYhpwqeOwaZui9sdPMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvOUNCNzJBOUUz
ODY5MTFFRjk2MEIzMzQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBZ0MA0GCSqGSIb3DQEBCwUAA4IBAQCXubiFabZ4F/zD/VscGIAx
aKhAqDal6IBYlQSJCCgcXnVW1hyXiFmJS+/R6WYM+vnGTheVuXL8MGpp8EtiIAsv
CL1NTcw+/gwi3bS2hU//YNMGLfXkstz4RIoYpyQCFC7/ALrx22S6DR5t5aU3q8yt
rxW4TRni7XhrbRf3BQsL2vnWGc8T0jkA/RRUmf/T2gnZglWa2lL5OODSYsB4WCjW
d+bpEGTy+a4XDaNb61oa/ihn9Zkh2p3UIsf2oc0x+1PLmKF2nD623JH0UUHKcph9
ui7Et4+vuFuSTz0X2es5XBshxXZauB485wHUDQg0aZC1r3nwExJtbjJtNaA8xaSO
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:54:58 2026 by rpki-client