Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C81855929C3B11EFA8E7A115C4F9AE02.roa
File:                     C81855929C3B11EFA8E7A115C4F9AE02.roa (raw, json)
Hash identifier:          8kWGitC1rFxJFqRbbiq6a4eG5oFb0ML80ZfPLYGL25k=
Subject key identifier:   75:FE:1F:1E:30:0C:53:8D:1F:DE:B5:B1:C0:0B:4D:78:C9:7C:91:C9
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BD1
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C81855929C3B11EFA8E7A115C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:52 +0000
ROA not before:           Thu 08 May 2025 15:53:07 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141846
IP address blocks:        160.191.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11217 (0x2bd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:53:07 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c127-a6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:52:5e:e7:8d:2c:b5:8d:07:f2:c1:ae:6c:
                    44:bf:a5:85:7f:24:aa:0b:ff:2b:61:aa:2d:3a:eb:
                    5b:5c:de:d8:1d:11:45:b6:47:ac:5e:4e:67:93:b0:
                    c6:97:b4:89:2b:18:4d:b8:70:cc:d9:73:84:83:6d:
                    8b:b8:e1:b8:54:eb:d4:5e:6b:6a:88:40:cb:bb:bd:
                    07:74:39:30:52:d4:d6:2b:10:cc:c1:79:84:a0:f0:
                    7e:2a:a7:b9:e5:f0:5c:1a:e1:f7:94:6e:76:4b:9a:
                    2c:b2:0c:5b:01:4b:18:61:b1:f7:e9:80:39:8e:42:
                    f2:49:95:b5:8a:79:b2:2e:26:20:22:6a:01:03:83:
                    d8:29:cf:31:8f:54:60:2f:81:eb:79:e7:32:e8:72:
                    38:23:68:7f:ec:67:2d:5d:ba:2b:40:70:6f:c1:70:
                    c6:57:4f:44:f9:c3:21:bc:74:f3:eb:3f:0e:0e:9f:
                    cc:05:d7:7b:0b:51:7c:0b:76:e5:05:51:19:98:c5:
                    ca:93:bb:6b:4b:cb:32:db:25:61:2e:44:50:19:36:
                    cc:80:c7:b2:16:aa:5e:6a:2d:f7:b3:92:70:22:c4:
                    64:16:d1:2e:a7:9b:38:6a:af:1a:e8:eb:cc:0e:c3:
                    be:5b:87:bf:f7:3c:3e:1c:a6:c3:e1:af:d8:d7:ee:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:1F:1E:30:0C:53:8D:1F:DE:B5:B1:C0:0B:4D:78:C9:7C:91:C9
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C81855929C3B11EFA8E7A115C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:98:d0:ad:37:42:36:c3:e8:05:18:05:20:25:a5:68:c0:6d:
         54:9b:ea:d0:05:b4:c2:65:28:3a:a4:c2:6b:dc:e8:f5:bb:c9:
         61:e1:75:35:7a:10:99:00:1e:21:21:de:6c:0c:b8:2a:d2:aa:
         ae:4f:cc:9d:63:bd:76:66:15:93:1d:54:6c:e3:62:6b:46:f0:
         d8:f4:1c:21:12:13:7d:29:9a:c1:92:39:0b:40:2b:b6:fc:64:
         1a:46:2b:5f:49:f6:ad:f8:b4:42:34:71:4b:1a:00:0f:3f:1b:
         24:a5:af:fe:4d:48:05:46:31:c3:58:f1:55:fc:f2:87:99:30:
         88:7b:f5:65:bb:00:dd:aa:d2:6d:bf:ea:40:2c:c7:03:47:3b:
         f7:eb:7c:bc:80:2f:a0:42:10:6a:96:41:b3:7d:75:15:23:2e:
         01:d3:6a:ec:8d:58:3e:b2:31:f4:14:d3:54:bb:fc:dc:27:b9:
         af:dc:d2:cd:40:c7:09:21:78:9b:80:a7:9d:a0:33:0b:9f:76:
         30:43:f2:95:21:c9:35:7a:cf:0e:88:3f:b7:fd:01:ea:4e:22:
         2b:a0:2e:c6:66:7b:1c:19:1e:e4:96:36:72:87:18:1e:8d:62:
         ed:6f:ea:ce:f8:0e:1c:a6:9d:a3:bb:c3:21:7a:23:a4:0a:cf:
         9b:c1:d0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:36 2026 by rpki-client