Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D85EC03E89B111F1A0F0A18C4711F970.roa
File:                     D85EC03E89B111F1A0F0A18C4711F970.roa (raw, json)
Hash identifier:          m7ag05RNk2omi3h1YS5E+8mCd25qKKB1whw9XtPn34U=
Subject key identifier:   83:90:33:01:56:E8:DA:AF:49:9D:6A:F9:1B:94:47:D1:51:EA:03:F7
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3259
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D85EC03E89B111F1A0F0A18C4711F970.roa
Signing time:             Mon 27 Jul 2026 11:53:56 +0000
ROA not before:           Mon 27 Jul 2026 11:53:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154157
IP address blocks:        160.22.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12889 (0x3259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jul 27 11:53:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a6746d4-8e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:09:01:92:a3:bd:0f:42:ec:d9:af:71:4b:7a:
                    fc:9f:e2:44:04:86:f7:a1:66:fc:c2:69:2b:76:27:
                    2d:87:f2:f8:d7:c4:fd:c3:2a:d4:1a:7a:24:07:10:
                    3d:53:7f:66:8a:99:78:ee:c9:42:77:42:66:fb:2b:
                    0e:57:64:29:0a:a6:21:a2:48:7e:a9:95:50:72:62:
                    21:fb:07:1d:6e:57:ca:29:a3:e0:0e:0a:bd:3e:f7:
                    42:d8:b8:61:29:36:4b:53:67:39:cc:4b:86:76:ff:
                    b3:4d:3b:70:89:37:a1:cc:4b:bc:19:15:9f:4b:40:
                    31:a8:02:26:70:21:9d:43:36:7d:51:43:cd:0c:dc:
                    75:24:57:7d:5e:1e:41:db:09:3d:f7:71:c8:be:91:
                    14:69:c3:25:3c:80:eb:d2:ae:7e:de:05:e2:c9:5f:
                    8e:da:5c:e3:dd:76:59:20:ee:db:3b:12:48:fa:f9:
                    8c:bc:dd:60:41:ff:79:7f:81:7c:c8:4d:c1:21:e6:
                    ca:45:2f:7b:e7:c2:ec:7e:fe:97:c5:d3:7b:f7:46:
                    8e:0e:c6:e4:6c:f1:7a:09:6b:f8:ad:9e:80:ea:4a:
                    ed:1e:34:f3:08:d7:58:48:6a:0d:25:bf:c3:77:27:
                    87:58:0b:61:cb:d7:2d:64:36:0c:4b:11:04:d6:a6:
                    86:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:90:33:01:56:E8:DA:AF:49:9D:6A:F9:1B:94:47:D1:51:EA:03:F7
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/D85EC03E89B111F1A0F0A18C4711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:19:21:fe:f5:2d:85:c3:b4:32:a8:10:a5:d6:97:16:07:57:
         d8:d7:09:a7:18:9b:30:90:2d:30:1c:ca:9d:68:3e:03:8f:9f:
         91:42:5e:e9:67:03:b7:28:3d:12:20:78:03:fb:d6:39:12:4a:
         1e:06:fc:51:7b:ba:d6:bf:48:18:ad:db:78:8f:33:74:2d:cc:
         23:10:ac:63:52:f6:98:19:ac:b2:1f:96:0e:6f:96:42:69:d7:
         59:0d:57:fa:1c:95:17:96:26:20:97:73:81:fa:09:d9:7f:41:
         10:5a:84:44:73:77:d0:d9:50:b1:a7:da:ce:de:1f:4b:74:88:
         69:c3:fe:d9:72:25:43:11:b5:3e:35:27:4c:4e:70:12:37:21:
         a1:ab:b1:3a:f4:45:0d:f3:e1:0a:a2:47:8c:01:2d:89:a7:3a:
         c7:44:f6:b5:ed:63:b4:86:83:25:72:89:96:84:54:3c:3d:58:
         31:5d:f8:37:d0:89:ac:9e:d6:af:03:a2:47:b1:15:ba:71:91:
         17:6e:df:fe:98:11:b3:8d:1e:0a:54:51:65:1d:67:57:11:c1:
         cd:84:95:9b:92:d0:54:cb:fa:3c:9f:59:ac:c8:6d:59:fb:04:
         9d:c8:c9:77:58:92:b6:6c:cc:80:88:be:78:84:42:4e:10:40:
         50:35:61:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:17 2026 by rpki-client