Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
File:                     F62807A4A89111EFB9118F2BC4F9AE02.roa (raw, json)
Hash identifier:          28GcKHnsJr5dp6pOTaC4esUDUAUtue+vrEz3XPh1QmY=
Subject key identifier:   BC:DD:24:32:20:47:91:CA:3C:A0:7A:F1:47:CD:1A:44:BB:40:05:F4
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C48
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:51 +0000
ROA not before:           Thu 08 May 2025 15:55:01 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153234
IP address blocks:        160.250.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11336 (0x2c48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:01 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1db-996e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:cb:5b:a3:08:1d:ea:b5:8c:49:d6:2e:66:
                    6d:53:bd:ae:a7:9b:cc:5a:d6:62:af:c3:73:3e:2b:
                    27:de:17:c6:8f:c2:27:60:cc:de:1a:4a:8c:a0:20:
                    77:3c:f0:61:41:8f:90:38:f1:15:0f:49:d9:79:7a:
                    cd:3f:5d:f6:13:62:93:99:72:7c:cb:29:89:0e:8b:
                    72:33:92:c2:cc:3c:76:02:1f:82:77:48:89:87:a2:
                    d9:4a:de:b5:6b:09:e0:3f:9e:a3:9c:a1:31:23:06:
                    be:9f:3e:5b:af:b6:3d:1d:fb:b3:a2:e6:b8:48:87:
                    7e:98:09:ff:a7:78:bb:13:a7:b6:57:79:0c:a2:0a:
                    99:0f:c6:34:3f:f9:98:19:64:80:01:8e:03:3c:42:
                    39:50:85:d6:94:41:8f:3a:58:c9:cd:58:d3:51:2e:
                    7c:e6:7e:10:6b:2e:a7:91:80:7b:8c:65:77:03:6a:
                    1b:19:fe:e3:66:29:e8:9a:fc:85:70:76:70:92:fc:
                    4b:e7:81:bc:70:59:bb:c2:7d:21:03:20:35:9d:2b:
                    59:39:7c:fb:5f:8f:3a:26:71:a5:37:fd:67:0e:e9:
                    49:06:78:12:c2:70:29:ef:1a:e9:22:67:dd:a2:fc:
                    7f:ae:39:92:a4:f2:aa:2d:fd:a1:8b:df:20:35:00:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DD:24:32:20:47:91:CA:3C:A0:7A:F1:47:CD:1A:44:BB:40:05:F4
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/F62807A4A89111EFB9118F2BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.250.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:79:1c:62:f6:53:e0:68:9f:bf:d2:e0:ed:3e:62:c1:80:76:
         76:c6:27:9f:73:1a:f1:7f:c8:af:cd:fc:21:f1:28:52:79:31:
         00:a7:fa:18:0d:95:d1:73:84:c7:75:d4:cc:1d:30:cd:f0:99:
         6f:99:03:28:6e:a0:bc:5a:33:14:d6:ec:af:38:5d:0b:87:d0:
         cf:07:a7:ec:cc:14:7a:f7:03:05:95:20:67:c6:f1:c5:79:0d:
         e2:1b:58:36:ac:33:78:da:4c:9f:f2:1b:79:d1:a8:5b:c0:68:
         02:7c:12:6f:63:49:76:5f:42:55:bc:88:b2:f4:6d:ab:bf:c5:
         91:60:51:c5:7d:d9:0a:06:0e:51:09:d4:c5:5b:41:36:bd:28:
         cf:a5:ca:2a:1c:1f:05:72:43:69:f7:21:c3:c2:00:cf:af:3d:
         5c:a7:fb:14:f5:79:25:4f:16:86:fb:78:28:91:c3:06:03:b9:
         7d:e0:2a:7c:51:8f:4f:64:12:b7:8e:cf:d0:5f:c9:6f:7c:ba:
         ab:88:63:37:fe:dd:1c:4d:17:25:c0:ba:f6:f7:2c:93:7e:ed:
         ff:99:ab:3f:c6:47:2d:37:ac:8c:ef:d8:3d:ad:f4:ee:7d:ad:
         b9:d0:0a:97:7a:84:34:d8:70:ea:3c:9e:98:0d:89:2e:14:cd:
         5e:a7:ad:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:15:59 2026 by rpki-client