Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8649EB6CF30E11EDAD4C2045C4F9AE02.roa
File:                     8649EB6CF30E11EDAD4C2045C4F9AE02.roa (raw, json)
Hash identifier:          e9H+jz/hZchgdGiS3/iTcBvDFlX7v5o6LqElpGdGTjM=
Subject key identifier:   92:A4:0B:DF:CC:58:A2:45:3C:EF:3D:4B:39:D3:83:B8:E4:43:BF:68
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E865
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8649EB6CF30E11EDAD4C2045C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:26:57 +0000
ROA not before:           Sun 31 May 2026 17:26:56 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     148001
IP address blocks:        160.202.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59493 (0xe865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:26:56 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6f60-ee7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:93:d0:23:f2:ac:cf:4e:9f:85:9f:46:87:
                    99:6c:be:ab:d9:0f:c6:43:1d:da:98:87:28:ed:86:
                    a5:17:f5:c4:61:5f:79:17:6f:2c:18:2c:38:1b:b9:
                    b5:bc:2a:9e:63:8e:b9:87:2d:73:d4:fc:c6:e4:9f:
                    62:b6:f4:96:60:b5:c9:32:4b:a6:98:b0:db:bd:e8:
                    bd:7b:da:82:e0:1f:71:33:06:71:69:a8:e7:2f:27:
                    45:e4:bf:43:f2:5d:1f:6c:20:b2:f3:2c:c2:ee:5c:
                    5d:12:17:5f:b2:b4:e7:25:1b:4a:1b:eb:f6:44:dd:
                    65:3a:d8:29:7e:5a:a1:fa:24:64:88:67:35:ce:e2:
                    b8:b6:7d:ef:ef:53:f0:76:45:82:c1:8b:d0:46:d3:
                    04:32:40:0a:a4:86:95:2e:56:77:3a:e8:28:31:4b:
                    d1:11:74:41:a4:8e:48:15:11:f9:bb:d0:4c:e5:90:
                    58:fd:34:98:dd:78:a1:00:e0:14:0a:82:fd:9b:77:
                    81:c3:cf:22:3c:3d:af:f8:45:ac:52:0d:80:f6:ad:
                    6b:27:81:af:10:ca:64:b8:77:83:9d:2c:cd:5c:25:
                    65:d9:a6:1d:b6:52:fd:8e:1a:2e:4f:f3:2b:f3:0b:
                    7b:4f:20:e4:02:56:b1:0c:c7:2f:72:cc:e4:d7:07:
                    9d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:0B:DF:CC:58:A2:45:3C:EF:3D:4B:39:D3:83:B8:E4:43:BF:68
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8649EB6CF30E11EDAD4C2045C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.202.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:10:89:5a:01:79:3d:ca:cd:91:cd:7c:d1:54:01:81:84:
         6f:39:fc:db:57:53:4f:09:54:10:e5:53:75:64:e9:f7:60:b4:
         24:9a:0b:e9:e2:a3:d2:28:a3:d6:8e:8b:4c:b3:e0:be:86:4e:
         17:dd:21:66:4e:7b:b0:3c:bb:a5:91:05:88:a8:45:9d:00:67:
         5d:d0:ab:b3:69:08:f8:0f:b9:df:6e:ee:a5:84:68:d8:ee:22:
         02:3a:b2:69:67:7d:f6:e7:16:b5:ac:40:89:0d:38:0d:a7:04:
         52:8b:01:4d:bd:3c:ab:ff:09:b7:30:fd:7b:05:16:8d:95:30:
         2a:78:57:03:27:b0:f3:a7:bc:09:b1:fa:6b:d2:76:cf:0e:3d:
         7b:32:45:02:14:d3:eb:0d:d9:06:ff:b1:89:f7:57:81:6b:98:
         0e:29:26:45:a3:4b:b9:5c:54:74:e2:09:15:1d:fc:44:d4:06:
         4f:72:de:be:d1:4f:f1:44:c4:9f:c0:39:a5:f8:3f:5a:05:d4:
         c3:78:9c:00:08:fb:da:d7:2d:38:3d:8f:d3:01:8c:eb:4d:28:
         9f:d8:7f:2c:79:3a:f7:6b:44:00:7e:20:12:2a:b7:fa:59:9d:
         dc:2e:aa:56:1d:10:24:cf:ff:cd:3e:ac:44:a1:54:c0:11:b5:
         87:e3:08:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:31:47 2026 by rpki-client