Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/6C722C5A6C8311EF90BD1B76C4F9AE02.roa
File:                     6C722C5A6C8311EF90BD1B76C4F9AE02.roa (raw, json)
Hash identifier:          d/JGaBLpmkO3WUCz9tKyP+O9vcCg+/yL5K82Ej4w80c=
Subject key identifier:   90:FC:DB:6E:CF:90:E3:BC:90:B8:56:B1:6B:0E:8F:05:6F:CD:B7:6E
Certificate issuer:       /CN=A916DB72/serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
Certificate serial:       018B
Authority key identifier: EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/6C722C5A6C8311EF90BD1B76C4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:33:58 +0000
ROA not before:           Thu 09 Jul 2026 06:33:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     45691
IP address blocks:        160.22.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:54:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=ECE2E0160161B6F77FC74976FA7D46C3E4232DEF
        Validity
            Not Before: Jul  9 06:33:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4f40d5-0f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:76:5f:3c:dc:b8:18:c2:e7:b9:f5:c1:17:5b:
                    dd:e5:c5:9e:71:66:c1:4c:df:14:90:9e:5f:c7:a5:
                    ed:8a:19:1b:24:fa:87:f9:da:57:0b:13:82:dc:75:
                    05:99:a4:49:e7:a7:c9:be:fd:ae:b0:6e:1e:e2:88:
                    38:6d:73:84:c2:94:13:38:71:44:1d:d3:10:65:6d:
                    0c:2f:7d:dd:d4:83:ea:4c:98:0a:f6:ef:d6:5f:c8:
                    de:2d:55:47:77:e1:f2:e8:ff:7e:4d:dd:b5:93:14:
                    4c:57:c3:9b:fa:da:47:92:d8:ce:1b:68:cc:47:08:
                    77:6c:b1:91:c2:2e:c3:d5:56:40:5d:89:95:2f:ba:
                    1d:bc:7b:6b:70:e9:2d:e5:8b:87:a0:09:4e:0f:20:
                    8e:fa:da:4d:d8:4d:13:94:97:bb:60:97:e2:35:bb:
                    53:ba:8c:84:81:4d:27:01:64:6b:c3:25:4a:39:05:
                    23:bb:55:73:13:dd:d7:d2:12:db:d6:a9:fb:cd:c9:
                    44:61:9c:8a:bc:b9:dd:21:b4:7c:ab:99:8b:3d:a1:
                    59:06:35:73:9c:0c:a4:84:a2:63:e8:1a:21:f3:ae:
                    16:1b:66:d5:f2:10:ca:f2:8b:45:5e:f8:ae:2a:13:
                    30:2f:92:29:f0:a3:9b:a9:3a:ab:17:90:0e:79:d8:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FC:DB:6E:CF:90:E3:BC:90:B8:56:B1:6B:0E:8F:05:6F:CD:B7:6E
            X509v3 Authority Key Identifier:
                keyid:EC:E2:E0:16:01:61:B6:F7:7F:C7:49:76:FA:7D:46:C3:E4:23:2D:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7OLgFgFhtvd_x0l2-n1Gw-QjLe8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/7D99ACAC31F411EFAE91A00CC4F9AE02/6C722C5A6C8311EF90BD1B76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:4a:3b:54:90:4d:09:64:8e:b9:2b:e8:98:89:dc:e7:1f:26:
         9b:ca:5d:f6:06:0c:59:a6:08:ce:59:32:d8:c7:73:3c:38:43:
         c7:75:30:e5:37:e8:69:9e:ba:8c:a8:4e:96:cc:ec:b6:1c:8d:
         af:75:43:ae:94:17:26:9b:3b:4d:ca:e6:8a:63:ad:88:78:5f:
         9b:11:88:36:99:f3:86:ef:3a:51:17:75:34:a3:1a:f4:b4:73:
         e8:a7:ff:47:d8:6e:bb:56:cb:e5:c6:dc:0b:0c:94:f9:ac:36:
         6c:75:35:7b:e8:87:76:8d:70:5a:ef:a0:85:d3:88:18:27:b4:
         b7:4a:61:58:83:27:e6:57:0c:b2:d5:f4:1a:ab:93:77:85:ee:
         45:54:bb:51:4c:08:79:48:86:ea:d0:48:21:2b:4e:cd:cf:47:
         c5:3f:d2:14:d2:e1:7f:6e:aa:c2:3e:eb:a4:29:16:b5:03:5f:
         6b:4c:07:c4:1d:48:20:2a:e7:ff:3a:75:f5:11:50:36:77:f3:
         f0:26:88:91:25:80:7e:0a:96:c6:79:38:a1:f5:80:69:d5:28:
         bb:06:7a:7f:77:de:9d:bf:dd:c0:e9:36:54:ba:00:9a:28:16:
         ec:2f:0c:e8:f0:5c:75:a0:ca:40:11:c1:77:88:e8:d5:df:72:
         29:df:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:18 2026 by rpki-client