Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/67651980457511F1A878DB0BB4833773.roa
File:                     67651980457511F1A878DB0BB4833773.roa (raw, json)
Hash identifier:          GjVTK2ytg9BrTHoilrkMS80z8PqnneVdCKJsJLnsMTU=
Subject key identifier:   11:93:7A:92:B5:20:B7:6A:D4:31:D4:AE:BF:FA:42:2B:4E:9C:8F:43
Certificate issuer:       /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
Certificate serial:       2BF3
Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/67651980457511F1A878DB0BB4833773.roa
Signing time:             Fri 01 May 2026 15:49:57 +0000
ROA not before:           Fri 01 May 2026 15:49:57 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140456
IP address blocks:        160.22.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11251 (0x2bf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957
        Validity
            Not Before: May  1 15:49:57 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69f4cba5-1231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:b6:0b:dc:e1:7f:6b:fa:6a:a7:79:f3:f3:
                    a2:84:57:5a:ec:3a:2f:93:94:fc:38:96:a5:3d:e8:
                    55:4d:a8:16:b6:60:f2:a6:6a:e5:df:70:db:3a:c0:
                    bd:26:e0:d3:41:f9:99:51:fc:8b:32:f1:17:34:fc:
                    77:31:6e:98:b5:94:f3:4e:b3:ed:7d:26:6a:61:8f:
                    2c:30:87:fc:82:29:b7:ab:dd:01:23:c5:97:32:15:
                    d1:ef:6c:9f:7f:cb:b6:ae:59:5c:5f:b8:41:a4:ee:
                    d2:7a:99:de:93:b0:44:ac:36:0e:e6:4b:6b:9b:80:
                    01:86:6f:3e:d2:1d:b1:1e:29:35:af:eb:92:9b:73:
                    95:99:4c:b0:4c:6c:fc:4a:ff:40:12:17:40:6c:46:
                    dc:b5:0e:fe:34:42:e9:89:ca:ac:02:58:eb:70:11:
                    e2:47:30:62:29:2e:e0:5f:85:b7:ac:fc:de:89:da:
                    ed:28:f1:7d:81:22:3b:5d:3a:58:57:05:40:95:0c:
                    ac:78:40:f8:c0:0e:da:b2:e8:01:99:27:a3:a7:06:
                    fe:1b:ff:1b:57:7e:fd:13:4a:34:95:4c:5c:48:bc:
                    bb:a7:b0:3e:15:74:d1:af:7b:fa:e7:90:4b:84:f9:
                    36:ab:96:fe:43:01:8b:9e:83:73:75:9c:36:79:34:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:7A:92:B5:20:B7:6A:D4:31:D4:AE:BF:FA:42:2B:4E:9C:8F:43
            X509v3 Authority Key Identifier:
                keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/67651980457511F1A878DB0BB4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:de:27:cb:70:81:5e:e0:7c:99:b7:99:f3:18:29:18:43:85:
         41:fd:20:ff:99:fc:c6:3d:dd:e7:59:11:5e:b3:0e:db:be:b6:
         6e:d6:7c:2c:2c:65:55:8e:c5:79:7a:be:67:2b:e0:b6:da:fc:
         27:8e:6e:cc:47:ff:66:90:bb:0c:10:64:36:7a:70:fd:f0:7b:
         6c:d9:53:3f:ab:1c:da:47:a7:2b:5b:5b:e2:1e:49:a5:c0:8b:
         6e:65:1d:25:c8:cb:a1:5b:39:6b:ce:58:33:24:4a:97:d9:e7:
         ac:40:29:2d:3f:d5:c2:96:45:d7:38:cf:09:83:e9:88:92:7b:
         d7:72:74:f5:0d:b8:7b:15:60:d7:fa:57:bd:de:2b:98:e7:b0:
         71:ed:59:01:fc:e3:86:27:c0:e8:58:49:85:2b:cf:64:40:16:
         09:65:e5:d8:d3:f7:88:1b:40:09:83:10:80:bf:21:ac:7d:2c:
         d1:74:f4:cb:4e:9d:38:08:b3:fe:42:d9:ad:7c:60:10:cd:d7:
         31:c5:5f:de:69:63:70:8c:ee:3e:d5:2b:8b:19:c2:02:75:d5:
         a2:07:22:db:f2:c6:70:cf:d1:7b:3f:a3:66:99:26:d3:6e:f5:
         4b:9e:8d:f5:92:5a:ca:58:c9:a7:4c:9e:e7:52:43:05:e0:12:
         49:19:43:45
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICK/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2
MUY4MkE5NTcwHhcNMjYwNTAxMTU0OTU3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY0Y2JhNS0xMjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwmS2C9zhf2v6aqd58/OihFda7Dovk5T8OJalPehVTagWtmDypmrl33DbOsC9
JuDTQfmZUfyLMvEXNPx3MW6YtZTzTrPtfSZqYY8sMIf8gim3q90BI8WXMhXR72yf
f8u2rllcX7hBpO7Sepnek7BErDYO5ktrm4ABhm8+0h2xHik1r+uSm3OVmUywTGz8
Sv9AEhdAbEbctQ7+NELpicqsAljrcBHiRzBiKS7gX4W3rPzeidrtKPF9gSI7XTpY
VwVAlQyseED4wA7asugBmSejpwb+G/8bV379E0o0lUxcSLy7p7A+FXTRr3v655BL
hPk2q5b+QwGLnoNzdZw2eTT05wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBGTepK1
ILdq1DHUrr/6QitOnI9DMB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQjdGODE5NTgzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNjc2NTE5ODA0
NTc1MTFGMUE4NzhEQjBCQjQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoBb6MA0GCSqGSIb3DQEBCwUAA4IBAQCC3ifLcIFe4HyZt5nzGCkY
Q4VB/SD/mfzGPd3nWRFesw7bvrZu1nwsLGVVjsV5er5nK+C22vwnjm7MR/9mkLsM
EGQ2enD98Hts2VM/qxzaR6crW1viHkmlwItuZR0lyMuhWzlrzlgzJEqX2eesQCkt
P9XClkXXOM8Jg+mIknvXcnT1Dbh7FWDX+le93iuY57Bx7VkB/OOGJ8DoWEmFK89k
QBYJZeXY0/eIG0AJgxCAvyGsfSzRdPTLTp04CLP+QtmtfGAQzdcxxV/eaWNwjO4+
1SuLGcICddWiByLb8sZwz9F7P6NmmSbTbvVLno31klrKWMmnTJ7nUkMF4BJJGUNF
-----END CERTIFICATE-----
Generated at Wed May 13 00:43:42 2026 by rpki-client