Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
File:                     93E4A4E82E1C11EFB674EB7FC4F9AE02.roa (raw, json)
Hash identifier:          mg2Daz7xSCLbuvpgFjdTSQaJ2nfzA1qz5iYbf96C2Lg=
Subject key identifier:   92:93:0F:8D:F2:78:3E:C9:4C:39:55:C8:72:CF:5D:38:C5:10:7B:71
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2DF6
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa
Signing time:             Tue 12 May 2026 07:13:52 +0000
ROA not before:           Tue 12 May 2026 07:13:52 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138718
IP address blocks:        160.22.132.0/23 maxlen: 24
                          160.187.182.0/23 maxlen: 24
                          162.4.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11766 (0x2df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May 12 07:13:52 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6a02d330-085b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:ab:08:d7:d4:d8:78:4b:c7:1f:a0:f1:4b:
                    82:74:8d:b9:3d:c9:c5:18:8b:03:ca:34:5b:8d:3a:
                    b5:a0:2f:f1:d4:95:a6:8a:23:cc:c1:35:cc:4c:43:
                    be:56:6a:16:a9:f5:96:36:2b:73:07:cc:f6:44:8a:
                    a3:40:43:c7:ac:ee:b4:d3:9f:5d:c6:db:e5:69:12:
                    b2:3c:1f:ff:a2:bc:dd:ed:db:e1:e1:cb:ca:05:8a:
                    41:7f:17:dc:91:06:57:30:48:b6:a9:0a:91:6a:94:
                    b5:6f:64:48:8d:aa:34:73:23:31:ab:f8:85:b6:a3:
                    df:1d:19:8b:e2:f4:01:18:62:44:17:62:57:a8:91:
                    26:2a:91:75:25:11:12:a8:92:7a:34:a8:48:1a:2c:
                    ef:3b:71:34:ac:e6:6c:d2:85:f9:b0:e7:a3:87:2e:
                    56:0e:ca:3f:15:e3:a2:40:bc:5c:e9:b0:8b:b6:3e:
                    ed:9e:cc:de:44:8a:34:1f:f5:fc:9b:f3:0f:a1:2b:
                    b8:85:46:1d:7c:84:06:a1:cb:f2:a9:7d:eb:52:4b:
                    82:20:29:79:d5:7a:eb:df:01:bc:2f:be:a5:af:99:
                    76:4d:4a:f0:f9:28:04:47:b9:3b:0b:3e:82:11:af:
                    2b:86:73:1b:55:c3:e7:d6:dc:3a:e8:a4:58:4e:4e:
                    6a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:93:0F:8D:F2:78:3E:C9:4C:39:55:C8:72:CF:5D:38:C5:10:7B:71
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/93E4A4E82E1C11EFB674EB7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.132.0/23
                  160.187.182.0/23
                  162.4.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:76:72:0f:1c:50:1f:8c:77:aa:b4:83:1a:88:35:94:2c:e2:
         4e:de:6e:34:af:a2:91:fc:8d:00:7f:c0:68:51:c0:4f:d8:0e:
         74:c1:08:f4:13:42:ec:f8:98:72:a3:a9:fc:24:df:6b:e3:dd:
         5a:c7:6f:66:dd:6d:a2:88:c8:f6:08:af:74:97:80:e9:db:e5:
         91:88:de:97:b4:7c:6e:7c:40:ad:0b:07:16:db:8a:87:32:11:
         4b:77:de:78:70:43:3f:07:32:fc:70:15:42:89:d9:ee:b5:f0:
         c2:d1:84:74:3c:db:05:1e:b0:43:d3:5d:6f:01:5a:e1:23:5d:
         1c:d8:44:1f:c5:99:4e:a0:27:04:31:f9:71:c0:7f:05:12:33:
         67:c3:cf:71:40:00:5c:bf:74:e8:e1:34:85:b2:51:0d:ae:bb:
         6f:17:e4:e9:a9:6c:73:90:d6:6a:d9:c5:a9:51:af:a4:10:e8:
         45:86:b9:f1:d8:3a:6c:f9:a2:e3:ba:e4:e5:e9:95:e7:07:64:
         61:cb:0a:51:69:27:57:ec:f0:9a:56:01:e7:eb:c7:f5:65:a6:
         09:02:7b:da:1c:b6:1c:38:ad:aa:ee:d2:32:e6:12:9e:30:98:
         ff:aa:ca:8f:39:7a:c8:60:13:32:56:91:89:ba:da:1a:b2:76:
         de:bd:b9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:22 2026 by rpki-client