Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
File:                     ECB98052057511F1AF941BA6343D8C67.roa (raw, json)
Hash identifier:          29KxdPQG9ynzrMx8tx0q3SkLdwBifjAYKiCjhv/9CKE=
Subject key identifier:   59:C3:78:1F:D6:54:06:8F:5A:F2:20:D7:45:FF:9E:0B:1A:DA:53:E2
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       FF
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa
Signing time:             Sun 01 Mar 2026 17:17:54 +0000
ROA not before:           Mon 09 Feb 2026 05:12:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153384
IP address blocks:        160.191.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 14:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: Feb  9 05:12:27 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a474c2-124f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:57:77:3d:b4:3a:ee:19:2e:46:98:7f:f1:45:
                    31:a4:dd:35:61:8d:cd:40:c4:3b:bc:7d:e3:8a:7e:
                    9b:79:cf:1d:2d:33:e8:4f:f0:e6:77:5b:58:49:2b:
                    43:3c:ad:a3:52:29:c3:0d:9f:f0:61:db:65:d1:f4:
                    9e:5a:a0:09:02:77:ea:3d:63:67:08:65:bc:73:9e:
                    d3:13:b5:52:e6:51:eb:72:89:a3:13:ed:0a:66:fa:
                    34:97:a9:95:e2:77:38:66:98:b1:d9:e0:e1:0a:21:
                    68:00:c3:b7:3e:8c:fd:2d:60:d3:fb:06:43:5e:53:
                    cd:dc:f3:01:04:0a:89:e5:c3:5d:bb:43:5d:c2:5c:
                    3a:80:bf:5a:6c:62:5d:01:83:6b:e6:46:cf:09:7d:
                    ed:5b:1f:62:4a:85:fb:68:f3:73:c5:a3:0c:b7:60:
                    61:2e:e5:19:82:ce:25:6f:7d:f1:0b:d4:90:07:2d:
                    42:f1:41:18:ea:f9:0c:df:d6:c6:ce:0e:a5:ed:fb:
                    f8:49:2d:e7:90:b4:10:dc:6b:a3:02:d8:e8:3c:e6:
                    12:b5:60:79:12:17:8c:6b:48:0f:4f:09:be:c9:cb:
                    33:99:71:01:0c:70:73:9f:f4:bd:83:e5:9e:48:d0:
                    17:b8:fa:19:09:43:87:31:05:b3:a7:65:9b:ae:a2:
                    66:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C3:78:1F:D6:54:06:8F:5A:F2:20:D7:45:FF:9E:0B:1A:DA:53:E2
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/ECB98052057511F1AF941BA6343D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:04:5a:dd:4f:fd:5b:d4:ea:45:43:5a:60:7d:81:69:fd:
         d5:5b:4a:23:73:64:e1:1e:9b:8b:0c:19:dd:f5:d8:43:f3:4f:
         e8:73:69:42:e1:cd:44:aa:fd:0a:c2:22:05:51:51:ea:a2:b0:
         74:39:9b:eb:dd:8f:99:7d:1f:a8:d9:58:0d:44:e5:fa:7c:68:
         7f:b2:5f:91:c7:ed:b3:38:89:dc:d4:0b:63:9a:25:5b:3d:13:
         2b:22:b6:6c:80:14:74:48:b7:af:db:7a:ea:a5:e5:ee:cf:11:
         40:d4:c6:b9:4a:99:ff:36:0e:8e:f6:bf:00:3e:01:56:8c:01:
         53:5e:5b:4a:32:72:5b:f9:b8:17:ae:4c:0f:65:b9:dc:57:9a:
         54:98:67:a0:ea:c2:32:e8:98:5c:06:74:1b:7b:08:07:fc:18:
         1b:c3:71:fa:b8:2d:67:ef:55:52:9b:e2:94:24:83:96:4a:42:
         d4:d1:65:64:db:3e:af:1c:91:d9:d7:8e:47:a2:6e:5c:80:4f:
         e8:1d:42:82:64:e9:3c:89:63:a3:39:cc:8c:8f:4d:a3:91:8f:
         f0:95:de:a9:6a:39:80:87:fa:c4:a5:08:26:17:63:9b:65:52:
         32:98:5a:cb:b8:bc:8e:c1:4e:32:07:5b:50:e5:0c:c6:3a:19:
         ad:44:57:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:11:07 2026 by rpki-client