Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02C127C465EF11EF99BF2B13C4F9AE02.roa
File:                     02C127C465EF11EF99BF2B13C4F9AE02.roa (raw, json)
Hash identifier:          fB8QAwaMZRgELYxYh91yv472eqY90xWyX6NbNtZ3CQM=
Subject key identifier:   1C:EF:DB:12:B1:87:68:87:1A:88:C0:10:4E:CE:6D:41:F0:BD:48:A3
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C3C
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02C127C465EF11EF99BF2B13C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:34 +0000
ROA not before:           Thu 08 May 2025 15:54:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153213
IP address blocks:        160.30.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11324 (0x2c3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1ca-5f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:66:57:5f:35:44:4c:22:9d:13:b8:f7:8c:
                    aa:97:69:df:8a:2c:b1:64:68:5d:dd:d8:6f:d3:99:
                    78:80:ae:ab:fc:24:a7:31:ff:5e:f8:51:d1:aa:26:
                    92:2c:b1:d7:11:a8:ad:ba:e1:32:f5:1d:b8:1a:20:
                    db:88:90:a9:43:5a:09:a0:a5:d3:16:59:81:30:76:
                    54:b2:02:87:8e:ad:5a:4c:44:b6:41:e6:11:bd:fe:
                    da:d6:42:cb:9f:f2:6d:68:7a:4c:05:fc:46:41:a8:
                    16:b0:4a:76:27:0b:87:11:00:49:10:66:6d:61:1d:
                    40:b9:fe:5a:7e:b1:15:63:d4:c9:0f:4d:77:9b:22:
                    bf:52:43:27:a0:42:95:ae:80:e6:c3:13:45:49:65:
                    9f:e4:42:61:2a:b6:f5:f1:9c:31:7c:24:69:af:2f:
                    0f:b7:1e:2c:74:b4:a9:b3:84:94:22:ca:50:d3:9f:
                    e4:0e:d3:6a:50:2a:ca:ab:17:7e:4c:fd:88:40:66:
                    e7:36:0f:4f:fa:5e:f8:89:2a:3e:a8:8c:6d:30:23:
                    0d:6a:21:d7:39:a0:4f:d7:bb:53:58:f8:8e:4b:da:
                    4c:73:17:06:6a:89:6b:c2:06:fd:c9:99:ae:87:f7:
                    28:1a:7c:78:7b:3b:97:a6:49:71:68:1e:7f:55:f0:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EF:DB:12:B1:87:68:87:1A:88:C0:10:4E:CE:6D:41:F0:BD:48:A3
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/02C127C465EF11EF99BF2B13C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:4f:d7:c2:24:7d:17:b6:2d:b9:44:43:f6:32:08:50:2d:
         5a:6a:8b:91:46:1a:65:cc:79:59:97:e1:81:cf:70:d0:80:b6:
         89:41:15:a8:8d:64:58:6e:e2:71:3a:86:0c:a9:4b:3b:8b:be:
         39:b8:e7:32:b4:ba:3b:f8:a2:64:3d:cf:02:3f:82:4a:40:c0:
         1d:df:e9:ea:73:6e:c5:9c:c2:9c:83:c9:22:c5:0d:e8:17:cb:
         47:a9:4d:ac:f3:58:de:5c:4e:c7:ce:fb:99:fe:8a:26:7b:10:
         35:3c:65:d0:e0:30:74:64:06:24:7b:9b:b9:29:a3:83:df:28:
         09:5f:42:f7:7e:7f:bc:09:ef:c4:ea:be:ee:9c:b7:88:d3:51:
         28:80:40:8f:79:6b:83:83:bb:00:ed:80:12:fa:91:6a:c6:3a:
         0d:0b:31:31:9b:dd:93:8c:a5:7f:e7:3f:b4:18:45:d3:19:e5:
         61:dc:94:36:74:95:41:92:35:2e:81:62:bd:bf:e7:c0:36:ff:
         32:2f:ef:17:21:1f:bc:e1:96:85:72:40:00:01:22:a7:02:02:
         82:23:ca:55:eb:10:2d:84:42:1a:fe:4f:88:c3:95:a0:b4:8d:
         50:63:dd:71:c3:fb:33:05:4d:9f:9f:d9:c0:53:a5:02:3c:e8:
         fc:85:25:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:59 2026 by rpki-client