Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa
File:                     0386A52403A911EF851C9E18C4F9AE02.roa (raw, json)
Hash identifier:          9RQ/xh1RdlEx0QPSJi3WhzTRtheveBLtIv+nozloTvY=
Subject key identifier:   95:4F:6B:63:56:AF:65:62:69:EC:F9:02:2C:40:5A:BF:70:A7:4C:DF
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C38
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:29 +0000
ROA not before:           Thu 08 May 2025 15:54:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152582
IP address blocks:        157.20.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11320 (0x2c38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1c5-1184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c1:98:3a:8b:74:9f:78:a0:3a:e2:fd:09:95:
                    3a:99:26:44:ee:26:2b:d2:c4:32:cd:ae:6a:95:cb:
                    2e:a2:a3:ae:44:81:bd:2c:83:f0:ba:16:36:ce:7e:
                    9e:df:2e:43:ec:c1:2e:b3:0b:87:fd:82:91:5b:c1:
                    b0:21:c1:36:1c:35:a1:f8:89:de:d2:e8:bb:f7:a9:
                    2b:fa:4f:9b:1c:6c:81:64:36:52:d0:78:8b:47:bd:
                    88:11:dc:73:e7:c6:f3:26:45:b6:97:37:1a:f6:80:
                    21:d6:38:a4:72:dc:59:68:12:a4:1c:c4:66:a0:09:
                    a0:d9:b5:68:45:0f:91:7b:ec:6b:c1:e5:e5:94:53:
                    74:46:57:79:f2:88:0a:60:42:7b:32:2c:59:bc:c8:
                    a3:c9:d9:4e:07:18:22:cf:77:21:14:eb:e3:1f:6c:
                    f9:42:a2:6a:2d:f4:d2:63:dd:b0:dd:66:c8:55:75:
                    3f:0b:3b:a9:9f:31:1e:4f:a8:fe:1b:e2:a3:e0:93:
                    3a:43:51:27:53:d8:0e:5f:d1:58:3c:f5:02:0b:87:
                    45:32:ee:cb:29:d5:3b:36:36:81:d8:d5:80:e5:ee:
                    54:03:66:a0:d2:cd:c5:dd:dc:9f:a4:61:a8:16:ca:
                    60:a9:34:19:23:0b:48:11:f6:02:61:c3:1d:f3:a6:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:6B:63:56:AF:65:62:69:EC:F9:02:2C:40:5A:BF:70:A7:4C:DF
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/0386A52403A911EF851C9E18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:d5:c8:ac:33:98:a6:e9:9c:9c:cf:5f:5e:78:96:ae:60:ed:
         b6:f4:8d:4c:f5:26:ef:0b:1c:06:34:c8:8a:53:45:1c:1a:b9:
         71:78:fe:0d:48:a9:fd:65:4e:f6:98:d9:9a:e3:f2:9a:69:ce:
         81:6f:42:03:6f:fe:ea:80:98:23:22:da:7c:d9:31:9c:6f:a7:
         d2:25:88:3c:72:bd:a3:74:34:1d:2b:4f:78:9a:a3:ac:09:bc:
         64:8a:ef:1c:ea:c7:99:2d:6f:1b:d7:55:8b:f7:38:20:9d:89:
         6b:60:12:8d:c8:ad:19:b5:fb:8c:f4:45:81:1f:e7:71:20:81:
         68:a7:89:dd:3a:e7:4d:b8:b3:8d:59:9c:da:73:fe:b6:7a:d6:
         c3:e3:82:c1:df:55:c1:8f:b3:3e:e6:f7:5e:3f:a3:4e:db:40:
         2b:47:ac:db:5c:7d:76:eb:34:74:4e:47:d5:49:ea:ca:d4:37:
         fc:f9:36:3b:5b:8b:5a:e9:ee:47:16:e4:9b:c0:a0:2e:c7:18:
         66:e1:3a:e1:85:9d:5e:af:89:92:87:d8:b2:c9:7f:e9:9b:71:
         69:ee:69:07:f1:53:a1:78:c9:eb:6b:ce:0b:9b:9e:2d:a8:b9:
         c4:f8:50:52:5f:92:1f:c3:37:64:bf:5c:5f:31:9f:1b:96:9b:
         a0:ca:dd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:28:42 2026 by rpki-client