Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/256914F0981A11EFB7D55339C4F9AE02.roa
File:                     256914F0981A11EFB7D55339C4F9AE02.roa (raw, json)
Hash identifier:          9IYeof6CH/AZztZQZCr0EeZ+sKa8yoqYFbRRhh7AHg0=
Subject key identifier:   C8:B4:82:FC:48:FD:AF:60:6E:3A:99:7B:76:13:6D:21:12:CE:B5:CD
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2B98
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/256914F0981A11EFB7D55339C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:42:32 +0000
ROA not before:           Thu 08 May 2025 15:52:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     132559
IP address blocks:        160.22.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11160 (0x2b98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c0d8-54ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:4e:1e:15:46:8a:98:6d:c4:37:15:81:c0:19:
                    1d:11:32:f0:d6:ec:ef:53:b0:86:73:97:ba:76:3b:
                    4f:78:45:f0:49:a6:16:24:65:45:ed:1c:49:79:10:
                    3f:0c:d5:cb:67:ef:17:56:04:4f:00:7e:0e:ec:87:
                    70:89:9a:ac:3a:ae:23:4e:55:53:80:26:eb:0d:02:
                    c6:1b:52:f2:18:c7:b7:5b:0f:5c:e2:36:dd:d7:1f:
                    3a:83:fb:d7:b0:31:e2:80:35:68:00:3d:5f:34:a2:
                    4e:43:22:1b:dd:41:55:d1:72:62:92:8b:aa:48:5a:
                    a1:00:ec:4e:1d:ed:e7:4e:2d:99:93:37:d3:b0:03:
                    93:5a:dd:f6:1d:e5:94:f1:f5:ec:bb:a9:8f:dd:b1:
                    98:59:99:4f:1b:79:fa:2e:68:76:b5:c0:f5:d9:35:
                    a9:b7:70:f4:07:fc:17:46:3a:3e:74:d5:da:11:7b:
                    a5:a1:d8:02:fd:6d:b0:53:34:a6:11:46:ee:f2:38:
                    9f:16:8c:4a:93:58:55:bc:15:04:c2:e2:84:dd:0a:
                    82:13:ad:ec:54:73:af:65:66:0e:b6:20:56:48:b7:
                    f8:18:c4:92:52:63:71:81:48:0d:fa:11:45:0d:59:
                    96:93:7e:1b:34:f1:40:9f:d2:7a:a4:86:4c:53:e0:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B4:82:FC:48:FD:AF:60:6E:3A:99:7B:76:13:6D:21:12:CE:B5:CD
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/256914F0981A11EFB7D55339C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ce:dd:61:bc:03:ba:f7:65:52:9f:13:70:d5:ca:24:6b:75:
         b0:87:7b:94:e5:7d:ff:6e:78:45:2e:ad:e0:0a:c3:53:17:60:
         38:e3:2e:0a:05:e2:6b:fa:36:17:a0:29:92:27:e9:8c:1a:73:
         7a:eb:0e:28:06:44:dc:23:c3:8d:13:9c:bb:77:2a:b0:54:3a:
         90:28:86:eb:6c:da:77:31:dd:3f:00:b3:4b:cd:62:22:dd:eb:
         09:dd:8d:08:77:23:ba:c1:3b:35:5b:63:61:00:89:4a:49:69:
         e6:e9:94:e4:33:6f:bb:db:d9:2f:9c:c9:41:46:15:46:96:d5:
         79:e1:35:e4:40:1b:f8:2f:b1:17:61:d2:7c:20:dc:53:c9:eb:
         b3:6e:82:17:74:03:bc:c3:b9:3d:a5:89:27:e9:85:91:59:b2:
         b2:fd:7a:51:45:d9:cc:71:0e:42:1f:2f:39:14:7a:ac:f9:7b:
         40:e2:82:c6:d5:99:44:ca:e1:30:f8:04:fa:d4:52:34:1c:aa:
         d8:98:69:01:e2:a1:0d:6e:42:83:ff:5b:82:6a:43:7d:15:b2:
         ba:2b:52:ef:31:fd:6b:9e:4d:af:fa:0d:5d:76:72:50:ec:12:
         a1:0f:a5:06:1e:f7:aa:0b:86:46:f2:e1:18:de:b3:9f:2a:11:
         f6:91:b3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:10:59 2026 by rpki-client