Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CAA7182633311F196CE79BD8B47A888.roa
File:                     3CAA7182633311F196CE79BD8B47A888.roa (raw, json)
Hash identifier:          qW2e3rhRMiR2fELcqyaYMz2X9lF0r13WIqxuS8McClM=
Subject key identifier:   C2:29:9D:EE:B9:FF:5D:E6:0D:87:C2:EC:10:AC:2D:77:0D:FD:56:4C
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       3035
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CAA7182633311F196CE79BD8B47A888.roa
Signing time:             Mon 08 Jun 2026 12:11:54 +0000
ROA not before:           Mon 08 Jun 2026 12:11:54 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153256
IP address blocks:        160.191.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:20:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12341 (0x3035)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun  8 12:11:54 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a26b18a-88af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:a3:cc:c4:f3:7e:45:8c:be:6b:b8:ab:15:
                    de:a8:70:13:9b:28:1e:eb:78:8e:fa:be:0e:f9:04:
                    32:26:2a:b1:9e:59:ac:fe:5d:79:d0:9a:9e:ac:95:
                    16:cb:39:44:19:74:b4:ca:70:f6:3f:a6:df:eb:ea:
                    01:ce:4c:ca:f7:1f:31:08:04:7e:af:db:e3:05:d8:
                    65:63:14:ae:21:49:98:f7:bf:f7:82:e3:45:f1:ca:
                    c0:e0:8a:4f:89:27:09:d0:81:bd:83:98:80:aa:91:
                    4c:4c:07:38:20:66:cb:24:bc:39:66:94:20:07:70:
                    97:a2:7d:f6:47:af:fc:58:8d:79:87:50:9b:95:bc:
                    94:ca:9a:11:97:c4:50:48:e8:b6:7b:0f:9f:cc:b6:
                    e9:67:39:32:b3:b8:08:da:02:30:86:85:74:80:bd:
                    e4:2d:46:22:74:05:b9:20:24:e2:62:9f:02:63:06:
                    78:40:26:90:64:4e:2e:bc:d6:53:35:8d:fe:d0:16:
                    07:5e:97:f2:4c:90:0e:5e:91:24:5a:13:16:dc:5c:
                    6e:cd:d4:76:57:17:3f:46:39:77:52:3d:6c:c0:ca:
                    37:55:88:1a:02:48:02:58:05:95:4f:96:24:83:9b:
                    ab:5c:78:99:42:23:21:b7:d0:ba:7f:58:60:b7:86:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:29:9D:EE:B9:FF:5D:E6:0D:87:C2:EC:10:AC:2D:77:0D:FD:56:4C
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/3CAA7182633311F196CE79BD8B47A888.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.191.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:63:9c:1e:5d:29:9d:b4:49:50:43:ee:89:6e:44:d5:54:2a:
         28:95:5a:8b:2e:65:19:a1:2a:d4:96:2c:9e:54:68:e6:c7:1b:
         38:f8:a8:cf:95:20:5a:71:31:6e:95:2b:60:52:33:c6:f9:a8:
         09:cb:00:ad:e5:49:ca:6f:2d:c7:a1:cf:52:99:bd:1d:ca:46:
         d0:c0:9c:5e:ba:6e:32:0a:de:c8:27:fb:44:17:61:0d:8c:40:
         cf:08:59:97:ee:c8:87:16:dc:c9:f3:78:82:1e:40:ef:9f:61:
         41:ea:c2:ed:97:14:40:44:83:c1:93:91:8e:95:bf:10:43:33:
         bf:9b:06:0b:1c:2e:63:f3:d3:8f:3c:22:ff:82:9d:62:a0:c2:
         07:f6:77:a8:8a:cc:8c:31:16:41:46:91:91:b0:ea:99:b9:09:
         12:da:89:0f:8a:ba:0c:c6:d1:0d:d5:1f:65:5c:fb:33:3e:ff:
         c7:4a:e0:bc:25:c1:7a:0a:cf:9e:af:26:9b:89:4f:d6:1e:c1:
         9c:86:35:4e:9a:8f:ad:c3:93:ee:5a:d6:04:6d:ee:f6:9e:bb:
         a2:b9:0a:d7:f8:a6:70:e0:81:9f:89:e2:3e:b1:7f:7b:a1:90:
         c8:22:e6:b6:4d:b0:03:35:da:a1:86:0c:0c:4c:05:81:ca:28:
         61:d6:23:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:27:36 2026 by rpki-client