Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5506004E5B9611EF9174A45EC4F9AE02.roa
File:                     5506004E5B9611EF9174A45EC4F9AE02.roa (raw, json)
Hash identifier:          hNAV+ECWPPVZ2xt65AJkMeXFpFDSeDgauizDqn3XFUQ=
Subject key identifier:   60:63:C6:F9:C0:D5:A6:8E:55:47:16:EF:E7:EA:E3:84:73:C2:8E:B5
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C2B
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5506004E5B9611EF9174A45EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:10 +0000
ROA not before:           Thu 08 May 2025 15:54:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152555
IP address blocks:        160.30.114.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11307 (0x2c2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1b2-e685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:39:06:13:3c:5c:e4:ce:31:69:0d:87:57:
                    f0:e8:a1:a0:69:fb:b8:ec:67:3d:d5:10:02:f4:e4:
                    85:37:f2:bf:89:55:b4:28:db:76:a1:36:be:e9:e4:
                    23:8a:a9:ad:50:12:83:28:cc:67:fb:ba:dc:c6:c8:
                    7c:53:15:f6:57:b7:b8:38:7a:46:e3:d0:e9:70:71:
                    92:8c:f6:49:ef:7c:8e:8f:d2:0b:a9:69:9b:30:90:
                    1f:c2:3f:56:ab:56:22:4b:c2:14:ed:c4:56:91:20:
                    ee:2d:a1:bc:28:c2:24:84:47:3c:f9:37:6d:a1:bf:
                    cb:d7:69:c9:81:6f:e6:10:90:f2:8c:f2:1d:8d:a9:
                    c4:bf:26:9a:a1:7e:52:2f:e3:a1:78:cd:aa:55:90:
                    0d:79:1b:c0:f3:50:d9:9c:65:45:a3:e8:18:5c:61:
                    fb:87:f6:7a:51:fe:de:2c:e1:f3:08:a4:b2:fe:be:
                    38:e1:12:b3:62:5a:59:f1:51:b9:32:79:60:b0:fb:
                    58:a1:47:11:1f:90:01:20:a2:ac:94:92:d8:47:35:
                    01:64:c9:d7:c4:c2:33:94:d3:59:59:6e:86:d0:50:
                    3b:62:2b:6c:c3:fc:46:13:c2:f2:f3:c9:59:8b:15:
                    25:a7:0e:f1:98:b6:3e:c9:3d:73:30:e8:14:bf:c7:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:63:C6:F9:C0:D5:A6:8E:55:47:16:EF:E7:EA:E3:84:73:C2:8E:B5
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5506004E5B9611EF9174A45EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:12:16:3a:0d:b3:0e:f7:d8:fe:85:2d:83:8e:16:f0:35:26:
         b9:89:06:2d:06:88:b2:7e:c4:6e:7e:1d:c5:f7:94:d0:55:63:
         8a:5e:eb:3d:02:df:47:09:cb:8a:54:86:91:2e:be:a7:a3:23:
         f0:6e:21:91:ae:e5:61:cb:21:9e:70:69:f5:cd:61:c9:8e:9b:
         e8:ca:a1:4a:60:ea:1a:ba:7e:6c:c6:d5:87:3b:1e:a0:fd:85:
         32:00:68:53:6b:d8:81:17:20:ac:4b:6a:10:32:c7:b8:7c:16:
         14:ba:f2:35:a2:93:85:83:2a:65:f4:05:b9:d1:ad:50:06:98:
         8e:d8:b2:b5:98:09:de:dd:a1:21:ec:9c:65:0c:cd:7b:b4:4a:
         06:33:fc:fc:08:60:b1:05:1d:64:80:cb:95:a9:a9:50:c1:1f:
         de:fd:c9:10:6f:0c:84:ee:13:62:44:5c:e8:d2:55:5a:ca:c7:
         11:49:58:ab:1f:23:e6:1e:ff:61:da:13:10:32:45:40:46:58:
         bc:d4:d1:98:9e:c1:1a:67:9e:9c:68:2d:ba:2f:65:3b:9f:85:
         68:89:a6:06:82:e7:f3:3e:f6:3a:7d:f5:bb:9c:db:d0:9c:e9:
         cb:82:a8:d1:a6:67:60:44:6a:61:b5:9c:69:74:89:21:9c:f4:
         b3:14:3a:e1
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF
QkU2OTczRjkwHhcNMjUwNTA4MTU1NDM2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YzFiMi1lNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApC05BhM8XOTOMWkNh1fw6KGgafu47Gc91RAC9OSFN/K/iVW0KNt2oTa+6eQj
iqmtUBKDKMxn+7rcxsh8UxX2V7e4OHpG49DpcHGSjPZJ73yOj9ILqWmbMJAfwj9W
q1YiS8IU7cRWkSDuLaG8KMIkhEc8+Tdtob/L12nJgW/mEJDyjPIdjanEvyaaoX5S
L+OheM2qVZANeRvA81DZnGVFo+gYXGH7h/Z6Uf7eLOHzCKSy/r444RKzYlpZ8VG5
MnlgsPtYoUcRH5ABIKKslJLYRzUBZMnXxMIzlNNZWW6G0FA7Yitsw/xGE8Ly88lZ
ixUlpw7xmLY+yT1zMOgUv8d0eQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGBjxvnA
1aaOVUcW7+fq44Rzwo61MB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw
RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj
X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNTUwNjAwNEU1
Qjk2MTFFRjkxNzRBNDVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBoB5yMA0GCSqGSIb3DQEBCwUAA4IBAQCNEhY6DbMO99j+hS2Djhbw
NSa5iQYtBoiyfsRufh3F95TQVWOKXus9At9HCcuKVIaRLr6noyPwbiGRruVhyyGe
cGn1zWHJjpvoyqFKYOoaun5sxtWHOx6g/YUyAGhTa9iBFyCsS2oQMse4fBYUuvI1
opOFgypl9AW50a1QBpiO2LK1mAne3aEh7JxlDM17tEoGM/z8CGCxBR1kgMuVqalQ
wR/e/ckQbwyE7hNiRFzo0lVayscRSVirHyPmHv9h2hMQMkVARli81NGYnsEaZ56c
aC26L2U7n4VoiaYGgufzPvY6ffW7nNvQnOnLgqjRpmdgRGphtZxpdIkhnPSzFDrh
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:37 2026 by rpki-client