Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5860496C4DCA11F09594452DC4F9AE02.roa
File:                     5860496C4DCA11F09594452DC4F9AE02.roa (raw, json)
Hash identifier:          O4Qvavpk3cE81Gn3IdTjfcsFf39VOVt4CjCxl6rs9tk=
Subject key identifier:   60:4F:48:4B:15:41:5F:54:FA:50:5F:0E:51:1C:D6:3A:51:CC:72:08
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C8D
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5860496C4DCA11F09594452DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:48:30 +0000
ROA not before:           Fri 20 Jun 2025 11:33:11 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137680
IP address blocks:        165.101.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11405 (0x2c8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: Jun 20 11:33:11 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c23e-f904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:49:55:88:e6:d1:53:bd:a8:a3:46:8b:1f:fd:
                    92:5c:f8:a6:b2:6c:5f:fe:8a:de:13:de:61:8a:02:
                    b9:71:4c:3b:3c:52:6a:55:02:39:e3:ed:3a:f7:a5:
                    6a:86:c7:99:44:13:3b:ab:cb:71:fc:60:80:8a:95:
                    e8:9f:77:c1:53:90:3a:30:0c:dc:df:a4:2e:94:2c:
                    cf:4e:de:0e:e5:c8:07:5b:d4:c8:39:bb:56:57:4f:
                    75:4f:9e:f8:0c:fb:c7:fb:f5:63:07:67:1d:22:4f:
                    35:53:2a:b7:d0:25:54:3c:89:93:cc:1e:eb:6b:71:
                    de:64:82:e7:2f:50:5c:c6:6b:d9:a1:5e:e9:f9:79:
                    a5:c5:75:d5:ff:2c:62:2d:d4:66:b5:71:eb:5d:bb:
                    80:7f:3f:f6:e3:22:91:3a:4c:af:61:49:6d:39:bb:
                    34:d1:3a:b0:81:e9:6c:bb:35:23:19:47:22:b7:42:
                    19:f8:01:eb:0b:01:bb:0e:54:34:ad:b2:43:7b:51:
                    83:21:a1:62:6e:11:55:47:84:36:55:7b:01:09:a9:
                    22:5a:f4:ed:70:eb:6f:95:71:70:1d:ee:9f:59:4c:
                    37:25:7e:64:f0:67:37:0d:7c:66:b6:bc:3d:37:be:
                    71:6e:38:8e:19:b8:2b:83:8b:f6:ed:61:ae:16:8b:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4F:48:4B:15:41:5F:54:FA:50:5F:0E:51:1C:D6:3A:51:CC:72:08
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/5860496C4DCA11F09594452DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:52:ff:6d:cd:9e:13:cb:2b:05:80:a9:b2:0e:cb:51:e9:2a:
         5d:07:46:da:69:4d:c0:de:20:22:b0:08:71:27:3c:03:e3:79:
         e4:ec:20:44:2a:da:39:89:71:31:be:4f:cc:6b:be:81:c5:37:
         60:f2:20:2d:f8:ed:77:3f:a2:10:b2:26:f6:10:87:fa:2d:db:
         1a:60:23:2c:00:8b:37:67:c6:94:83:30:f8:94:f5:5c:10:e0:
         5f:46:4d:da:cf:aa:76:db:17:ef:f7:9b:fd:90:d6:b5:fc:f6:
         7a:a6:90:4b:02:d2:f5:5f:6b:c0:c4:91:3f:7a:bd:6c:3e:18:
         7e:59:2c:8b:41:70:03:fe:02:58:34:d4:dd:90:a9:a6:c3:33:
         15:74:c8:bd:23:98:01:f4:ed:c6:c4:d9:9f:12:bb:83:af:3d:
         2d:ff:29:ad:dd:6c:b4:02:b7:dd:1e:7a:c3:3e:91:7e:8c:3c:
         9c:c2:11:65:31:fb:dc:4c:3c:53:b9:24:47:66:e4:19:de:35:
         8d:26:c2:3c:28:8e:8f:29:d4:09:fb:51:70:83:e4:bf:93:25:
         66:bc:da:81:48:cf:51:6a:6f:ff:b7:2c:b5:27:a8:71:27:6e:
         b2:8d:51:4c:73:d0:7b:23:50:68:cc:97:ef:44:57:49:e7:b4:
         87:91:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:32 2026 by rpki-client