Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6181EC9ED32211EF8C674C55C4F9AE02.roa
File:                     6181EC9ED32211EF8C674C55C4F9AE02.roa (raw, json)
Hash identifier:          toXTAR7Zcu9qEWtJn2+g+H4JCaPmrTPutRHdeXS5MQI=
Subject key identifier:   53:AE:4A:75:16:E0:59:84:AB:C3:68:3A:BD:BD:B5:2A:C3:B1:0C:70
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C4E
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6181EC9ED32211EF8C674C55C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:59 +0000
ROA not before:           Thu 08 May 2025 15:55:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153248
IP address blocks:        160.187.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11342 (0x2c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:55:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1e3-7661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:80:2c:bf:3b:9b:b0:39:c3:97:68:39:f9:ee:
                    48:82:29:2a:71:b7:1a:69:b1:e0:d4:13:dd:f4:90:
                    b2:03:e2:f8:5d:fa:82:ba:00:eb:86:98:97:a3:33:
                    13:20:75:f6:33:94:84:b7:5f:c3:9b:79:81:9c:86:
                    fc:2c:4f:30:d7:38:da:0d:1f:94:7c:fb:84:99:ae:
                    30:43:69:39:2b:7f:27:85:03:20:c3:f5:46:36:89:
                    a3:e4:18:3d:86:12:0b:4f:b5:3a:90:96:be:57:d2:
                    f3:24:36:e7:10:db:25:47:69:ee:c1:b5:d4:ce:da:
                    50:8b:f5:b4:5d:6c:db:9e:89:7d:c8:a9:b7:ca:3b:
                    9a:ac:3a:ea:31:ac:d4:3b:3e:f1:9d:21:e9:be:8f:
                    bb:9e:8f:50:97:87:e8:3f:10:02:e7:11:d6:f5:fd:
                    33:73:d9:3f:39:2e:e0:b4:12:c3:7a:00:1b:28:8e:
                    cf:ac:c6:92:ed:6e:96:48:ee:0a:f5:be:1a:d0:a9:
                    61:a1:af:d2:45:f3:c2:0d:f9:52:14:49:8f:2a:16:
                    eb:cb:31:2a:c1:a6:22:99:a4:8a:30:4a:e5:39:a4:
                    bb:a4:3a:7d:69:6d:e5:98:19:31:cf:e4:22:81:8c:
                    1c:e2:d9:9c:1d:7a:6a:2f:1a:93:27:cd:74:79:46:
                    72:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AE:4A:75:16:E0:59:84:AB:C3:68:3A:BD:BD:B5:2A:C3:B1:0C:70
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6181EC9ED32211EF8C674C55C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:42:67:f2:66:e0:e6:9e:35:e5:6e:9a:b7:4c:67:a5:91:72:
         63:4a:78:40:3d:6b:c3:d7:ca:ff:2d:e9:c3:e8:45:16:01:a5:
         51:c6:07:c5:e1:f1:55:91:67:eb:c6:8e:59:d6:da:8e:95:c9:
         75:75:c1:21:67:73:41:e9:a4:f7:45:4f:5c:95:b3:cf:88:79:
         7f:3a:12:7d:ac:67:33:cc:73:51:2c:f6:63:36:24:26:27:f6:
         dc:ec:e6:ff:ab:79:9e:d8:0f:52:7f:5d:37:65:38:26:0f:8e:
         d9:e1:52:b2:3f:e1:9d:8d:af:9b:c1:02:ca:ec:60:98:d2:6d:
         8f:bc:ed:a0:7e:0c:11:72:08:df:d6:6a:3a:c9:aa:36:94:10:
         10:e8:ee:f0:32:b7:47:84:6b:6e:d2:f1:06:d6:ee:ca:be:59:
         8c:06:cb:e0:e7:4f:77:2c:1d:43:da:bf:3c:3d:3d:86:9b:cd:
         29:c3:ba:cb:65:4b:ee:10:c9:d4:7e:df:63:c5:23:cd:74:ea:
         99:04:52:fa:b5:3c:1b:0d:d1:c6:06:88:1e:c6:68:66:90:d6:
         2a:f6:f7:82:40:c7:6b:3d:61:61:9c:95:d2:3d:75:75:fc:26:
         4e:26:ca:d0:57:e4:44:32:b8:45:73:bf:49:ae:66:4d:87:86:
         b7:5b:3b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:30 2026 by rpki-client