Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6985399AAE1611EFA961AF3BC4F9AE02.roa
File:                     6985399AAE1611EFA961AF3BC4F9AE02.roa (raw, json)
Hash identifier:          E/eZ6ArZMe75LVY4nW66w3tPDklRLV+LDx+8ilaOsRs=
Subject key identifier:   98:08:A5:80:C6:3C:E7:CB:AC:0C:B0:83:A4:A0:20:6D:14:D6:37:68
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BA3
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6985399AAE1611EFA961AF3BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:42:47 +0000
ROA not before:           Thu 08 May 2025 15:52:18 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134858
IP address blocks:        160.187.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:10:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11171 (0x2ba3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:18 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c0e7-89a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9a:f2:02:9d:95:11:12:eb:8a:9f:72:80:fb:
                    f7:ea:36:15:8d:36:92:55:15:a2:86:f3:5b:0b:d2:
                    d1:a0:ec:7a:3d:29:7b:93:88:a7:53:0b:28:22:16:
                    81:18:8b:32:59:4d:61:50:02:bd:16:7d:55:46:2b:
                    5b:e4:98:71:c8:99:b2:c6:47:e0:66:0a:68:99:16:
                    87:57:5b:94:15:7c:f8:49:35:13:6b:22:63:0d:fe:
                    83:50:8f:7b:74:88:ad:bc:91:fa:a7:bf:c2:7c:28:
                    90:41:cf:e5:17:b4:cd:20:4c:49:cc:44:b3:a7:07:
                    c6:00:d4:64:81:58:b3:de:f9:4c:0d:17:05:24:31:
                    ed:c2:ba:1b:f5:03:47:69:74:5f:3d:dc:1c:fb:53:
                    be:a9:da:db:54:9a:73:5d:c7:13:b3:31:90:a4:01:
                    a9:96:95:12:92:76:4f:66:da:8a:c3:fd:aa:70:24:
                    de:f3:dc:dd:4d:9a:54:bc:0d:31:6c:d3:23:fe:b0:
                    b7:5f:83:2d:da:8a:9a:02:08:8b:c9:94:a9:9d:81:
                    c1:80:58:12:a8:5f:79:0c:85:9c:85:b5:9d:86:05:
                    13:a6:21:76:07:4a:0b:31:8d:e2:a8:33:38:68:df:
                    c7:f7:37:3a:9c:56:25:2a:7e:33:48:24:34:86:c7:
                    f6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:08:A5:80:C6:3C:E7:CB:AC:0C:B0:83:A4:A0:20:6D:14:D6:37:68
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/6985399AAE1611EFA961AF3BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:7c:c3:44:5d:e1:64:7a:a6:4d:56:54:74:10:ee:3f:08:35:
         2d:2f:e7:a6:02:18:1f:f7:bd:d4:3f:9b:d9:21:5a:73:19:bc:
         20:2b:45:7c:41:9d:99:21:2c:a5:a4:d5:c4:fc:c6:a8:5e:be:
         ce:21:72:6f:89:d5:21:95:b1:d7:31:9c:67:d2:ab:e1:da:06:
         9b:94:96:2a:41:44:71:19:3e:fb:b4:a5:35:a0:a2:eb:36:0b:
         e8:82:0e:9e:5d:b5:b1:bd:81:90:da:9c:4a:85:ce:af:00:f5:
         b8:e0:46:f4:39:bf:74:35:fc:fc:96:cc:83:0e:5a:e0:79:27:
         24:60:3c:c7:66:12:40:99:bf:af:b8:41:dd:31:eb:22:c4:5a:
         6a:54:eb:80:b2:32:7e:2f:fe:72:b3:f8:86:0b:f9:cd:20:66:
         28:e4:8b:42:dc:bb:44:f2:7d:50:98:37:79:89:db:56:5d:66:
         95:15:01:f2:e0:e1:40:8e:b6:c2:55:87:eb:f7:20:43:8c:db:
         79:e4:22:f1:5a:90:3a:84:c6:c3:09:02:6b:32:d6:a3:f1:aa:
         2c:aa:23:36:33:ab:4c:53:7a:52:24:83:9a:c3:77:e0:73:45:
         34:d9:0e:6c:7f:f9:5f:8f:e6:1d:99:ae:29:62:ac:78:0b:fe:
         07:14:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:50:19 2026 by rpki-client