Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/710F6176F31411EE8671CD66C4F9AE02.roa
File:                     710F6176F31411EE8671CD66C4F9AE02.roa (raw, json)
Hash identifier:          d8nLOV8SVd0v0YPrEPUzDJokm1z8ijIA18rrwqH0fyI=
Subject key identifier:   AE:E4:7D:A2:47:D0:57:F0:D8:52:9D:63:7B:EE:68:09:4B:01:ED:70
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2C30
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/710F6176F31411EE8671CD66C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:46:18 +0000
ROA not before:           Thu 08 May 2025 15:54:40 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152565
IP address blocks:        157.20.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11312 (0x2c30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:54:40 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c1ba-8ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:83:e2:9f:01:fb:5f:7b:eb:c8:bc:aa:61:
                    d0:17:5a:b1:fd:cc:95:2c:bb:d2:e8:b2:81:86:34:
                    b7:bd:b7:c3:89:17:7a:07:9d:f7:66:c3:1c:b6:46:
                    7c:c7:e2:3c:55:8c:dd:e2:93:1b:4a:8c:f2:03:eb:
                    2f:80:79:83:10:18:84:96:72:9b:09:78:17:e1:17:
                    27:d1:64:c3:c5:cc:9a:2b:dc:c0:e2:97:31:6f:5b:
                    cf:1a:d5:44:60:db:b2:a3:7a:e9:14:ee:04:44:ab:
                    b4:29:08:93:7a:5e:43:cc:e4:55:5a:07:a0:63:7a:
                    9b:32:46:0b:9f:5e:66:21:72:f8:be:e7:5f:61:cd:
                    c7:a0:af:96:43:96:0c:8e:65:ba:7b:b8:ed:7f:86:
                    3c:b5:87:c8:0e:69:2d:cb:f9:3c:30:06:36:96:8d:
                    f7:b5:fd:a5:d7:77:5d:4e:81:47:0b:99:89:93:f0:
                    20:84:fb:bd:45:c2:b4:28:f0:fa:21:a9:94:ea:83:
                    c2:e9:3b:ae:1b:7b:e1:18:9c:02:4d:e5:ee:cc:d7:
                    d6:01:e8:7d:bb:cf:0e:fd:a3:27:99:7a:f8:4f:85:
                    0f:66:c2:8a:20:7a:d8:88:54:9c:28:f3:7a:98:d1:
                    f4:92:0b:7d:ba:93:be:26:1d:91:cb:30:90:74:1c:
                    88:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E4:7D:A2:47:D0:57:F0:D8:52:9D:63:7B:EE:68:09:4B:01:ED:70
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/710F6176F31411EE8671CD66C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:79:bc:96:40:b1:f3:83:12:ca:b4:d0:04:77:b2:08:15:28:
         8e:03:e9:72:71:f5:50:c9:61:c8:26:49:ea:6b:a0:f3:6c:7a:
         08:64:44:5c:8f:9f:e0:16:88:37:4c:e2:59:d0:c1:f8:82:69:
         c0:84:8a:09:9b:62:e2:f1:41:6b:a3:f9:65:33:db:30:19:fb:
         3a:fc:6d:ef:ed:db:1e:07:74:82:f2:be:75:ce:e9:13:9b:1b:
         0c:5e:46:be:b7:4e:7e:e2:c0:3d:90:2c:74:69:5f:c3:c8:fc:
         a4:c8:e7:39:0e:ff:1a:0c:37:1d:8a:c7:a3:b2:6c:f2:06:c0:
         91:97:b1:9a:73:e2:57:b7:96:b8:f7:aa:66:d2:70:e6:e5:81:
         8f:e3:8d:e2:59:a8:0b:4c:54:70:3e:08:9c:92:d5:06:37:04:
         a7:70:55:4a:76:6e:d7:94:aa:d5:a8:7e:ce:66:40:ae:76:56:
         f2:8d:37:e9:fc:15:1b:11:8b:95:01:5e:a1:0e:18:9c:fe:73:
         67:24:c7:7b:6a:7b:43:f3:f6:1b:51:79:d8:9e:c8:7f:bd:ff:
         1b:38:df:7b:8b:d0:f4:7f:f9:37:2d:1c:06:a3:aa:05:73:94:
         53:48:d9:96:0a:ce:14:fe:ee:22:85:3e:0e:8e:5c:fd:2b:0e:
         73:44:5a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:09 2026 by rpki-client