Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/723488165EE311EFB9E28222C4F9AE02.roa
File:                     723488165EE311EFB9E28222C4F9AE02.roa (raw, json)
Hash identifier:          WyWNANzf3sjGCJpOrYr4mD52M3TTMcE3Mrh0OXa8cfk=
Subject key identifier:   63:D3:AF:B5:FA:98:0F:E7:3D:63:DE:67:69:0E:18:65:E7:10:7B:68
Certificate issuer:       /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
Certificate serial:       2BBE
Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/723488165EE311EFB9E28222C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:43:25 +0000
ROA not before:           Thu 08 May 2025 15:52:47 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138302
IP address blocks:        160.30.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 09:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11198 (0x2bbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9
        Validity
            Not Before: May  8 15:52:47 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c10d-5721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:1e:45:19:d4:5e:c5:6c:4d:3c:a4:c1:6a:
                    3a:47:68:5a:d8:8d:a1:4e:65:f3:c9:ad:ce:dd:8a:
                    30:db:18:47:42:8e:5b:00:56:c0:39:3e:c5:5a:3e:
                    a4:c3:4c:33:de:2e:2b:9c:ed:ef:40:c1:9f:b4:2a:
                    a1:dc:0b:38:3b:f2:cf:21:3a:92:82:6b:ba:3a:a0:
                    b8:96:ab:f1:14:96:15:fb:14:86:89:97:dc:fe:ae:
                    9d:bb:70:53:4a:22:fd:e5:05:66:38:b6:18:da:ff:
                    dc:e9:90:14:74:23:f2:2e:65:61:50:50:34:4d:2e:
                    17:c7:91:60:fa:6c:a9:c4:56:06:73:b6:04:b6:7a:
                    4a:cc:76:13:72:bc:36:8a:35:57:b1:a5:5f:88:e9:
                    77:fd:d2:12:53:f8:e3:1b:e7:fe:e8:d6:c8:a2:a0:
                    46:77:d3:2d:2c:61:07:d5:df:38:00:9c:86:48:7f:
                    1f:56:fa:67:42:fc:9b:8f:31:b1:c2:d7:f5:09:3d:
                    34:50:31:bb:e6:44:00:dd:07:84:e4:fe:d7:4f:84:
                    29:e9:c6:14:6e:af:ec:a6:e3:c0:b4:fc:27:da:be:
                    c3:ea:9d:25:dd:4f:bf:9e:96:a9:17:d1:02:3b:92:
                    4e:15:ed:95:f7:27:9b:11:3a:6e:0f:d8:91:32:6c:
                    0e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D3:AF:B5:FA:98:0F:E7:3D:63:DE:67:69:0E:18:65:E7:10:7B:68
            X509v3 Authority Key Identifier:
                keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/723488165EE311EFB9E28222C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.30.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:ed:b5:7a:61:17:0c:ad:6a:56:f1:c4:c2:21:d0:b1:9d:02:
         51:30:ef:e8:f1:bb:66:67:fa:21:c1:e7:77:aa:99:94:40:1f:
         83:37:80:8e:b8:f0:e1:bd:e6:da:dc:de:4d:5c:98:ca:d9:c0:
         46:70:db:6c:68:dc:42:a4:55:33:b4:5b:bc:8a:f5:29:3b:43:
         98:1a:cb:ae:7f:d1:fb:76:45:75:4d:9e:09:be:9b:3d:a8:4c:
         67:5e:4e:07:75:96:f2:a0:c4:e5:41:22:32:63:0d:42:e9:7e:
         dd:0c:6a:b5:ea:f0:07:f6:f7:ed:5a:79:7f:8c:80:8c:d5:f1:
         d2:05:50:f6:2f:fc:d3:45:b1:6c:e3:03:36:26:28:cc:c8:b8:
         b0:36:e1:c1:f8:cb:bb:2b:61:08:cd:18:59:76:96:5a:f2:51:
         1b:18:31:f2:a5:2d:9a:b4:8d:ae:2c:b3:83:19:c8:ff:cf:26:
         94:50:28:0b:4b:17:c8:f6:42:f6:0d:67:f6:68:cd:9b:8e:d4:
         64:67:ff:de:94:2d:09:ed:30:74:04:07:bb:64:80:da:6a:ed:
         4d:c4:6f:34:7a:34:3f:57:85:5b:75:f7:75:39:bd:dd:80:70:
         55:ad:19:a1:76:b1:36:23:39:85:29:6b:74:99:d6:2f:c8:5c:
         9c:8d:e7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:15 2026 by rpki-client